Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: 0KX0BT3JcVgLvdshuofOc4oD7zkt5mNj0E2zysIhdeE=
Subject key identifier: 3F:BE:08:12:DD:CF:66:BD:A9:61:11:E8:D4:12:82:9D:09:2F:FC:B6
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 0199FDD912123A183A1FD00FC3537CBFA8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 144E
Signing time: Sun 19 Oct 2025 19:01:25 +0000
Manifest this update: Sun 19 Oct 2025 19:01:25 +0000
Manifest next update: Mon 20 Oct 2025 19:01:25 +0000
Files and hashes: 1: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (hash: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=)
2: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: pBAseA9DNxZZIWXKadpnVLVZ+hBb1JDxRw02SH4zOQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:12:12:3a:18:3a:1f:d0:0f:c3:53:7c:bf:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Oct 19 19:01:25 2025 GMT
Not After : Oct 20 19:01:25 2025 GMT
Subject: CN=3fbe0812ddcf66bda96111e8d412829d092ffcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:c8:ad:f0:e5:cc:d6:14:2e:f5:9f:37:a4:
04:a5:64:71:2b:cd:db:a9:ef:b1:f7:e9:f4:70:49:
66:c6:bb:20:89:5a:5a:f3:05:3c:3a:c9:c4:f1:af:
2a:fe:b5:1b:68:9a:0a:8d:58:08:b0:ac:c0:29:93:
99:0a:f6:bc:5d:ab:0a:f3:45:8d:32:c6:69:62:b2:
7c:ef:4b:67:8c:f0:88:d3:7f:72:34:13:fa:5c:24:
a0:6c:0d:6d:47:da:d9:cb:45:f2:ba:c1:5c:a4:6c:
af:3b:65:5c:e1:c0:2e:af:1d:8d:c5:06:33:86:c8:
17:cf:bb:fe:db:75:b9:9a:75:32:09:2e:c7:8f:5c:
ba:1d:9e:df:56:97:a2:8e:3b:c6:35:3a:7a:55:08:
9a:1f:98:cf:af:93:ed:7c:44:0a:97:97:10:31:5a:
de:1b:7f:72:9c:bb:58:55:c7:cf:04:90:33:71:63:
ef:08:c4:5e:a6:c2:c7:89:dd:61:b5:34:6c:75:07:
28:03:ac:90:5a:08:90:5d:92:14:b6:46:ef:02:59:
b3:f4:2e:8a:40:a1:d8:67:5b:ac:5a:6b:07:d7:fe:
ae:84:50:fa:31:d2:c2:7d:b9:37:c7:b2:50:11:90:
97:0d:2b:df:f5:7e:c2:62:55:f6:14:31:cb:76:54:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:08:12:DD:CF:66:BD:A9:61:11:E8:D4:12:82:9D:09:2F:FC:B6
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:71:70:f1:fb:ae:f6:98:da:93:5d:df:7e:ba:29:0c:f9:79:
81:e2:e0:5b:91:7d:ad:37:8a:ee:53:bc:93:76:fe:06:27:e5:
a7:98:34:87:bf:ca:0a:44:dd:47:27:1b:07:8c:3c:bc:9b:ed:
68:c8:89:3c:4e:51:08:f7:27:59:d1:4a:4c:b2:fa:83:b5:76:
57:ce:37:6c:93:8d:b3:bc:ed:1a:e7:51:a9:cd:de:45:74:8f:
54:29:27:e2:97:b1:9e:87:ab:76:c6:97:b5:2e:f2:12:b0:89:
09:34:ac:a0:af:2d:81:a4:ec:b4:5f:00:55:dc:a4:db:dc:83:
d9:df:00:68:e0:bc:49:51:d7:05:e4:03:c4:a9:83:8e:8c:64:
6e:ac:ce:9e:67:15:a4:bd:59:ae:56:d5:00:2a:93:b1:5e:fc:
fc:10:8a:77:a4:32:ff:11:3e:47:88:3b:c7:64:9a:a5:ea:21:
b2:07:59:37:66:70:9f:dc:71:e6:cc:1b:6f:49:ab:03:9f:e3:
ef:01:a0:be:ea:c1:24:8f:ac:b0:e8:13:21:db:00:26:94:c6:
c9:d2:74:c2:be:7d:6d:c1:46:3a:82:c1:4c:fb:53:a8:ea:03:
50:57:94:8d:a4:32:46:50:39:13:df:16:ce:01:cc:37:dc:ae:
99:4f:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:59 2025 by rpki-client