Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: WfM573eiznlUpfrPuQsYi8NtfOsLGG6BuChWRQjHuJI=
Subject key identifier: E1:A5:70:1D:3B:86:63:CD:46:E5:3F:2F:A5:28:89:51:73:31:46:1E
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 0199FDD9A3E72DA42A68BE197F84F478D5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 111E
Signing time: Sun 19 Oct 2025 19:02:02 +0000
Manifest this update: Sun 19 Oct 2025 19:02:02 +0000
Manifest next update: Mon 20 Oct 2025 19:02:02 +0000
Files and hashes: 1: 5XEV-gEMIErGK0axVAW_a3kFgdQ.roa (hash: zrBYoY+XDrWBTYUlEabBJW1Q13TMvp0kauzANBjQtoQ=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: vaSwfslsj0FMGfJO4LGaNLsxJDdJiGD1bv9QJ96fftU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a3:e7:2d:a4:2a:68:be:19:7f:84:f4:78:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Oct 19 19:02:02 2025 GMT
Not After : Oct 20 19:02:02 2025 GMT
Subject: CN=e1a5701d3b8663cd46e53f2fa52889517331461e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:9a:7c:ed:39:83:20:6a:05:52:d4:9f:49:
9f:e5:db:54:1e:a9:af:8d:9b:a7:6b:d8:58:96:b9:
10:bb:3d:ad:a9:db:72:4f:07:c3:19:f8:4b:9e:2e:
06:c0:7c:b0:a8:9d:4b:44:b3:b0:94:9d:13:be:54:
a4:7e:5c:a8:0a:68:54:63:29:6f:cb:2e:7f:28:3e:
e6:08:dd:aa:13:ef:3b:11:91:fa:68:30:5c:ca:3d:
68:6f:af:d3:32:9e:47:00:ab:73:e7:f1:0b:b0:4f:
5d:a4:40:ba:7f:32:d2:d1:83:64:7b:3a:50:57:d9:
27:71:0d:dd:28:2c:ec:7b:fc:3f:4a:a3:05:5c:18:
ba:36:9e:90:ea:c0:af:b9:e7:38:ef:92:2c:bd:72:
46:5d:1c:fe:5b:66:8b:8a:b6:ee:50:98:aa:ff:9b:
13:71:12:38:d7:88:a4:14:fa:a7:44:30:02:55:28:
14:d3:4f:1c:c1:9a:3f:53:88:fe:f2:58:43:b0:37:
15:d9:cd:6b:95:ce:a3:14:e6:6f:b1:5f:a3:16:91:
fd:60:a9:d5:9b:80:ec:a5:d8:a2:7d:0c:96:00:9d:
69:dd:24:78:b0:37:a9:77:9f:72:61:a0:e1:43:8a:
44:a6:c6:42:22:e6:6b:28:98:be:88:0a:e5:01:cb:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A5:70:1D:3B:86:63:CD:46:E5:3F:2F:A5:28:89:51:73:31:46:1E
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:c4:39:4d:be:7f:d0:5b:1b:fd:9f:58:e6:bb:ec:05:dc:
e9:b8:72:2c:30:7d:01:5d:e3:18:57:bb:2d:84:cc:26:12:2a:
18:32:8c:66:e2:34:96:e8:b7:5f:94:91:49:b2:c8:ec:f7:e7:
8a:92:86:f7:62:42:0b:de:20:07:cc:fd:c6:62:d0:3d:82:e3:
88:2e:12:e2:76:07:25:17:e7:9a:e4:dd:5b:cd:c2:0f:77:c4:
9b:ff:f3:8b:1b:e3:2a:84:6a:48:e4:ee:48:1b:41:b7:1b:60:
bd:0d:58:e6:98:de:64:bb:1d:85:06:36:dd:34:98:7a:0b:e1:
ce:b5:07:32:2c:42:8d:ee:30:a4:ea:6f:31:6a:a3:61:05:52:
d6:30:53:21:fc:90:d9:b0:de:28:0e:8b:82:5b:86:0c:ae:ee:
7a:70:ac:f0:d6:f9:24:93:28:a5:6c:9f:25:44:e5:8b:d1:28:
36:93:67:2e:cc:90:ba:56:38:0c:06:c6:2b:77:34:c8:a3:50:
d9:1f:3b:ed:e3:bf:e9:69:72:4a:75:ba:8d:09:b7:8b:c6:e5:
b9:d6:f1:87:1d:54:c1:71:c0:06:f8:95:a9:ad:85:92:5e:e4:
a0:c8:21:3d:75:9f:1b:2c:07:f6:bf:de:3c:85:0b:f8:c3:41:
fe:6c:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:30 2025 by rpki-client