Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier: ko/c4gg56BMgcmBvXmgJqRxmuXg4mhRTb14cBYs+Rkk=
Subject key identifier: 0B:91:77:E2:12:66:3A:21:4B:73:65:8F:93:DC:EE:0E:B1:6F:96:90
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 0199FC8FC1861EA657ABC56794F96DD961BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number: 14C1
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=)
2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: 4KZKRzcYy1QDJoqEwtKMAv47zXo6oLZVsuYFTHp5UdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c1:86:1e:a6:57:ab:c5:67:94:f9:6d:d9:61:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=0b9177e212663a214b73658f93dcee0eb16f9690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:1a:62:4e:a0:b8:89:7f:e5:a1:5d:2d:98:
87:80:40:71:b0:bf:2a:57:79:94:7e:db:32:23:83:
40:5a:9b:19:82:1c:3a:a1:a0:bb:47:7c:9c:c5:0f:
7f:aa:38:95:64:d3:4b:23:bf:ca:04:45:8b:a5:fe:
a0:cc:b4:d3:03:4e:a4:51:02:e1:4c:7a:1d:cc:bc:
5c:37:a6:6b:7a:32:59:47:d0:92:84:a3:df:6f:cc:
0d:45:28:60:3c:cf:4d:28:e6:15:a5:4c:9f:c9:13:
36:e9:19:96:07:fb:ba:4d:3e:a5:92:90:bd:d5:16:
56:a8:9d:b6:6f:7e:aa:3f:26:7d:ec:95:b3:cd:77:
03:ca:6b:38:8e:e1:74:12:e7:f9:c0:c3:14:d5:93:
af:39:8b:9f:a3:8e:d7:f2:a6:af:52:7e:97:1d:e6:
09:7b:5b:2c:89:93:d1:f9:6c:72:e5:f0:24:a4:74:
03:8a:55:a6:d5:50:7a:13:cd:ac:95:f2:f8:97:40:
04:8d:da:57:ae:9a:36:ea:09:be:36:ee:10:a2:2b:
cc:a3:1a:14:2d:7d:1e:e2:70:a1:62:50:26:f6:ec:
40:2a:f1:f4:a1:02:28:e1:f8:69:37:ef:e2:c8:7b:
3a:5d:ae:f9:15:41:ab:4c:34:da:31:f8:2f:d5:f3:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:77:E2:12:66:3A:21:4B:73:65:8F:93:DC:EE:0E:B1:6F:96:90
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fa:f1:35:85:b9:75:33:29:e9:bf:6f:44:43:38:79:a0:00:
4e:7b:6a:57:02:4f:43:db:e2:cb:fb:69:52:9d:0c:2a:31:9b:
22:14:a9:a4:42:c6:39:a9:b4:b0:92:35:21:35:a6:bf:b6:9c:
e5:94:68:2a:9a:9d:d3:1e:93:f9:b1:40:98:4d:76:39:1e:ab:
d4:a6:b8:0a:9f:93:f8:03:e5:8e:36:87:8d:a8:d2:90:82:8c:
f2:b5:71:c8:53:16:d8:37:c7:6e:18:b4:77:ef:84:65:42:78:
32:4a:d7:5c:cc:63:6b:94:98:e2:d2:ab:cf:7f:11:65:38:32:
df:90:ce:c2:fa:11:13:78:77:0c:c0:4a:06:30:fd:14:c0:26:
f1:a0:ce:52:2b:73:ec:a2:3f:88:1d:e9:37:1c:31:b7:0d:b8:
16:10:5b:e7:c6:55:9b:e1:bc:99:65:6e:d6:73:71:7c:09:40:
b8:80:0c:05:0e:9e:21:7b:84:23:d4:1a:38:4c:1a:80:48:4f:
50:12:ec:72:cf:e9:6c:d6:08:3a:c8:1f:83:92:37:c0:3b:90:
2e:2c:1e:f0:e9:ac:c4:51:b8:7b:a9:9c:c2:81:24:76:96:69:
78:7f:fd:6c:21:bb:78:59:d4:1c:27:c2:7f:05:9d:19:c7:af:
26:40:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:59 2025 by rpki-client