Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
File: _96Be-rkwKLVf3_D8IxifVZUDn4.mft (raw, json)
Hash identifier: nlqXKlXngIUqnm6Pv+2YxqBGAwNYeN8vFxhS9LMzo4E=
Subject key identifier: A5:59:C1:3A:86:5F:8D:5E:DC:55:B7:AA:0B:4D:F7:9D:53:A6:1F:44
Authority key identifier: FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
Certificate issuer: /CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Certificate serial: 0199FEEBF24A60E95F68EDB4D9B89B5F416D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
Manifest number: 06B1
Signing time: Mon 20 Oct 2025 00:01:39 +0000
Manifest this update: Mon 20 Oct 2025 00:01:39 +0000
Manifest next update: Tue 21 Oct 2025 00:01:39 +0000
Files and hashes: 1: 9iTVcABMKXRZ-jDsWu-61gCPaTM.roa (hash: np3kCerAysjg7QMTKvS1rZseKRBoSzKlF7Gczsl6PKA=)
2: _96Be-rkwKLVf3_D8IxifVZUDn4.crl (hash: m1z5b8aVS51G9cozmuZDPcux5gLaqWSFL4LHwSJc60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f2:4a:60:e9:5f:68:ed:b4:d9:b8:9b:5f:41:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffde817beae4c0a2d57f7fc3f08c627d56540e7e
Validity
Not Before: Oct 20 00:01:39 2025 GMT
Not After : Oct 21 00:01:39 2025 GMT
Subject: CN=a559c13a865f8d5edc55b7aa0b4df79d53a61f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:f4:6e:44:73:34:8d:7b:a8:42:27:63:f4:
6d:e3:b0:86:e9:3e:ef:5c:0a:f7:09:a8:a0:a8:d1:
4e:be:9a:f4:18:98:58:d1:b9:ed:48:92:dd:55:a6:
4c:89:e9:42:7c:60:51:23:00:e7:15:78:56:1c:09:
66:79:69:ab:c3:12:eb:56:b6:3f:a0:5e:5f:0d:8f:
cd:46:69:16:bb:a8:da:3c:19:d3:c5:cf:c0:9e:9a:
e5:38:e9:b3:80:31:af:53:d2:49:4d:8f:c5:9f:a5:
05:08:81:cc:46:3d:ec:14:a7:d3:56:41:a6:39:02:
0d:94:95:0e:1a:5e:4d:b8:6a:95:ce:a2:02:d9:ba:
48:1b:75:76:b0:b2:94:7d:79:90:dd:27:cc:49:90:
bb:4e:5c:81:c8:19:af:c2:62:09:99:3f:b6:3c:20:
71:47:9f:3c:71:ad:59:9c:a1:ec:e0:eb:2e:3e:d7:
bc:74:26:28:1e:cc:23:96:4b:cf:fc:84:ee:47:bf:
9e:a9:8f:ac:86:a1:57:51:fe:6d:24:57:a8:53:15:
85:28:8e:a6:45:07:d9:c5:d9:45:a3:17:b7:c6:17:
ae:aa:a8:5d:28:a9:a1:e9:70:61:56:ac:f3:13:7f:
08:3d:a0:df:ec:09:6b:67:fd:44:94:bc:89:7e:da:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:59:C1:3A:86:5F:8D:5E:DC:55:B7:AA:0B:4D:F7:9D:53:A6:1F:44
X509v3 Authority Key Identifier:
keyid:FF:DE:81:7B:EA:E4:C0:A2:D5:7F:7F:C3:F0:8C:62:7D:56:54:0E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_96Be-rkwKLVf3_D8IxifVZUDn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccfa17-30f5-451a-8e29-6cca66fd3c99/1/_96Be-rkwKLVf3_D8IxifVZUDn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e5:18:66:06:bf:43:aa:bd:bd:f8:f6:7f:d2:51:9d:d3:6d:
41:b2:48:34:ae:92:70:c0:9e:fc:38:e2:56:27:1d:04:d2:ad:
e5:2b:ea:eb:9b:b6:3e:22:66:b7:dc:02:7a:a0:f2:cd:50:ce:
10:4e:af:1f:ca:f1:8e:b7:b1:ca:fc:79:d3:41:cc:5c:90:58:
07:bd:98:c3:72:ec:ca:10:ed:a5:e2:3c:9b:f7:32:c2:41:9d:
01:17:c1:0e:ea:bf:6d:2f:22:2a:cc:de:71:aa:ec:38:73:86:
c4:65:a4:65:e8:e2:84:77:06:90:99:06:ef:a3:6a:48:bf:6c:
fe:bd:ca:fe:75:14:ae:b1:04:76:3b:07:01:96:10:04:1c:5d:
28:92:89:71:f2:8e:05:03:63:1b:65:63:ac:fa:b9:37:a1:ab:
7a:56:a8:84:b8:3c:71:17:49:f0:76:4a:ad:80:79:de:e0:74:
f6:31:50:a6:56:58:97:0b:5c:83:df:2f:8c:ef:a8:6b:dd:83:
f8:0f:5e:51:48:b4:af:2b:e1:95:66:82:d7:cf:70:66:71:b6:
b3:aa:2e:4c:64:2c:20:6e:5f:21:f8:c3:cc:9f:ed:31:74:5e:
4d:58:d1:ce:f7:68:f0:e2:f1:b9:58:1e:61:ed:ee:f4:6f:cb:
7d:6b:c5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:07 2025 by rpki-client