Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: VueWgCyeeVpkSQzDVCPVJw7h/J34g5KnJGNeL0G1Wjw=
Subject key identifier: F8:5A:7B:37:C1:7F:AA:11:7F:40:2F:E9:57:5C:4D:6B:ED:CB:5D:B2
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 019A55D2864E77B13D42484C8C17DB72804F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 0186
Signing time: Wed 05 Nov 2025 21:00:51 +0000
Manifest this update: Wed 05 Nov 2025 21:00:51 +0000
Manifest next update: Thu 06 Nov 2025 21:00:51 +0000
Files and hashes: 1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: phwPWRB6QxZY+z1LjzWiMwMCaWdvz0mju8Ku5AIlV50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:86:4e:77:b1:3d:42:48:4c:8c:17:db:72:80:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Nov 5 21:00:51 2025 GMT
Not After : Nov 6 21:00:51 2025 GMT
Subject: CN=f85a7b37c17faa117f402fe9575c4d6bedcb5db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:65:d8:21:b2:26:48:cf:17:b5:70:31:9f:
79:cc:be:c5:f8:6c:0d:ad:0e:f6:5c:c5:32:2b:32:
27:02:95:26:86:fa:14:75:9e:ce:71:c5:66:59:d6:
aa:e8:d5:74:e7:20:9b:03:b8:c2:51:ce:ba:68:42:
f0:5c:a6:1a:17:05:c0:4b:ef:58:d0:e1:b1:46:fd:
51:d0:c9:32:11:1b:8b:62:27:bf:dc:1c:55:c6:39:
da:4b:80:e7:2a:d3:be:2b:a3:67:66:76:a2:df:04:
5b:c1:48:f5:1f:21:70:97:b0:e8:6b:7b:6e:10:f3:
5c:cb:1c:79:d0:20:79:95:06:7e:02:72:29:c1:79:
ff:ea:76:9e:60:8f:12:75:b4:4d:4d:85:61:e1:29:
f1:a0:2f:8f:87:de:63:9c:61:f8:a0:02:95:f4:4a:
ad:0c:1b:c3:6a:8f:6b:77:f0:54:bc:f3:1b:d5:c4:
83:81:22:39:dd:a6:cf:a1:13:a0:11:d6:84:e7:14:
79:44:bc:c0:1e:da:86:dc:ba:71:0e:60:af:5c:96:
74:e1:50:f6:21:09:95:83:91:62:47:09:58:f2:7e:
4f:40:c4:fc:07:b5:41:64:5a:94:39:85:83:bb:85:
f6:20:45:0b:ca:60:49:36:23:99:16:fa:33:e7:4c:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5A:7B:37:C1:7F:AA:11:7F:40:2F:E9:57:5C:4D:6B:ED:CB:5D:B2
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f4:2d:6a:65:71:64:b5:a5:b5:b4:91:7c:fc:03:62:67:fd:
7c:86:40:63:96:54:bb:c9:13:93:0b:18:23:20:ac:18:33:60:
16:ac:46:cd:10:91:78:8e:15:41:e5:46:98:ce:f2:d9:33:55:
3f:3b:9d:9c:f9:73:f6:23:84:fb:40:06:e2:06:36:1f:33:87:
91:5e:39:f8:ea:32:4a:71:c8:b6:ed:64:6a:89:f6:20:ca:bb:
74:31:0f:58:be:2f:a6:43:c9:59:d3:84:f6:fd:81:9d:f1:be:
0a:34:a9:c8:c0:49:82:42:6a:df:2f:6a:0f:fe:ff:f9:ad:d6:
0f:16:05:bd:5a:68:5b:e0:50:ef:f4:6d:ae:f5:ed:88:c7:15:
45:81:90:df:f8:0a:9a:f2:64:22:96:71:a9:b8:58:48:e5:db:
01:4c:55:52:22:60:a4:b7:dd:76:81:18:bd:91:cd:47:bb:33:
39:97:f7:31:dc:f5:f3:64:0b:89:74:1b:16:f5:06:46:e4:99:
75:c7:32:11:db:8b:03:a8:19:b2:34:2d:17:b7:fb:2c:6b:4c:
7b:ca:f9:56:47:93:51:da:ec:ed:86:60:aa:e4:c9:38:40:57:
27:4c:1b:2c:d5:11:fe:9f:30:1f:5d:59:8c:9d:92:26:5c:34:
ce:84:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:36:00 2025 by rpki-client