Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier: r0mFLJjKNz2zAZAF1vdOQREWROWIzQV8xG78QQNHoUQ=
Subject key identifier: 04:2F:B2:4D:D7:70:0A:0A:33:EF:9D:E3:47:C6:2F:C9:14:EC:B1:E2
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial: 019A025A03718916FA28C23E910F6E79FEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 16:00:44 +0000
Manifest this update: Mon 20 Oct 2025 16:00:44 +0000
Manifest next update: Tue 21 Oct 2025 16:00:44 +0000
Files and hashes: 1: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (hash: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=)
2: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: lsHzeWMfcXkZFkq8NpyBokSwj3ZW3C2oGINwhMdrlJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:5a:03:71:89:16:fa:28:c2:3e:91:0f:6e:79:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Validity
Not Before: Oct 20 16:00:44 2025 GMT
Not After : Oct 21 16:00:44 2025 GMT
Subject: CN=042fb24dd7700a0a33ef9de347c62fc914ecb1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:b7:bd:c1:10:8a:50:83:f7:59:90:90:ac:
58:54:07:bb:d7:28:21:8b:a5:94:52:41:4a:72:ee:
00:6a:1a:b6:7d:39:27:10:5f:dc:34:67:15:27:6e:
a5:2b:f0:c1:20:5b:eb:bd:c8:6f:ff:a6:3e:c2:ef:
46:86:9d:5a:90:d4:19:79:be:51:4a:03:a0:7c:c7:
0e:5a:29:82:4f:81:00:d1:42:0d:47:1c:5e:2d:94:
f8:df:da:8a:da:d8:d3:39:d7:0d:d4:0c:90:37:8d:
b4:66:1b:9d:42:dc:f6:2b:8f:d9:f4:22:dc:55:45:
9d:77:58:30:27:54:bf:c5:65:c6:e5:f0:b5:6c:d1:
97:2e:41:a7:d9:de:bb:94:b7:cb:21:21:ee:9e:92:
cb:c5:34:55:de:f1:e3:d2:d4:91:95:24:5a:b5:19:
e1:ae:64:d4:d0:48:23:3b:55:a7:c1:00:30:0b:70:
a8:23:06:d0:c2:c9:7c:88:75:00:b0:90:ce:30:13:
5b:fa:f2:92:6d:34:b2:d7:a4:b5:e7:1d:4e:8a:42:
83:03:b7:a9:2b:4a:f4:cd:72:a3:b0:d1:ce:0c:4b:
aa:13:87:8e:85:e3:f6:06:fd:21:75:18:a2:e1:b6:
1d:39:f8:36:6d:21:e3:e4:a4:93:0c:81:af:f1:08:
b4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:B2:4D:D7:70:0A:0A:33:EF:9D:E3:47:C6:2F:C9:14:EC:B1:E2
X509v3 Authority Key Identifier:
keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:42:72:df:85:14:6f:17:32:b6:02:45:43:d8:58:95:00:e7:
30:5b:4d:d7:54:ec:ae:2d:73:aa:05:81:57:93:c9:08:93:27:
35:ff:b3:3b:8d:35:12:7c:24:c0:6f:63:98:fe:a3:a0:5a:7e:
1c:94:e9:60:6f:1d:4a:a5:f8:3c:4c:eb:70:9b:a6:b3:7f:af:
7b:5d:70:07:d0:a6:94:37:de:57:19:42:e7:f3:e9:74:75:d8:
9f:56:4e:89:76:56:db:ca:b4:62:c6:d3:c3:fc:eb:ab:36:f1:
e4:68:c1:ae:45:dc:79:df:0d:6f:41:08:58:9a:2b:92:9b:20:
00:f5:be:e3:5d:6a:f4:0a:4c:57:95:71:4c:6f:c2:0e:ec:dd:
0f:76:10:62:c7:16:44:78:a6:22:5a:83:d3:e0:0b:30:5b:c7:
1c:f1:dc:61:06:47:38:f9:9f:7f:18:a5:70:d2:de:68:91:5c:
94:cb:83:6f:c5:0a:75:30:b9:19:b1:75:30:4f:92:76:eb:d1:
57:59:dc:37:f2:62:39:4f:42:32:0d:13:90:a8:dc:3a:28:db:
56:9e:22:b8:90:bd:2c:2f:3d:56:cf:94:94:1c:7b:76:0b:19:
aa:eb:df:38:3d:ce:ec:70:a3:82:0e:9c:6d:f0:51:fd:70:4f:
de:99:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:55:24 2025 by rpki-client