Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
File: V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft (raw, json)
Hash identifier: fxEhYklcQwilAkzRoTW2XcjQCty1i/cu2/XxzxoPELk=
Subject key identifier: AD:07:A2:F8:85:5D:D1:28:4A:22:20:72:91:C0:2D:2B:38:B6:B4:D6
Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Certificate issuer: /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Certificate serial: 0199FFFE585237B6B1BFEDB2F29091562C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
Manifest number: 1675
Signing time: Mon 20 Oct 2025 05:01:22 +0000
Manifest this update: Mon 20 Oct 2025 05:01:22 +0000
Manifest next update: Tue 21 Oct 2025 05:01:22 +0000
Files and hashes: 1: LO_AdzfatF4C9sIs1o52EbzmDNE.roa (hash: bUjCYFRihUcJ3W4Hnr4B5vT5UkBAyoxGKHKJzbwXNm0=)
2: V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl (hash: 3iTq9A7MUvRJ9ZveNs6yNkJL6EB/NGZfr/qSfVqmVQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:58:52:37:b6:b1:bf:ed:b2:f2:90:91:56:2c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Validity
Not Before: Oct 20 05:01:22 2025 GMT
Not After : Oct 21 05:01:22 2025 GMT
Subject: CN=ad07a2f8855dd1284a22207291c02d2b38b6b4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:ca:f9:67:82:27:99:be:18:03:89:fe:23:
77:f2:b2:00:25:4d:89:93:b8:94:59:86:d8:72:61:
04:cd:cc:06:00:81:b3:0e:ac:8a:e1:2e:b3:a1:66:
24:54:bb:40:57:bf:ae:61:87:e8:fa:7b:4c:18:d8:
f8:cd:3a:e5:b4:4d:f0:4e:24:af:a7:ee:d8:5a:06:
c0:f8:7d:91:d2:2a:08:53:87:c1:bb:3c:da:91:0d:
05:de:bc:10:b0:9f:69:cf:fc:73:7e:57:00:52:01:
aa:1b:77:ce:11:52:c8:b2:02:70:ed:ab:48:fb:32:
fa:d4:09:8d:05:c0:52:39:b2:25:54:95:d5:f4:64:
6c:1c:f7:cd:7c:8e:2b:9a:de:35:35:5a:b8:dc:dd:
86:e3:18:15:49:82:68:de:ee:32:b9:b1:5c:69:f9:
e5:1c:92:3d:1c:31:18:a7:58:bb:94:65:40:54:fb:
d6:b7:a0:38:89:c2:b4:da:53:9a:01:2e:f6:70:78:
e7:fc:6b:c1:88:b9:a5:db:fa:06:bc:b1:1a:fc:e3:
71:95:8a:06:3f:0f:cd:4a:98:72:63:51:1c:81:40:
12:64:f2:0f:d5:bd:b3:54:75:f2:48:f6:81:6c:31:
ce:3f:5c:ff:c6:57:11:23:71:5e:7d:94:3b:3f:7b:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:07:A2:F8:85:5D:D1:28:4A:22:20:72:91:C0:2D:2B:38:B6:B4:D6
X509v3 Authority Key Identifier:
keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:04:3f:1a:c2:cd:50:e2:1c:13:28:ce:09:b9:31:fb:2f:21:
70:4d:ec:4f:30:e6:3e:e1:c3:bf:15:b6:24:60:45:af:7a:77:
8e:e6:da:59:2a:be:d8:5d:cf:f6:99:41:85:39:ff:4a:9d:23:
2d:6d:ee:05:51:05:3d:9f:bd:dc:77:16:7a:6a:f1:a6:dd:d9:
46:b9:c3:35:24:fc:33:60:30:f2:e9:7c:5e:d6:9a:5e:c5:7d:
8b:e9:5e:d9:4d:3f:61:23:7f:ae:f9:1c:ec:58:8a:65:2d:6c:
4a:a5:09:4e:e6:77:a9:fc:60:a3:4e:82:d0:2f:28:0d:de:0b:
ef:57:7c:9d:38:5f:27:4d:81:d3:00:61:33:8a:26:a8:a9:75:
8f:81:14:7a:29:09:54:46:e1:35:57:51:34:a8:6c:db:70:66:
66:af:23:52:73:00:3c:fe:c3:4d:05:6e:c4:12:47:d3:ea:55:
d4:97:45:c9:44:d6:85:e6:55:31:fe:49:a5:aa:60:da:66:ff:
77:c6:ba:af:fe:a4:60:6e:20:4b:3b:ce:04:52:4d:98:3e:b8:
e4:b4:c0:e6:9a:71:2b:8c:ef:6b:64:15:30:18:ec:58:4c:9a:
8b:97:2f:65:7f:6e:d2:be:16:78:07:00:72:bf:e3:ae:fc:79:
88:ad:b8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:46 2025 by rpki-client