Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier: MBiJ/lJKJ6mu1htOz0QYxr6Z6PW16/rO/gXNEIJ8g6g=
Subject key identifier: B9:69:BD:F8:39:EF:B0:2B:77:15:74:BA:8F:60:74:98:CE:3C:5B:9D
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial: 0199FC8FA01E33173D2F91D36F3C097C88B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number: 0F3D
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: b+KM0kMgs5tdN9d79F1T3dU/FFgr4JlMq73SkWaX/bg=)
2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a0:1e:33:17:3d:2f:91:d3:6f:3c:09:7c:88:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=b969bdf839efb02b771574ba8f607498ce3c5b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0f:3f:a0:20:42:22:ea:2c:62:2b:fd:e3:0f:
e0:fa:a7:8b:06:8d:55:f5:4c:42:85:bd:72:e6:7d:
d7:5c:31:0c:94:a2:48:e4:bd:25:6f:6c:9d:1a:ea:
4e:70:3e:62:80:d5:cd:8e:4c:46:55:9b:a7:8f:6d:
4a:11:63:f9:1a:54:03:e8:45:a4:09:f9:e4:ce:b0:
a1:65:07:0c:22:f6:db:06:c8:c8:54:05:dd:a7:8f:
bf:34:03:9e:67:42:e6:7b:54:4a:43:7f:7c:f1:9e:
08:00:e2:01:51:00:af:2b:69:13:18:a5:c0:85:ea:
e3:e6:e9:1c:cb:3e:a6:28:ee:26:12:88:9a:70:5b:
2b:c3:a9:79:e3:84:18:84:cf:7f:6c:07:92:07:f1:
4c:3d:b5:8e:e3:5e:4e:36:11:df:aa:1b:cd:5f:50:
db:51:b2:f8:c7:78:9b:70:63:e3:36:94:cd:83:64:
5d:4a:f2:67:4d:5c:23:42:2a:6c:78:2e:3c:c4:70:
21:0e:34:55:a7:97:0d:d6:04:72:1e:f1:30:96:5b:
dc:b7:1c:e3:0c:ad:17:97:cb:bf:2f:4f:7d:ec:45:
aa:f4:4e:45:c5:b6:4a:02:12:23:77:39:76:f6:7a:
f8:5f:f2:bb:09:ff:a2:57:96:bc:2e:a4:57:27:a3:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:69:BD:F8:39:EF:B0:2B:77:15:74:BA:8F:60:74:98:CE:3C:5B:9D
X509v3 Authority Key Identifier:
keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:46:d7:70:b6:cf:b4:fd:9b:82:84:c7:39:28:16:6d:7c:94:
ad:f3:d3:1b:16:a1:4c:0d:b3:01:2d:d2:56:6e:f1:3f:a1:4e:
75:d0:f5:7f:e9:1c:e6:fe:f2:80:ca:5e:a8:8f:4a:ae:7e:ff:
35:be:3c:b6:bf:e1:bd:88:4d:69:48:c5:e8:fb:a4:9b:a8:c0:
24:7f:c9:14:a4:46:4a:46:6a:3d:f3:30:2f:e4:9e:a9:28:03:
22:e0:9b:62:54:99:90:c7:f4:fb:27:75:8c:27:86:3d:ed:49:
b4:fd:34:c3:12:4f:65:df:bd:81:6c:74:03:f3:63:70:bf:03:
25:b1:0a:ec:85:be:ab:bc:7a:8d:ad:4d:0e:0d:74:c7:d5:c7:
af:c1:51:a2:3c:3c:0f:b2:89:43:45:3a:af:0e:4e:d8:2f:0c:
8d:fe:3f:35:83:49:29:d6:ff:da:d5:bc:70:6a:54:63:01:33:
9c:82:ce:4e:53:cf:c1:de:47:d9:6c:7c:10:8e:45:b8:eb:bc:
dd:8c:8a:02:d9:08:d0:91:d1:c4:ef:cb:4a:73:37:45:47:7a:
c5:ef:5a:5d:f7:e4:2f:54:96:62:5a:b1:69:e2:e3:fe:5c:50:
b3:fc:93:37:3e:03:25:3a:c4:97:59:26:2b:39:0f:79:7e:08:
e5:e1:60:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:34 2025 by rpki-client