Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: 2Ya0XGr7q0ZVsFj2D9r8gqf+wqm75ZW7iFTVwlhEAaM=
Subject key identifier: B6:39:41:AD:31:3B:2E:0C:A5:16:E9:7C:C9:1E:00:2C:F7:E8:3E:9F
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 019A4F98E38B8B13211A1E6578B0BDBD9170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 0A66
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: _XpEMn72FeEctOAcMkQobteNSkY.roa (hash: bnxUUX45W8TpYP9Drk2/xMaW53mScgsvGUmVXogbW1Q=)
2: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: qtk+ZH53NmlummsJyoynuZnVXRuCm30GoEbJpOOYGWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e3:8b:8b:13:21:1a:1e:65:78:b0:bd:bd:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=b63941ad313b2e0ca516e97cc91e002cf7e83e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e6:12:5d:73:04:c8:64:f5:39:99:39:50:15:
a2:81:70:0f:3e:b7:c7:6b:f6:b1:33:ff:51:4b:de:
50:6d:90:e7:b9:5b:c9:ff:ca:8f:48:09:96:17:a2:
57:63:28:3c:c3:75:5c:e8:40:49:23:c3:f9:a5:56:
9a:d7:f3:3c:c7:87:fd:67:ca:a4:c6:1a:11:40:26:
43:20:3e:45:14:92:09:3d:92:ee:9c:83:42:62:d8:
43:45:f3:c7:fe:e7:97:0f:d3:88:41:10:34:3c:37:
2b:f0:91:e5:9a:a1:02:9b:4a:f8:11:7e:33:1a:24:
4b:3b:37:74:03:d9:9e:d9:db:a6:71:7c:f0:58:7b:
8e:58:9e:fd:9f:fa:90:d3:59:da:2c:c9:4b:22:a9:
42:b2:4a:8c:5f:84:ce:94:ac:4d:63:c2:f0:1f:f5:
92:f0:16:b4:c2:19:c4:e8:8c:4f:bd:f6:a0:36:95:
8a:f4:05:d5:18:b9:d2:e9:54:b9:5a:54:88:b7:f2:
6e:e6:6f:5d:05:39:7b:1d:3d:e7:a1:80:d0:24:ba:
a0:28:c9:07:b8:b1:87:06:26:b3:1c:06:84:5a:a6:
97:04:a7:af:17:b9:73:31:67:35:9d:8f:2c:8c:dd:
d6:1c:80:67:da:5c:ce:e2:9f:a8:6f:a8:30:e1:2e:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:41:AD:31:3B:2E:0C:A5:16:E9:7C:C9:1E:00:2C:F7:E8:3E:9F
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0b:21:35:1e:17:44:5d:94:00:44:4d:cf:c6:7d:86:58:74:
8b:99:1a:d7:cd:af:e3:42:53:01:d4:7a:1f:97:a9:28:a4:93:
fe:7f:8b:dd:f3:e9:12:64:f9:5a:60:89:b4:f8:8a:a4:0c:19:
7d:a0:06:90:01:cd:65:f7:0f:50:ee:60:2e:1e:31:9d:bd:a3:
bd:6b:58:2f:0e:e3:fd:f6:f4:30:81:a5:80:f4:de:24:05:61:
d4:24:07:f7:dd:40:27:6f:5b:2c:23:96:8d:ea:88:67:01:7f:
30:15:a3:98:f9:7d:9f:a6:a2:0e:ac:bd:95:c7:8e:4c:78:33:
b7:c2:d8:94:20:24:6f:f4:f6:05:b5:61:21:73:73:2c:ce:f4:
e3:c1:81:ec:ad:58:85:5a:28:e8:58:3d:dd:19:67:54:a7:d3:
b6:f1:d1:82:dc:f7:02:3f:6e:aa:42:e3:f9:ef:81:37:b2:c1:
48:ba:a3:e7:b0:3a:7e:6e:08:2e:e2:79:37:bd:06:02:5a:72:
f9:a8:4f:71:6f:4a:36:54:96:35:67:d2:81:5e:01:67:e6:bb:
b8:41:54:2c:41:fe:74:8d:4a:0a:08:fe:2e:22:02:b3:fb:b6:
a3:52:ad:01:07:a8:71:2e:20:77:6c:e3:11:fc:88:48:26:09:
a2:a8:f0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:16 2025 by rpki-client