Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json)
Hash identifier: NEgMKBwWbUQwe8a3tW+p14PMrqVmxCDaKBs9AZTm/d0=
Subject key identifier: 07:87:BB:B6:B1:AF:04:57:D5:12:0C:D1:BE:2D:CE:03:7C:5D:36:46
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 0199FFC7EE921F559A0C1E6E44D226958D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
Manifest number: 0D7D
Signing time: Mon 20 Oct 2025 04:01:56 +0000
Manifest this update: Mon 20 Oct 2025 04:01:56 +0000
Manifest next update: Tue 21 Oct 2025 04:01:56 +0000
Files and hashes: 1: OWnzalrEaHNzu4AsD29DhoKa8Xs.roa (hash: w7GvV8HbETtyhTF6uR9vlKySlaF/SU8e2H/ocdNt7lY=)
2: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: EZBKR4ToHlzHu4Y/a/0HT2eYvo3o1ogEzwz0pvgOkeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ee:92:1f:55:9a:0c:1e:6e:44:d2:26:95:8d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Oct 20 04:01:56 2025 GMT
Not After : Oct 21 04:01:56 2025 GMT
Subject: CN=0787bbb6b1af0457d5120cd1be2dce037c5d3646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:b8:68:eb:2c:1d:9b:cb:ed:81:ee:92:60:
37:5b:b6:67:3c:56:d4:e0:dc:1d:07:88:39:68:a3:
30:d1:16:93:3d:3c:fe:02:bb:d9:56:33:76:4d:4f:
6b:2b:1e:07:b9:72:66:08:62:5f:3c:7b:0a:57:57:
e7:44:23:67:49:06:4d:c4:43:ef:e5:70:2b:b0:4c:
00:9b:a1:18:d8:dd:b2:a5:b7:20:c7:20:62:6f:b3:
ec:6a:63:c6:c8:4d:ef:63:4d:78:78:f6:71:e4:87:
d4:91:15:9d:ac:0f:07:58:98:1e:78:6c:1d:8e:be:
45:7d:cf:14:98:45:57:73:1c:51:e7:8e:0d:64:ba:
46:01:be:8e:8a:79:b8:d4:67:7f:40:52:02:ae:2b:
1f:f9:73:45:22:19:d9:34:3c:f6:c3:ae:37:04:bc:
f5:fb:e7:a9:78:3f:0f:b5:65:5c:2d:42:9e:f7:26:
2a:1a:c7:47:86:18:7f:b0:9d:9f:9d:4f:ec:d2:39:
5f:ea:9c:8f:43:61:b0:3e:04:99:d8:56:82:c0:4d:
7e:04:52:08:0e:c3:3d:fa:99:1d:ed:96:90:a5:90:
b3:94:45:a7:49:06:14:a1:6b:94:b8:61:7b:79:1e:
32:e0:20:b8:86:c8:61:02:00:e2:a6:b9:93:0f:f0:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:87:BB:B6:B1:AF:04:57:D5:12:0C:D1:BE:2D:CE:03:7C:5D:36:46
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9f:2c:30:ef:7b:a2:fa:69:9d:f5:54:74:55:cc:98:d9:f5:
1c:30:c2:7e:17:94:fa:c5:f4:a7:f4:f7:c0:56:14:57:ed:27:
66:7e:a2:82:8e:4c:70:3f:15:b2:15:7e:7c:f3:cc:bd:da:4c:
4c:31:9f:7e:50:5b:74:2a:ed:20:aa:7b:5a:c9:ae:29:a1:e9:
23:c6:29:8a:3a:3d:7e:e5:54:7c:a6:94:02:6e:97:59:e8:f2:
4e:3f:e0:a4:5b:5e:22:62:db:a7:90:ce:bd:16:5d:84:df:69:
7d:2b:1c:bb:98:bb:1e:f6:a3:b2:9b:ed:ca:7f:cf:94:b1:a9:
02:74:a2:f9:67:f3:f7:a0:8b:ba:e0:fe:df:33:6c:cb:b9:24:
83:75:a7:6a:c7:94:71:a8:e4:87:4a:98:01:a5:ac:92:d4:1d:
f4:99:e1:b9:21:ee:7b:1e:3b:57:94:4d:5d:95:30:24:72:e5:
64:d0:e1:3e:cf:ba:d4:9f:68:b1:e4:f8:fa:19:b0:1f:a8:d5:
d5:be:96:94:49:93:9a:fa:d3:98:65:8c:30:41:56:60:0b:72:
ed:3a:8f:96:69:f1:32:13:34:06:f5:f9:b9:83:1f:e1:2a:6e:
32:30:f6:38:ee:75:95:d8:6b:46:15:ea:14:7e:93:99:0c:a2:
bc:3c:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:44 2025 by rpki-client