Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: waJfu1rfnkngD4A4XBW1yljN2XxXQgrw7JSejtQt1cU=
Subject key identifier: 2A:9B:6F:AF:15:22:E4:6B:89:3E:F8:BE:6C:32:A9:C0:D6:7F:2E:FF
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 0199FBEBFF247A9C9BB4A81FEF7881168DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 111D
Signing time: Sun 19 Oct 2025 10:02:51 +0000
Manifest this update: Sun 19 Oct 2025 10:02:51 +0000
Manifest next update: Mon 20 Oct 2025 10:02:51 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: DJUqcuk33K/HNVB4BydTFxIMGdhuZc0qYtBlTTM+N6o=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ff:24:7a:9c:9b:b4:a8:1f:ef:78:81:16:8d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Oct 19 10:02:51 2025 GMT
Not After : Oct 20 10:02:51 2025 GMT
Subject: CN=2a9b6faf1522e46b893ef8be6c32a9c0d67f2eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:1e:3c:d2:b4:bc:92:f7:35:fd:30:e5:0a:
3e:7e:67:cf:58:15:54:8f:be:bb:b0:39:64:f8:46:
74:d2:37:75:c0:77:88:0b:fb:f0:7f:13:14:55:7f:
77:bf:74:9c:dd:e4:fe:96:ef:08:e6:fb:9e:82:a8:
c3:2a:0e:42:98:00:46:00:d3:37:a4:0c:3b:46:b8:
ef:d7:80:09:c7:69:41:6f:b6:7b:4b:2b:59:dc:75:
8d:a2:ad:5e:e6:fa:e5:3b:62:7c:11:df:4d:d0:91:
5e:36:51:ea:a2:1c:1e:1e:19:8b:f9:13:f4:f8:38:
c3:3b:98:17:1a:71:04:a2:2d:1f:48:74:55:25:d9:
e6:f9:cd:81:fc:5e:6e:db:11:2b:00:47:43:91:69:
09:b7:38:d3:93:55:a5:ba:ff:81:e4:7d:e6:e4:4a:
50:4e:6b:6c:62:19:28:bb:1d:58:ab:4d:d1:88:23:
50:e2:e5:bc:40:3c:0f:a0:eb:ce:f7:e8:f5:cb:5d:
0b:03:36:f1:04:39:64:ec:6a:fc:40:e1:f2:0f:0d:
d2:a0:15:77:51:5a:91:51:83:95:74:2f:2a:98:2a:
4e:09:7b:1c:ae:13:a1:8b:80:82:48:09:fe:c0:1a:
11:29:50:b8:b0:17:38:56:b9:3e:3e:3b:b5:37:62:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9B:6F:AF:15:22:E4:6B:89:3E:F8:BE:6C:32:A9:C0:D6:7F:2E:FF
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8d:31:21:af:bb:ac:e9:23:ae:5c:09:36:9d:21:8c:ec:64:
a4:ae:70:7e:96:31:0d:61:20:0b:07:42:ab:c6:3f:86:36:69:
37:b4:37:15:12:1b:16:2d:ed:04:85:ca:63:cb:7b:1b:9a:37:
ca:b7:bf:dd:ae:0b:30:17:1b:4e:ad:cc:4a:f7:fe:e3:07:87:
e2:28:27:89:1c:ad:4c:92:dd:01:78:2c:06:c0:11:37:0f:cf:
eb:7a:49:84:b9:26:6f:7a:df:9e:a4:6d:6c:78:3a:ab:a8:c3:
65:d3:e9:47:33:3c:2a:d2:28:7b:a8:ad:4c:03:c1:99:ba:c5:
f1:9c:de:b7:c4:a7:86:06:3d:c9:1e:95:4f:03:1d:b3:6f:8e:
7d:53:79:01:7f:ad:5d:b5:40:eb:ae:0f:3d:11:4c:6d:a1:bf:
13:e6:b2:72:5a:7d:2e:e1:1b:22:6a:f8:27:3c:be:43:16:e9:
37:d6:fc:30:d2:ac:7e:46:18:52:3e:19:9b:cf:be:c0:85:50:
07:05:05:fd:c4:21:fc:4d:e7:7b:64:a1:14:92:15:5c:88:5d:
c3:83:0f:6d:4e:c9:53:37:31:57:85:1e:b9:1a:42:e7:a2:44:
57:68:8d:c1:b1:4f:a9:88:6d:c1:f3:2b:96:e8:17:96:d2:34:
c1:ee:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:46 2025 by rpki-client