Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: xMgmXBbPK/IigjTVxRkSX7vhOjkXeAEVE38DyFAY7ig=
Subject key identifier: C7:E3:28:98:CE:FC:AA:62:19:1C:CE:E9:F8:79:B5:E6:E1:73:B4:A2
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019A4D0657A0E64271FEF82477BA7FECA57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 04:00:52 +0000
Manifest this update: Tue 04 Nov 2025 04:00:52 +0000
Manifest next update: Wed 05 Nov 2025 04:00:52 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: ss6I49ftuEYF3ojnluuqa3sVGii+vLfVVjbDuHJaqS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:57:a0:e6:42:71:fe:f8:24:77:ba:7f:ec:a5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Nov 4 04:00:52 2025 GMT
Not After : Nov 5 04:00:52 2025 GMT
Subject: CN=c7e32898cefcaa62191ccee9f879b5e6e173b4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:49:bd:2d:78:01:4b:d0:45:b6:d1:50:0e:d7:
c5:59:ab:55:05:3e:3d:b5:59:e2:c7:56:dc:12:11:
d6:b6:08:98:a7:69:e7:43:52:91:2f:9e:cf:a0:bd:
99:df:7a:02:ef:a3:46:48:23:a5:fc:38:96:f9:57:
0b:63:1c:11:cb:16:52:b5:26:b2:69:7a:6a:a7:a1:
ae:75:96:7d:70:88:eb:e9:bd:dc:bb:b6:c4:78:c7:
0b:f0:c2:a7:05:4e:38:b1:05:28:b3:b3:34:22:ae:
85:ba:00:3f:35:00:6a:bc:28:6d:ef:62:24:84:b0:
bc:6b:f2:58:1f:de:c9:1e:e3:42:58:e7:d3:3f:5b:
1a:bb:9c:3f:9b:b7:f0:03:d6:b5:ce:fc:80:6f:57:
e7:e8:60:49:78:67:ad:a8:e9:42:13:f3:37:0a:4e:
00:58:9e:f8:bc:5b:9b:e0:3c:09:04:15:11:75:94:
ed:1b:90:b1:e1:43:c7:57:4f:01:a3:85:c7:0e:ff:
fc:a9:bc:a7:f7:bd:2c:04:bb:6d:6a:46:18:a1:ed:
a2:7d:ed:aa:86:20:8a:a6:3d:94:2c:53:4f:49:21:
00:47:0f:10:62:6b:ac:89:e5:c7:1b:70:a6:6b:1c:
aa:3b:d9:ad:43:1f:e0:84:73:99:0d:f5:ef:5b:8a:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:28:98:CE:FC:AA:62:19:1C:CE:E9:F8:79:B5:E6:E1:73:B4:A2
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:16:dd:87:25:ab:b2:11:3a:c5:a2:ed:a0:53:a3:61:60:a1:
a8:d7:3d:de:05:cc:13:0d:c9:a4:c2:04:39:fa:c7:6c:6a:a7:
e6:2a:8c:f0:06:f6:01:00:e8:c3:64:4f:f4:03:7e:98:15:45:
ab:8c:c2:9b:6b:dc:92:c4:13:a5:53:fd:ba:b9:61:f0:f5:04:
1b:96:67:01:b1:fe:bf:fd:e4:58:93:0f:0b:7e:df:7f:01:79:
17:9f:14:be:86:b7:3c:2b:69:0f:68:18:61:ef:b1:dc:db:8e:
16:5c:97:06:6a:a8:23:00:e3:0e:d4:e1:64:0c:fe:68:7c:21:
db:8c:5f:4d:07:fa:9b:82:7f:11:df:9e:8c:b8:a5:6b:f4:16:
64:46:09:a4:3f:d6:ed:70:1e:e3:a2:39:04:e2:3c:8c:93:d7:
b1:47:d1:f8:61:3c:4b:81:5d:01:7e:f7:07:26:07:8e:71:4c:
fb:bc:a7:87:cd:32:02:23:b0:99:fb:f9:14:9b:0c:89:d9:76:
1a:5d:5f:71:e9:87:80:8f:da:7f:15:97:83:ee:38:8d:50:84:
fd:ad:8c:58:7b:34:16:80:13:7d:ad:84:ef:47:5e:24:78:f6:
27:cf:70:d7:02:eb:d2:bc:ba:56:f7:00:10:9b:38:31:8b:88:
ad:42:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:20 2025 by rpki-client