Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: lA+bCRdmhwCUT/tEXNjbS8+mGsqavpVv2GFOlFEdeMA=
Subject key identifier: 94:3D:45:DB:20:13:C0:6F:A2:86:A4:B3:0A:78:1E:EF:C3:31:FA:73
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 0199FC8F591A403378651910563EE6C5DA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 0A3B
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: _XpEMn72FeEctOAcMkQobteNSkY.roa (hash: bnxUUX45W8TpYP9Drk2/xMaW53mScgsvGUmVXogbW1Q=)
2: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: 6yZKXrVtJgfgLxNiUpQ1ucK6Mj2cZMZKeGmGpbtmJsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:59:1a:40:33:78:65:19:10:56:3e:e6:c5:da:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=943d45db2013c06fa286a4b30a781eefc331fa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:bc:95:3a:5a:cf:ef:50:17:4c:ce:82:f9:
bb:11:bf:f1:02:87:85:af:51:f5:77:94:1c:a8:f0:
f5:79:8c:92:36:d7:bf:25:99:6c:97:8d:d2:12:35:
1a:ad:03:17:9c:97:42:a0:63:44:de:de:10:16:54:
06:bc:c7:66:5b:0d:c9:c1:85:3f:77:33:5a:ab:d9:
5e:06:05:81:74:5d:d8:1b:fd:c3:0d:02:d8:be:3e:
e4:e9:1b:33:d1:2e:f4:f3:de:25:c1:10:31:a2:b7:
5f:26:d9:17:94:39:95:e0:d2:5d:c6:b6:b7:d7:1a:
e9:73:bc:0f:b0:ca:3e:95:1b:d9:13:6f:b6:9e:93:
16:31:6e:b2:cf:c7:de:39:bd:0d:9e:d8:e1:18:07:
d9:58:c6:be:d2:e4:94:91:1f:ed:4f:00:18:0a:28:
e8:3a:05:cc:90:94:a0:b1:8c:c7:96:07:0c:a0:71:
c0:ca:3e:7d:35:29:78:85:2a:6b:27:14:bd:85:e0:
38:41:bb:55:cd:9b:d9:24:cd:a3:e3:07:2e:01:a4:
de:20:9e:fa:c4:cc:b5:14:f4:24:ab:04:76:bb:ee:
51:57:12:84:9d:bb:ff:e3:21:07:94:05:b8:4e:10:
f9:2c:4e:7c:50:a9:c9:e4:d6:c3:fc:07:4c:32:5d:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:45:DB:20:13:C0:6F:A2:86:A4:B3:0A:78:1E:EF:C3:31:FA:73
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:79:e3:f1:89:dc:34:d6:27:d5:a2:15:c6:3a:6b:df:73:80:
1f:0a:97:e4:81:bf:56:15:05:0c:33:19:bc:4e:e4:6c:14:0c:
aa:a9:61:43:79:0b:7f:0c:2d:16:1d:7a:95:85:2d:96:a2:8c:
0c:40:b2:85:8b:8f:05:8b:5f:eb:67:2a:45:07:5e:09:2a:55:
0f:0a:a7:6a:a6:ee:41:ad:46:17:95:44:cd:3c:ba:24:ad:17:
d9:53:b1:ca:0c:4c:2a:a4:fb:1f:d7:07:03:5f:3d:9d:5d:c1:
02:99:3b:f7:8d:6f:67:4d:ff:8a:fc:9d:c5:0a:8e:bc:23:d9:
86:18:36:1e:46:0b:31:55:c6:e2:a1:15:fa:d1:d0:e1:5b:dd:
0d:a3:ff:69:cd:ee:ce:eb:49:03:98:71:d1:68:c9:eb:c7:fe:
09:20:11:5f:c3:cc:43:91:6e:fe:01:cf:cc:77:2c:3b:cc:85:
a2:af:0c:25:9e:d2:98:33:29:a0:4f:72:ce:61:ff:6f:a9:3e:
6c:d8:ba:ea:9c:d9:0b:23:cb:f4:7e:7d:15:60:1f:5b:50:1c:
bd:b8:7d:51:7a:75:5e:e8:91:17:7f:06:ea:7c:9c:d7:0d:b9:
e6:fe:79:7e:cc:61:8b:12:88:42:a6:40:ea:fd:56:8f:fb:43:
dd:67:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:01 2025 by rpki-client