Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: 3ETANSjtmu3Dp+dhQogsFBKOKxtkacR6KdoBzyteAYo=
Subject key identifier: 43:4D:AB:FA:CC:43:34:C0:2E:BB:FD:8A:D0:CB:58:D1:8B:56:E5:8D
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019A4DAACBF8288794A1CD522AD90AAA3D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0DC7
Signing time: Tue 04 Nov 2025 07:00:29 +0000
Manifest this update: Tue 04 Nov 2025 07:00:29 +0000
Manifest next update: Wed 05 Nov 2025 07:00:29 +0000
Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: MJRtlbBC+z/LkV9NsFwcsG7or69WX68MdS5wBAoaGKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cb:f8:28:87:94:a1:cd:52:2a:d9:0a:aa:3d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Nov 4 07:00:29 2025 GMT
Not After : Nov 5 07:00:29 2025 GMT
Subject: CN=434dabfacc4334c02ebbfd8ad0cb58d18b56e58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:d5:4f:83:50:97:bb:ca:5f:0c:63:0f:c3:
13:75:5b:57:45:42:81:61:a9:61:2c:56:e8:18:aa:
ae:59:7f:44:38:09:e0:c0:49:03:00:89:b8:f6:a5:
5e:01:33:bb:38:3b:d9:64:1c:8b:1c:bc:35:c1:0c:
9e:dd:de:51:9a:05:67:3f:35:0d:5e:d2:d8:24:90:
5c:a4:2d:1e:2a:24:1f:27:5f:76:f3:08:e6:17:01:
95:b7:e8:3d:0d:73:66:3e:c9:1f:dd:c7:2d:a6:fe:
66:5d:32:ba:b3:cb:77:d6:03:04:eb:76:b0:51:3b:
31:f1:68:01:55:18:cc:98:fb:de:b6:b9:1d:a4:2b:
5b:05:ce:86:39:4a:e3:e0:54:34:32:74:d4:07:40:
10:b9:df:a3:88:8b:ea:10:ae:41:b1:8c:1a:68:9e:
15:71:68:3e:4f:58:18:cd:bf:38:90:a0:a0:17:2f:
3d:32:35:96:1a:0f:d3:1b:4d:39:3c:5e:b2:41:29:
0e:3c:28:86:70:35:48:23:56:5e:0a:36:a1:ea:b7:
6e:2e:75:ac:3c:e4:12:f2:ce:33:ed:b8:1a:fb:09:
b4:74:50:75:a0:da:bd:45:2f:ec:14:be:f2:46:8c:
f3:dd:36:06:9d:ad:2c:ff:79:77:85:69:76:a1:6b:
56:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:AB:FA:CC:43:34:C0:2E:BB:FD:8A:D0:CB:58:D1:8B:56:E5:8D
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1f:7a:1b:44:cb:c9:23:f5:ee:5e:b2:3c:5d:28:ab:28:50:
8d:2a:bd:99:95:e9:0d:0b:5b:9a:b7:42:02:5c:33:dd:fa:8f:
c2:00:9d:34:7c:3a:fc:a1:cc:3a:af:a9:d2:87:32:13:af:80:
ef:8d:01:de:ce:c3:a2:26:ee:58:38:3e:ea:64:a8:74:79:ed:
b1:3c:ee:85:8d:6c:e0:d5:d2:7f:18:74:d6:03:fc:b1:68:95:
e1:23:71:b8:b8:aa:97:d2:32:77:fb:0e:91:93:28:05:00:24:
b1:d7:57:5a:49:05:9c:c3:3a:84:91:b1:8b:fe:5c:85:b3:d3:
a5:52:0e:9b:5e:5a:5a:b0:84:91:b3:10:24:bd:fb:d3:2c:ac:
54:2e:70:d0:01:b9:2e:a2:d3:0c:93:ac:03:62:b4:a1:8d:41:
a0:c9:67:a5:c6:cf:a4:f1:47:06:db:0c:a2:73:68:52:cb:c2:
83:4f:5b:73:53:c9:8f:44:50:47:c7:10:f9:8a:61:20:d8:ad:
7a:9f:21:d9:98:02:df:4b:00:4e:49:63:94:86:4d:06:e8:dc:
b6:50:49:73:cb:9e:c3:84:c7:17:1e:c4:8f:3f:60:58:79:d6:
4b:f0:13:92:8e:9d:f6:68:33:ad:76:50:a4:70:7c:91:b6:10:
4d:d5:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:53 2025 by rpki-client