Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
File: vP7i_2ht6InD9Y3x2fXit41kHeQ.mft (raw, json)
Hash identifier: pB5EtqsVioyTJAVFEqiXMGI1TWfwpk3g0VGtd2fW6oU=
Subject key identifier: 2F:B5:15:CE:2A:0A:86:8E:55:DE:87:85:74:D8:E9:CC:EA:C5:40:A2
Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
Certificate issuer: /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Certificate serial: 019A4C982AFEE902E4CBD6C90AA41D83C95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
Manifest number: 05EF
Signing time: Tue 04 Nov 2025 02:00:32 +0000
Manifest this update: Tue 04 Nov 2025 02:00:32 +0000
Manifest next update: Wed 05 Nov 2025 02:00:32 +0000
Files and hashes: 1: 8v2Y_hDM4P4gm6VLl2fM1tYXUMY.roa (hash: Fwwqse9/8KZUX187OjpN/LZOPaaW4loyUBTUxSbinX0=)
2: vP7i_2ht6InD9Y3x2fXit41kHeQ.crl (hash: 1gILHV/1mj7WGbEpJ/mlr6GzuH5gxqUqFupGWGzxwCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:2a:fe:e9:02:e4:cb:d6:c9:0a:a4:1d:83:c9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Validity
Not Before: Nov 4 02:00:32 2025 GMT
Not After : Nov 5 02:00:32 2025 GMT
Subject: CN=2fb515ce2a0a868e55de878574d8e9cceac540a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:19:09:cd:08:49:a4:b2:2d:1c:11:78:12:
50:91:63:73:51:7f:04:06:ed:1d:90:1a:96:54:25:
1b:dd:e8:32:54:d1:4b:97:2b:2c:b9:64:38:e4:21:
18:9a:a0:27:58:32:dc:bc:4a:86:9c:bd:95:4a:4a:
cb:6c:26:69:5b:d2:35:99:13:1b:d9:f8:e2:d3:39:
70:08:c2:43:7e:1d:51:98:d5:33:0b:19:6d:8c:93:
51:8a:a5:e5:68:87:91:ce:e5:f5:a1:ac:99:30:19:
4b:7b:b3:d4:5b:56:96:3d:b8:3b:78:27:8d:ba:2f:
4e:f6:92:9b:63:b7:b6:7b:ad:48:af:8e:96:16:35:
8f:0a:ee:92:05:97:dd:b5:53:03:af:ba:8c:2a:6e:
14:ea:71:8e:4f:1a:12:8a:a5:d8:1e:6e:a4:41:e8:
f0:4c:fc:9a:0d:f9:88:14:48:14:74:34:7b:7e:06:
70:98:6b:7a:56:97:0d:20:ec:9b:a9:88:69:f8:56:
6f:ac:0f:7d:b4:18:55:e1:3a:d4:5e:d3:ec:70:d8:
1d:ad:3f:1e:69:f5:40:96:7f:f5:8c:15:d4:74:3e:
c4:71:fb:d9:3e:91:41:0c:f7:94:34:43:f8:32:b2:
6a:7f:b3:60:9e:99:ea:99:9d:3c:0a:a9:f5:a6:95:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B5:15:CE:2A:0A:86:8E:55:DE:87:85:74:D8:E9:CC:EA:C5:40:A2
X509v3 Authority Key Identifier:
keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:93:ce:6d:9a:8d:13:1b:73:eb:d5:a0:15:14:49:2f:ec:50:
8e:e7:08:5e:7e:91:3f:8f:1b:83:ee:45:93:a9:87:9b:fe:1f:
06:86:36:a7:fe:a0:e0:5d:5b:d5:82:56:11:9b:e3:ae:be:cd:
15:47:91:bb:4c:0a:3b:f8:d8:60:bb:00:ac:e8:0d:24:1e:f4:
4b:1a:d7:08:14:9f:aa:55:26:58:67:34:35:72:ba:34:6e:ef:
f4:f2:56:06:16:27:18:ae:70:51:3d:93:77:5e:08:75:08:25:
16:79:34:39:c4:1d:1f:68:80:a9:75:a8:9d:e4:ac:c6:92:5d:
75:6e:c4:fa:56:22:8b:32:ae:51:bd:5f:dc:60:00:9c:dc:41:
b9:8c:8f:72:25:17:08:27:05:43:0f:2f:fd:fd:eb:56:15:d0:
0a:cb:96:0f:f3:65:1a:e8:ef:d1:6c:71:aa:c4:a3:2b:2b:10:
04:62:30:1c:a3:55:6e:8d:80:81:39:bc:33:54:74:84:cb:df:
f0:b0:e8:70:e1:88:1c:81:85:f5:84:a6:b3:a9:0a:65:c7:fe:
3f:cd:6d:0e:f5:bd:0c:4d:27:a1:d3:b4:2f:67:27:28:be:eb:
eb:ac:b4:f7:2e:14:9c:69:c1:c6:aa:82:bf:99:eb:68:96:ca:
33:30:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:29 2025 by rpki-client