Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: kaX98LmZBP9a3jrSVq3hwc1B7Qa0EhZMhI7kru8qRYg=
Subject key identifier: 78:53:7F:B3:9F:BE:FB:E0:49:BB:CD:16:6E:60:94:F1:75:FC:1E:5B
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 0199FDD8EB179DCEBE126ECD124F7B8551D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:15 +0000
Manifest this update: Sun 19 Oct 2025 19:01:15 +0000
Manifest next update: Mon 20 Oct 2025 19:01:15 +0000
Files and hashes: 1: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (hash: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=)
2: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: l0kunKKYo+esFPDnjXsronsa6Nh/qQf2u0HvOnmMTK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:eb:17:9d:ce:be:12:6e:cd:12:4f:7b:85:51:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Oct 19 19:01:15 2025 GMT
Not After : Oct 20 19:01:15 2025 GMT
Subject: CN=78537fb39fbefbe049bbcd166e6094f175fc1e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:a7:72:85:7f:15:59:74:6c:f2:50:be:82:
2e:e6:cd:50:8c:0f:b5:04:dd:8d:71:0f:cb:d8:5a:
b1:95:e9:fb:b8:7b:b5:f7:e7:74:32:cd:38:75:aa:
34:2f:5f:93:e2:69:b9:2a:74:e1:9d:43:01:c6:fe:
c4:8b:d0:93:e6:68:9a:7d:ce:f0:03:85:0c:4b:b6:
95:a0:b3:11:91:e9:87:99:39:1c:97:75:fe:96:2a:
4c:eb:c8:02:23:30:9d:f5:bc:12:02:6a:0f:bc:79:
05:89:ac:f4:30:27:06:e8:61:34:31:e0:bf:0a:67:
be:86:8d:41:31:ad:03:ef:73:01:9f:f6:9a:e3:d0:
6a:e5:19:8d:57:28:ed:1a:99:41:ce:4a:a4:49:d5:
7c:e3:1f:88:ef:c4:e5:a2:c5:18:03:39:44:d1:00:
89:97:c4:87:68:d0:f3:c2:c8:a5:c7:46:bb:b2:76:
33:29:82:aa:4a:8e:58:a0:10:b6:31:8e:6d:71:b6:
4b:56:16:9f:9e:0b:af:80:23:2a:69:ed:5f:3c:1f:
e1:e9:55:a9:60:c4:b8:95:a9:3b:af:6b:60:5c:51:
ff:66:02:9d:88:53:24:99:7c:17:b4:a1:64:d0:de:
0f:32:e5:31:11:b3:d5:a5:0b:e4:41:87:70:47:72:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:53:7F:B3:9F:BE:FB:E0:49:BB:CD:16:6E:60:94:F1:75:FC:1E:5B
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:ae:5e:75:f7:66:19:62:0d:33:c9:85:10:7e:9a:b3:2a:
68:b9:7a:3f:b5:7f:d2:de:67:c9:58:55:c6:90:ff:55:9d:11:
cf:65:a9:95:f9:a8:9c:12:fb:82:2c:37:5c:e0:13:c9:57:b9:
d1:8f:68:15:56:db:ed:ab:36:18:7b:a9:af:08:ed:05:6c:51:
a7:0d:fe:77:52:d4:0e:9e:8e:79:29:50:f8:33:4c:00:83:45:
5e:99:3f:32:68:97:e2:15:e9:9b:5f:ad:2c:11:73:4c:3e:df:
a5:50:83:06:a7:aa:f0:07:78:62:d4:6c:9e:16:fc:7f:e5:b8:
4f:b1:03:be:82:df:ba:06:67:71:7a:d3:be:34:36:32:99:8c:
64:27:f4:c9:aa:ee:59:75:0e:c9:8d:b3:86:aa:2b:d8:d2:17:
39:43:e5:4b:a2:4b:4d:eb:69:8d:b8:ba:ff:e2:1d:3c:78:9b:
a3:24:fd:d5:6b:90:b1:ac:21:f8:d1:86:58:2c:ac:bc:64:c5:
a6:1c:e7:82:cd:07:f9:fa:71:30:42:73:ff:49:8f:b6:18:40:
31:fb:8e:db:d5:0f:e0:e9:bb:9a:50:6a:c1:c9:f3:be:b4:83:
6a:00:90:34:be:1d:b5:3e:d5:12:58:65:c4:cc:d3:0c:06:73:
57:af:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:08 2025 by rpki-client