Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
File: rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft (raw, json)
Hash identifier: MIv8EzJ3DThvebID6N1XyK+pwMR6fEfxAdapu64eWQ8=
Subject key identifier: 4A:9A:FC:B6:0B:AA:2F:5A:F0:96:C2:DC:E2:80:BD:EE:74:ED:96:FF
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Certificate issuer: /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial: 0199228C3E58C3B62F1300DB7C9198B92600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:00:40 +0000
Manifest this update: Sun 07 Sep 2025 05:00:40 +0000
Manifest next update: Mon 08 Sep 2025 05:00:40 +0000
Files and hashes: 1: e7v6KfsQ42Ju_th6J-KjayhE0pc.roa (hash: 2QzdBlDL7vaApFGThIZoir4ZfxpYLQiDlB23vrYFa1A=)
2: rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl (hash: wbCsI8wOYnY93F+LUuWOcHXnfbhlMvI0VndvBgsOY7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:3e:58:c3:b6:2f:13:00:db:7c:91:98:b9:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Validity
Not Before: Sep 7 05:00:40 2025 GMT
Not After : Sep 8 05:00:40 2025 GMT
Subject: CN=4a9afcb60baa2f5af096c2dce280bdee74ed96ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:93:fa:18:29:95:0e:53:55:05:3f:7d:12:
aa:9a:02:a1:9b:79:ab:63:bc:dd:9a:67:a6:0e:66:
34:64:de:45:80:a2:9d:d8:9d:64:9c:ba:e3:da:89:
05:cc:cb:68:61:d5:c3:93:fb:fa:46:98:62:d8:6c:
a6:cf:cb:f8:3f:10:09:25:28:37:a2:1b:65:87:5f:
b9:d8:1a:2d:4b:04:62:cc:13:fb:57:41:89:08:ef:
fb:60:e6:dd:46:16:b8:a6:7a:c6:41:24:42:e9:8f:
db:6b:7e:41:0b:cc:d5:2f:c6:e2:13:e5:8d:d4:b1:
1d:56:f9:21:59:b7:e5:9c:81:35:b5:14:42:d6:82:
c9:24:56:ef:d8:37:37:85:97:ed:1d:e1:86:e1:a1:
51:50:52:51:2d:fe:e3:c0:77:5b:2b:5a:19:26:1d:
e9:44:63:01:1f:22:23:29:1f:d6:e5:7e:d3:48:b1:
2f:6f:1b:bb:1d:8e:13:b1:3a:ee:93:35:ff:c1:59:
15:c1:26:97:e9:7e:e8:ef:56:bb:99:8d:1c:40:c8:
ed:29:b0:90:45:98:f9:85:0d:f3:6a:9b:b0:16:28:
1b:b0:e3:22:d6:b0:26:14:97:5d:d7:08:f1:b8:1b:
92:e2:13:82:18:1b:12:52:3a:a3:ab:da:5e:cd:72:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:FC:B6:0B:AA:2F:5A:F0:96:C2:DC:E2:80:BD:EE:74:ED:96:FF
X509v3 Authority Key Identifier:
keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:51:ca:ff:77:ae:7e:88:73:6c:d2:e2:62:85:fa:9e:fd:b7:
83:86:ca:26:d7:ae:e2:95:e3:fc:9b:30:1c:2a:2f:5a:1e:bf:
75:69:f3:1e:0a:5b:9b:62:f1:af:a1:8e:73:da:3a:7d:76:ee:
c5:65:e1:7c:04:b3:eb:ad:24:50:ac:a9:03:e2:30:d0:3d:b0:
10:83:87:18:a6:56:04:44:dc:c8:b1:7a:9a:0f:75:b6:f9:6f:
30:8c:8e:28:b8:da:78:70:4d:1d:6d:b3:99:ff:23:98:96:74:
61:f8:8f:4a:48:07:d3:7b:7a:ce:9a:5c:b1:6f:2f:1d:44:80:
7a:9d:fe:4c:15:51:45:d7:ee:0c:35:27:f0:f0:d4:43:9d:03:
e2:90:66:87:11:18:c6:db:09:30:c1:4f:53:9b:69:00:d0:4c:
d1:d3:84:80:d8:88:9d:78:fb:30:d9:f4:9b:5f:dc:f2:45:f7:
79:3a:2b:3d:d4:79:d8:ae:09:c4:0c:f0:28:f6:f1:b1:42:ea:
54:c4:f2:4a:1c:64:5d:4d:5f:99:14:6c:cb:55:fb:af:75:cf:
f8:7c:66:56:75:2a:ef:ad:c5:df:c2:68:ac:8f:16:c6:a9:93:
50:5e:9e:8d:9a:93:05:46:4c:5b:66:fe:2a:c7:84:6f:1b:d1:
3c:52:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:41 2025 by rpki-client