
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier: nQSTJdHw+B3w79GWekwIi+XjV8ns++q5J4qF5o3bVxo=
Subject key identifier: 30:BB:CE:28:4E:84:B7:61:2A:DA:68:32:8E:5D:E5:C4:F5:7E:18:CD
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial: 0199FBB35C376A5EC62A959F315DE8D42623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number: 040E
Signing time: Sun 19 Oct 2025 09:00:59 +0000
Manifest this update: Sun 19 Oct 2025 09:00:59 +0000
Manifest next update: Mon 20 Oct 2025 09:00:59 +0000
Files and hashes: 1: KvGrSnuEc1cM9X2Nk9gFAk0Nuqk.roa (hash: HFWxJLi4fAw0JkNdDx7HNRCU+Sz89xJhj6dOpXyk9UI=)
2: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: amz32kYeu4OAgrAy1qbvlVcQHphtvQHuQ81WvJ6JJ3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5c:37:6a:5e:c6:2a:95:9f:31:5d:e8:d4:26:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
Validity
Not Before: Oct 19 09:00:59 2025 GMT
Not After : Oct 20 09:00:59 2025 GMT
Subject: CN=30bbce284e84b7612ada68328e5de5c4f57e18cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:27:4e:67:cc:89:85:3a:c9:9b:cc:29:60:
c2:25:e2:74:5a:e4:10:1c:16:7d:ed:0a:9e:f0:b6:
ed:0d:50:c8:4d:23:15:4f:76:84:d0:bd:da:b5:5b:
d0:78:9e:40:19:00:a7:33:4d:6d:6c:b2:8b:5b:88:
35:07:91:26:85:6f:6c:a3:16:d0:7f:af:ab:1f:6d:
66:de:c7:4f:e3:56:aa:7d:78:8a:e7:04:e5:ed:fc:
da:f1:f3:52:da:98:b6:df:b4:49:7b:05:de:f8:a0:
7c:06:06:53:c6:69:27:3d:2e:fe:3f:ae:87:b5:a2:
a7:6f:dc:85:3a:02:e1:2b:61:ba:f3:09:63:d8:5b:
0c:27:73:41:7d:b8:df:8b:67:1d:38:b9:d3:58:97:
1e:3a:ff:e4:ac:58:46:e6:d7:cc:df:4a:58:02:37:
d3:5c:73:99:f8:0e:36:c0:f7:49:9d:6e:94:66:a2:
77:00:fc:0f:7d:e5:3c:ba:92:5a:96:50:8b:a0:4f:
62:8c:b4:0a:b1:12:37:7d:46:5f:2b:cf:f7:cd:0b:
16:48:6d:ef:95:94:87:9a:d6:71:b5:61:32:5f:f2:
6c:78:b9:d4:85:1e:22:fd:26:56:70:e4:ee:2a:62:
e6:4a:25:e2:11:61:e3:cd:00:ab:03:9b:45:2b:58:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BB:CE:28:4E:84:B7:61:2A:DA:68:32:8E:5D:E5:C4:F5:7E:18:CD
X509v3 Authority Key Identifier:
keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:7f:1b:95:3e:6b:cf:62:12:c1:8a:77:51:ca:87:70:b1:82:
ae:9f:e8:38:63:05:5a:69:6b:93:32:c3:06:28:6a:54:58:fb:
d3:8a:ad:d6:7b:94:95:66:ff:d2:68:b3:07:32:78:1a:4a:0b:
69:cd:62:a0:4e:23:9e:44:66:23:43:16:3b:d9:2b:f4:4c:4f:
4d:88:42:35:4b:37:a6:f4:f5:0a:bf:1d:71:02:9f:31:fb:65:
a0:df:67:89:e4:37:b5:1c:1e:c3:7b:03:b9:9d:94:42:21:c6:
7a:96:c6:c5:8b:81:f2:56:75:e5:97:78:e2:b3:0e:f9:aa:39:
3e:04:39:c7:2d:15:21:82:f4:49:ec:c6:34:b0:11:f7:81:85:
8c:8e:cc:49:20:81:c7:34:18:6a:1e:9f:06:67:a3:39:88:9d:
6c:e2:11:6e:5d:37:b8:6c:0a:a5:5f:3a:b5:57:0a:59:a4:b4:
a3:ee:13:b4:63:85:85:7c:07:e0:31:38:54:9f:3f:ba:e7:e4:
1b:00:71:40:7d:64:10:62:48:54:42:d7:6b:51:b1:73:c2:f2:
ed:1b:b9:c6:7b:8a:a0:33:be:a4:f2:1e:00:a8:7c:ea:92:e8:
fe:3f:aa:ca:98:91:9a:2a:bd:79:0c:66:e0:62:26:91:ef:12:
ea:15:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:08 2025 by rpki-client