Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File: v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier: nonI3zt4rYUk9mjYBCiRtG0W6qlJrMENlzkauW4Z4kI=
Subject key identifier: F0:9D:F4:77:04:69:D9:5A:DD:7B:BC:41:5E:37:73:0E:81:80:37:1A
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 0199FC58F61A5E7B7E8C7AEFA5752E2D49D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: lLHGIF0wK8hTJ6YdiT7OPXaeeIMFem5qPMCQWeMVdT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f6:1a:5e:7b:7e:8c:7a:ef:a5:75:2e:2d:49:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=f09df4770469d95add7bbc415e37730e8180371a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:2b:e7:d9:f6:e2:ed:29:91:ef:d8:53:64:
cb:40:5c:de:fe:0c:28:00:7f:e4:6c:27:e9:9f:bd:
bf:ac:90:b1:35:42:9d:d7:36:bc:19:82:c2:1f:ef:
da:ec:7b:5d:cd:a4:55:a4:bf:a5:7b:01:f4:73:c9:
80:fc:19:76:8e:51:7f:73:a2:08:a5:74:50:34:ec:
4e:a6:68:c5:b7:f1:7a:87:ee:57:e7:ef:bf:05:70:
7f:ea:c3:4e:d0:ee:0a:c8:4c:62:93:2e:b4:72:e1:
8c:e2:e3:57:5c:3b:90:96:38:a5:88:a3:ca:ed:00:
ee:60:72:82:39:52:36:75:4f:9f:5b:51:aa:b6:14:
47:d4:58:e5:9c:d1:71:c2:6a:2e:82:cb:19:d5:b1:
14:aa:a4:79:13:db:90:c1:a9:e4:47:bb:b1:22:cb:
39:49:29:cd:e6:1c:e2:dd:0d:d5:f6:1b:1c:b0:8a:
68:67:5d:13:a7:29:3b:e5:86:a3:1e:e7:ce:49:5a:
4c:92:bc:14:be:14:94:08:23:e7:ef:8e:bc:ca:dd:
6c:f7:10:75:7f:be:a0:0b:ab:85:12:67:14:b7:e3:
b8:a4:5f:c8:5c:c3:ce:48:71:d8:96:66:5b:ea:11:
b2:a4:ef:cc:14:b4:0f:f8:80:ea:8b:41:34:68:3c:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:F4:77:04:69:D9:5A:DD:7B:BC:41:5E:37:73:0E:81:80:37:1A
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:34:7e:cc:63:24:38:34:4c:16:08:0b:71:93:ac:9b:40:d4:
49:6d:7a:90:ad:cf:af:a2:08:35:ed:4e:af:d4:8c:f4:ba:06:
c0:15:47:cb:e4:ea:3a:2e:4a:5f:e6:c0:5e:b0:79:e9:4b:80:
83:03:2b:d9:92:60:74:8a:17:33:82:a4:6d:9c:08:46:77:49:
8a:99:13:30:c9:1f:e1:1f:72:d1:4a:10:4c:0c:9d:96:f2:69:
06:4f:c5:2e:f4:8f:68:48:6e:72:81:39:df:36:6a:68:51:ee:
e7:07:78:30:5a:1d:56:75:70:0f:44:ff:5e:9e:3b:f9:4d:74:
61:00:16:72:b7:15:93:67:91:cd:ed:35:af:75:ab:f5:ac:dc:
7a:ba:5f:00:7e:32:68:3c:ff:71:23:86:c3:c4:5b:33:3d:42:
56:bc:69:d1:7c:94:4a:7b:14:28:bb:af:19:f4:80:5d:c5:01:
08:be:20:93:22:d1:6a:6c:53:d4:3d:5b:6b:94:19:3e:f0:4c:
17:a5:34:49:a5:e7:86:b1:92:b0:8d:91:ae:66:48:0e:0b:58:
df:25:9b:7f:95:76:1e:c3:72:6e:4e:3a:8e:3a:91:6b:dd:ff:
07:eb:cf:7a:07:07:30:a1:a8:11:35:5f:7d:27:ce:06:cf:1e:
b8:51:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:58 2025 by rpki-client