Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier: Xfzp1ekbutpzdzuBa/nNwUIoDFpl5Or21MaszxJTT3c=
Subject key identifier: D1:DE:69:CA:FE:0F:88:42:8E:6E:C0:C3:1D:B7:E5:B3:F9:ED:18:FA
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 0199FE0FFAE229ADB8815E9FC9A10AF08C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number: 0B9E
Signing time: Sun 19 Oct 2025 20:01:23 +0000
Manifest this update: Sun 19 Oct 2025 20:01:23 +0000
Manifest next update: Mon 20 Oct 2025 20:01:23 +0000
Files and hashes: 1: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: OKkbZEb+dp0tGqvraLCGktyXzm53zT3gramoC6qbmis=)
2: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (hash: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:fa:e2:29:ad:b8:81:5e:9f:c9:a1:0a:f0:8c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Oct 19 20:01:23 2025 GMT
Not After : Oct 20 20:01:23 2025 GMT
Subject: CN=d1de69cafe0f88428e6ec0c31db7e5b3f9ed18fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:a0:78:0c:21:a2:3e:53:03:d5:9d:be:cb:
ab:2a:69:9e:da:ce:17:56:c4:71:21:0a:d5:79:19:
f0:c9:a0:7b:69:a9:a6:d5:f5:7a:a2:ab:9d:57:ef:
17:3e:12:23:99:c4:d0:39:70:73:1f:7b:d7:d1:62:
a0:b6:66:88:5f:c5:51:16:13:64:58:f4:63:2d:56:
b8:b2:aa:91:fd:ab:78:6d:0e:b6:93:ae:4c:4f:28:
ba:3e:be:8d:e0:07:0f:43:37:3e:99:7d:4a:4d:e6:
91:47:4d:11:f3:f0:6c:69:b3:53:62:92:37:ee:26:
b8:f6:82:c5:2e:d8:a1:af:e2:ea:14:9f:c1:9f:70:
73:89:86:87:61:83:cc:fc:c9:1f:53:d0:04:a0:05:
0f:49:1f:10:43:11:bd:00:bf:a1:e1:47:48:19:03:
28:3b:25:19:42:f1:72:92:ee:21:fe:4c:02:21:13:
25:03:ce:60:8d:22:3d:65:e4:72:92:dd:2e:27:3c:
bf:ed:9e:3e:eb:01:90:08:ef:84:50:ac:ef:29:75:
7c:a7:34:0e:35:0e:ce:f4:6e:86:b1:00:a7:ef:1d:
02:d4:d0:28:c6:89:dc:ee:95:ff:b4:63:da:ea:bb:
de:89:f9:8c:34:40:11:70:68:24:e4:a6:9d:ef:ed:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:69:CA:FE:0F:88:42:8E:6E:C0:C3:1D:B7:E5:B3:F9:ED:18:FA
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b3:93:19:83:1f:8e:43:60:b9:22:30:ac:c9:b5:91:ce:ac:
bf:be:c7:ec:a8:40:df:3f:b1:ff:6c:09:e0:32:20:29:24:b3:
c0:09:68:e3:b8:34:4d:71:05:3f:3d:e4:51:f1:e9:53:08:e0:
ab:46:d0:fd:a6:87:50:e8:64:65:2d:50:46:96:3c:5d:33:7c:
2b:47:d3:de:10:07:13:26:f6:e2:fd:46:81:6e:e8:5c:98:b7:
95:7e:94:ea:84:e1:c7:78:ac:d7:5c:62:cc:20:57:d6:f1:7e:
ee:69:64:fa:d8:82:04:43:28:36:9f:70:17:10:ca:42:67:4b:
53:36:14:aa:43:13:66:0b:b8:a1:9e:9a:67:53:90:dd:e9:27:
56:fc:63:91:c7:06:63:2c:5c:66:dd:64:a4:e1:bf:00:52:a6:
1d:d3:70:14:f5:7e:42:a0:12:a5:da:7c:14:7e:90:c2:c9:a9:
64:bf:aa:64:0d:7f:31:33:3c:21:7e:7c:0a:6d:69:da:d7:c7:
b3:0c:44:69:b2:33:4c:6c:df:8d:bb:f7:57:bf:87:45:83:8c:
9e:20:bb:43:d3:dd:f9:4f:e8:82:ad:46:cd:b7:57:14:4a:94:
d3:e4:9c:3f:fc:34:fd:c1:b4:8e:6b:b7:53:96:ea:15:16:dc:
71:bb:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:42 2025 by rpki-client