Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: evje6q3Whcn9U81AtlckD4KJyqmWOJBIrgHSsAAq8Ak=
Subject key identifier: B7:E2:7A:60:D7:57:9D:B7:17:69:4E:2D:58:21:26:44:9D:B1:61:61
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019A0035026F4E88E8BB064AD88C30561DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 06:01:05 +0000
Manifest this update: Mon 20 Oct 2025 06:01:05 +0000
Manifest next update: Tue 21 Oct 2025 06:01:05 +0000
Files and hashes: 1: BbPU1Bnn4njLoJyEV_1fon0xq_M.roa (hash: hSofywL/61c+ycaV0QrJyYDUafrPsowFjsTpxS/wPU8=)
2: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: rg5JYEi4G+YJWiCM3B7PaiibqByLyNGS7iATt4j3qjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:02:6f:4e:88:e8:bb:06:4a:d8:8c:30:56:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Oct 20 06:01:05 2025 GMT
Not After : Oct 21 06:01:05 2025 GMT
Subject: CN=b7e27a60d7579db717694e2d582126449db16161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:47:5a:c3:ff:70:1e:83:f1:7f:66:4e:a3:
5d:22:d0:9e:bf:8c:b3:7f:0e:ce:67:9e:51:7a:75:
9a:8a:bb:7f:78:9b:30:04:45:ce:58:ba:c7:97:e0:
4a:68:68:ed:1e:2d:32:9e:93:90:cd:58:c0:a1:ae:
3c:8d:75:41:03:10:30:e4:4e:23:ee:cd:4e:1a:3b:
63:99:2e:70:7d:fb:da:40:fe:d7:a9:3a:fc:03:4f:
b8:9c:db:ef:0e:81:8a:94:ef:e7:2f:a1:3e:63:4a:
c1:1a:50:06:53:c9:9a:3c:bb:1d:d0:78:83:7b:e3:
4d:a6:19:e3:04:09:7b:f6:18:d9:b4:dd:66:bd:90:
bb:7f:7f:b5:62:f3:bd:00:a2:5c:9d:94:d6:30:8d:
6f:cd:96:2d:0f:09:04:f1:a0:90:a3:f1:b5:00:47:
f4:0e:50:81:c2:17:3d:41:80:a0:3f:11:86:82:bc:
57:81:f2:c9:fb:08:39:90:c8:e0:7a:50:f6:0f:be:
3a:f1:26:48:7c:0e:aa:4a:1f:db:ec:69:2f:10:ab:
6c:da:6e:52:2a:3d:c8:e2:cc:2b:8a:4d:7e:2e:87:
49:c5:4d:42:a9:c9:f2:e3:79:b9:e4:b7:04:9f:4c:
49:5e:75:3d:ae:a9:a1:63:95:c9:78:42:4b:08:70:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E2:7A:60:D7:57:9D:B7:17:69:4E:2D:58:21:26:44:9D:B1:61:61
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:92:13:b1:e7:a1:ea:0f:77:21:c2:95:5d:a3:c8:65:57:24:
13:e0:4b:4a:d9:29:7d:cd:da:be:61:70:4d:48:05:95:c0:0e:
65:2c:e7:b0:6d:f4:e9:d0:71:07:80:76:be:a3:76:9e:33:45:
fb:ca:3f:48:b0:9c:84:cc:a2:3b:d1:cc:86:e2:9a:ed:06:c9:
6c:18:c3:50:9a:cb:0b:30:83:83:3b:1a:8a:9b:98:15:61:77:
c4:c9:07:11:3d:f1:3e:2d:21:3c:ed:10:96:79:fb:f3:64:d8:
83:93:11:a8:b5:25:05:76:14:4c:aa:bc:9f:88:01:8b:4b:c8:
4e:f5:43:b1:2d:27:8b:9b:24:06:a5:bd:53:c7:07:a1:d7:75:
bf:a1:1f:9a:c9:1f:aa:28:38:53:23:ef:19:31:e0:81:57:23:
20:a1:8d:c7:28:2c:58:b1:6e:18:fc:77:0b:99:18:1b:27:37:
4c:62:6f:72:11:cb:b7:0e:69:27:2d:c6:c3:58:0b:24:d3:8c:
d3:fa:63:74:f3:c5:81:8d:ff:63:8f:98:91:b2:ac:48:52:48:
70:e6:00:72:c8:01:80:14:25:cc:5c:13:61:86:ef:24:f9:dd:
e7:ef:db:ac:3f:dc:43:4b:4d:7b:a1:8c:eb:ea:86:fd:13:d5:
b4:a7:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:03:13 2025 by rpki-client