Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: VDAFfowB93YOSbunJAPHb4UO32Wq73kJmNz3g0io0HY=
Subject key identifier: 50:8C:21:F5:4A:4C:44:EB:73:C5:52:D7:8E:23:A0:59:4F:B6:E3:91
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 019A09DC3C4CC91A4BD98B8D2C96490AEED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0BC8
Signing time: Wed 22 Oct 2025 03:00:19 +0000
Manifest this update: Wed 22 Oct 2025 03:00:19 +0000
Manifest next update: Thu 23 Oct 2025 03:00:19 +0000
Files and hashes: 1: 5z9bF-s7mwN_rrIwiP6BUqF8WSI.roa (hash: UYifmQ1R2PC8Hli/npCQiOLYGwkMeaviE7TQe/6mbAs=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: EWpqpDsbWTPP+ey15WIqmu1Q3FhnBYxUI0OjVAP0inQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:3c:4c:c9:1a:4b:d9:8b:8d:2c:96:49:0a:ee:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Oct 22 03:00:19 2025 GMT
Not After : Oct 23 03:00:19 2025 GMT
Subject: CN=508c21f54a4c44eb73c552d78e23a0594fb6e391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:d4:c6:d1:4c:48:2d:ef:fb:5f:e3:73:c9:
ff:a7:a8:fd:1c:8b:81:02:39:2d:62:47:55:fc:2e:
4f:c4:27:ac:8f:c5:46:9f:c7:55:52:7c:50:2a:e2:
a5:3c:79:2f:f8:0b:5b:a2:b0:b0:3b:c7:65:b0:84:
a4:77:e3:7a:11:4f:66:ab:6f:3a:b9:d5:8f:21:c8:
ed:25:d3:f4:be:ec:07:d3:ca:1f:b3:0b:8f:e2:8c:
70:05:a9:75:d5:9c:20:66:09:7a:4b:84:01:2e:58:
a4:45:08:d8:41:64:10:7e:56:43:4c:90:66:63:d0:
b9:53:00:17:ae:c1:a5:01:f8:8e:ed:c8:8a:5e:5c:
bf:d4:f2:d3:8f:bb:84:51:5f:06:c5:02:e2:86:bd:
08:a7:3a:fc:1d:6a:3a:3a:bd:3a:d6:bb:85:c5:7b:
cd:9c:d4:b2:6c:8c:eb:29:1f:5c:1f:cc:12:e2:e4:
01:4d:76:a5:6e:e6:88:3f:a8:68:c9:8e:69:09:fb:
4b:6a:fc:ce:6f:e9:e4:0d:1c:3c:d6:99:f6:ff:16:
40:39:26:ae:4c:bf:8b:e7:0f:39:04:9f:d7:55:d4:
8a:5e:db:fa:e5:78:fe:ae:dc:3c:24:4c:63:70:8b:
0c:ae:81:8a:2d:30:78:4a:2e:46:86:7c:32:9a:5a:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:21:F5:4A:4C:44:EB:73:C5:52:D7:8E:23:A0:59:4F:B6:E3:91
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:14:f8:c8:a5:f6:8a:6a:75:ed:8b:21:6b:64:ad:c6:bb:dd:
66:7f:8c:65:63:9e:73:24:58:e6:39:2f:f8:d4:e6:06:9a:29:
1b:e3:55:4b:82:ac:f1:b2:49:8a:2e:95:95:1e:ec:7e:f5:a6:
df:9e:45:28:c7:01:39:e7:00:a1:df:46:9b:33:71:c4:32:d0:
49:3e:2b:7b:22:0f:5f:a7:00:b1:63:55:54:9f:9e:d0:9c:6a:
78:d0:e2:75:60:71:f0:d1:77:8e:66:7f:d0:f7:73:4c:96:ca:
ae:8b:3e:82:7c:80:c8:7d:e8:0b:3f:61:a5:bd:b7:ad:45:49:
bf:c6:63:68:45:96:02:b8:1c:9a:1f:db:5b:2a:db:9e:8e:46:
e8:08:43:99:fb:c6:fb:98:3f:ca:d6:13:6e:5a:6f:d1:18:b4:
1c:a2:bc:cf:3d:0e:9d:a4:78:d5:4e:78:27:8b:26:4a:9d:ea:
00:fb:e8:41:41:a7:1a:84:b5:b2:e4:31:63:91:ac:09:cc:0f:
31:73:f5:05:97:5e:ff:9f:1a:69:78:15:f0:35:8a:3f:83:95:
52:68:26:61:bf:2f:77:5b:7f:1a:82:75:45:a3:f1:2b:54:d3:
64:93:06:ec:fd:ff:5b:9e:84:43:11:02:bf:1c:68:43:0f:a1:
0e:5f:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:33:31 2025 by rpki-client