Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
File: v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json)
Hash identifier: B643OgdafpUJL7hto7qQJCq5wuN4XgOlPE4VaNyNDFk=
Subject key identifier: F3:95:B9:E2:40:60:96:01:B8:63:F3:B2:A8:AF:27:B6:BD:5A:51:15
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 0199FC219D1CB5ABB2F798A6A3EB2A5687B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
Manifest number: 0B5E
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: BFvGU9aoz7rWEn9pDQTts3L78L8.roa (hash: +uFs0aOYRrvBvDpuqjNUWAjstxrFKIih9wDuEmZp20g=)
2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: UB28epssugnfCvnalAr0WEwz7inJwa1QZcyC09VGRTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9d:1c:b5:ab:b2:f7:98:a6:a3:eb:2a:56:87:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=f395b9e240609601b863f3b2a8af27b6bd5a5115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:24:9c:c0:7d:9d:93:31:3e:7b:11:c8:91:
66:8c:dc:03:c3:5b:3d:af:fd:52:de:b7:0f:d5:22:
35:ab:08:b1:b5:90:27:e3:ab:5d:b6:35:39:56:03:
7b:a7:56:5f:e5:be:e3:90:5c:f0:c7:e0:26:9e:2f:
48:2a:8b:ce:b5:bf:d6:30:47:84:8f:13:b5:fd:1a:
dc:ee:bb:f1:92:50:98:9f:31:00:bd:c9:d7:f0:a0:
80:8f:1b:30:a7:6c:ac:37:c7:66:0f:fd:72:14:fa:
07:88:07:5a:2a:3f:cf:bc:80:16:82:93:a7:60:1e:
a7:41:4e:ac:ef:5b:cd:d0:d4:08:81:38:d5:6b:c3:
14:21:ee:dc:ae:25:53:e7:e6:d8:1a:1c:fc:1e:9c:
18:55:64:28:38:6c:de:44:5a:c9:be:25:68:93:b3:
ef:dc:78:94:2a:c5:67:d1:7c:28:59:7d:c4:e1:e3:
92:3e:5c:58:c5:62:a7:93:b8:ba:e3:d7:59:08:93:
7e:88:4c:83:e0:c9:34:49:53:94:1d:47:b2:be:b4:
a1:0e:b2:c6:73:7e:5c:1f:af:7f:52:bb:ad:c3:55:
96:c8:af:82:d8:fc:b0:ad:82:d3:ad:84:9b:95:76:
78:7a:11:51:e0:d5:cc:31:6f:7a:e6:a3:3a:62:36:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:95:B9:E2:40:60:96:01:B8:63:F3:B2:A8:AF:27:B6:BD:5A:51:15
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:94:c1:c5:e1:1d:15:8f:e6:4b:e5:31:d4:49:b7:82:53:21:
94:57:2a:fd:10:7b:f1:e5:c2:78:af:35:ec:1a:3f:31:d8:e7:
d6:cc:99:27:c9:d2:25:fb:ff:41:43:34:75:70:f0:e0:03:1a:
85:e5:4b:98:a7:eb:5f:a6:88:9a:17:9f:b1:63:a8:f0:a2:c1:
84:f5:12:eb:62:a1:63:57:ee:0d:92:b2:dc:5f:34:25:a3:5e:
2d:fc:f1:b1:ee:48:78:2d:ee:a4:ec:e4:df:95:ec:76:c1:7c:
d2:5a:e8:eb:14:b1:60:4a:25:47:10:86:8f:a1:76:d5:24:61:
c5:8e:ba:c5:e5:5c:0b:d7:cd:9e:9d:73:10:41:95:89:7a:0e:
cf:8a:c3:e9:c5:58:12:33:18:b4:8c:c9:70:c2:7f:9e:cd:e4:
d0:c3:88:6b:e2:10:5b:67:f9:9e:51:73:6e:a2:6b:30:6d:f1:
05:65:80:39:3d:4b:9d:da:b0:70:32:1c:f8:18:41:ed:91:b0:
de:3a:e6:fd:28:6e:47:49:2a:b2:0c:11:7c:ee:3d:c6:cf:6c:
f9:c6:1a:e8:80:2d:e7:d2:20:86:1a:5c:9e:9b:9e:0b:f0:dc:
a5:63:62:79:10:51:a6:9d:f2:4a:1d:00:a8:44:d6:2a:44:9c:
51:e5:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:02 2025 by rpki-client