Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: ZrUfwryleJyzX/vKuPzyuQ1ySM0j6otCfuI5apIy7lo=
Subject key identifier: 15:CC:11:71:DB:93:D4:94:BF:02:AA:E8:C6:E4:0C:BF:1B:38:0F:8F
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 019A51BE606E07B3286F94975239124B7C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 0AD2
Signing time: Wed 05 Nov 2025 02:00:22 +0000
Manifest this update: Wed 05 Nov 2025 02:00:22 +0000
Manifest next update: Thu 06 Nov 2025 02:00:22 +0000
Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: nQcu5OqRu1yDw4Nf+gIEG/PqzkidMeCoMZ7FRC1NUBQ=)
2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:60:6e:07:b3:28:6f:94:97:52:39:12:4b:7c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Nov 5 02:00:22 2025 GMT
Not After : Nov 6 02:00:22 2025 GMT
Subject: CN=15cc1171db93d494bf02aae8c6e40cbf1b380f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:65:9a:fa:5f:2e:88:b4:b4:85:5e:c2:bb:
95:f6:7e:cb:63:89:bf:f3:be:1f:fd:b2:ca:d9:46:
fa:f4:d5:d9:88:a5:7d:1b:61:a0:32:25:3e:2e:a1:
23:f7:be:95:0d:d4:d3:c9:87:ca:b6:27:47:5d:d6:
8d:c4:ad:49:00:35:fd:c6:12:21:5f:6c:7d:f2:67:
bd:1c:ea:46:b8:39:61:01:02:e3:58:1a:08:ef:04:
c7:6d:57:b0:a7:fe:f1:22:77:3d:8f:2d:6d:ce:f0:
85:f3:43:0d:58:2b:83:0f:2c:a2:58:88:b4:67:af:
85:02:c7:bf:38:50:de:5e:4a:04:e5:2b:63:11:6b:
b0:8b:68:44:76:e3:8a:fe:43:62:26:b4:0f:d8:25:
00:63:cf:83:fd:1b:a4:d0:3a:11:eb:74:66:ce:05:
ac:e1:bd:8a:a4:93:87:7e:b4:e8:27:d9:21:7f:15:
5c:ef:97:19:2b:49:cd:02:4d:4c:5a:b6:99:53:86:
05:9a:f8:cb:e9:5c:b9:94:c3:79:9b:7e:32:84:63:
4a:0e:61:c8:5c:38:81:92:68:35:27:57:be:76:72:
d1:e1:9e:29:e3:5e:4d:eb:9f:2b:43:84:82:fa:e6:
98:84:48:40:a1:54:bc:23:cd:ea:7d:ce:34:00:89:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CC:11:71:DB:93:D4:94:BF:02:AA:E8:C6:E4:0C:BF:1B:38:0F:8F
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7a:d4:40:b0:a7:29:3c:3a:11:6a:61:08:e2:d6:c9:18:57:
47:93:4a:05:d9:eb:cf:1a:da:3e:25:85:a4:d2:2b:04:b1:c6:
22:cb:b2:cb:02:71:67:da:0f:af:d1:9a:30:a7:67:9d:34:ea:
d8:19:bf:6c:a4:64:6c:aa:f2:18:99:56:e8:0a:38:4f:9e:76:
3b:27:bc:53:ba:fe:73:e9:f0:7f:48:21:90:fc:ab:c2:7c:a1:
b1:2a:c5:ff:60:25:e3:f6:aa:eb:1a:51:e4:ab:86:ff:bd:cb:
03:2f:0a:f5:e0:68:8d:0f:4f:4d:96:df:aa:d2:33:b6:03:d5:
19:f5:44:64:bd:ed:3c:73:c2:f8:35:79:41:71:23:29:7e:df:
2f:db:ea:fa:c4:87:5f:8b:98:01:db:8f:47:31:63:54:31:4b:
ae:33:b0:6c:e1:3f:56:51:58:9f:20:0e:57:82:af:63:30:6a:
f3:e8:e7:0d:a6:7c:15:2d:5f:ae:9c:8f:66:4e:d3:65:0e:86:
28:cb:e9:24:d5:55:3c:f0:1a:01:18:03:f6:0a:5b:45:d1:b8:
1f:c1:45:d6:57:45:40:0f:5b:30:ce:2a:6d:29:ee:be:7d:04:
19:21:22:ee:a7:e0:1b:68:42:b0:9b:c5:80:ee:b7:9f:8e:79:
da:41:87:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:57:58 2025 by rpki-client