Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
File: V7ifXMeCGeoSc_n1PFueM7xdvrU.mft (raw, json)
Hash identifier: U+oxmHY9osXyyqLkMdxrT7ttC7w2b1KZEkCDYO8J+kw=
Subject key identifier: BD:21:D6:A9:70:BF:65:CE:A8:12:4E:01:70:F7:07:2A:49:A4:6B:6B
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Certificate issuer: /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial: 019A4EF4F5929875039623775447C7674FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
Manifest number: 06D5
Signing time: Tue 04 Nov 2025 13:01:07 +0000
Manifest this update: Tue 04 Nov 2025 13:01:07 +0000
Manifest next update: Wed 05 Nov 2025 13:01:07 +0000
Files and hashes: 1: 2XZNJdR9Iep0Ywseo8-8iJMB8Tg.roa (hash: 7pIfh2Q654qMx1AmZFUCn+BOOHgc4UU06A+k+bghDdg=)
2: RRZa9Q054kEMSroT3AuPzC585XQ.roa (hash: 7iVMMtB+9zg3QA2J8+DzasUBkyEpZ63pEDBVLFDl2DE=)
3: V7ifXMeCGeoSc_n1PFueM7xdvrU.crl (hash: zcIHsAwtSp8HsTSSPtF8y85zMGQgRnu2eyoZMUImUZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f5:92:98:75:03:96:23:77:54:47:c7:67:4f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Validity
Not Before: Nov 4 13:01:07 2025 GMT
Not After : Nov 5 13:01:07 2025 GMT
Subject: CN=bd21d6a970bf65cea8124e0170f7072a49a46b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:e9:d8:e9:e3:32:ba:f9:c1:6e:fd:74:50:
48:0b:8a:d9:ca:d2:aa:cd:0d:a3:04:ef:52:ad:92:
2b:9e:a9:ed:5c:68:e5:d8:db:fb:73:99:08:a7:95:
84:b6:15:45:36:12:f1:10:66:c1:cc:61:d5:82:e7:
29:d5:2d:df:cd:65:59:c3:3e:bf:8d:2a:cc:c6:aa:
cd:54:1c:c7:b6:6e:12:0e:5b:f6:96:46:f8:e6:ea:
5b:77:08:1b:8b:3a:21:cc:9c:fd:46:6f:b7:2a:41:
b6:36:f4:3e:29:9e:08:40:4e:21:cc:a4:0b:5a:a7:
0c:c4:03:b1:86:0f:37:13:af:87:d6:c6:d1:92:f3:
0c:f6:77:04:f4:4f:62:67:63:9b:5b:6d:6a:bd:ce:
6e:d4:34:cb:61:2d:1e:ca:f3:c4:ac:17:06:6e:e2:
1d:5f:74:84:45:61:0f:db:69:a1:4e:0e:dd:ef:74:
1e:50:bd:09:a7:1a:30:1e:60:eb:84:40:fa:82:87:
08:9b:c6:84:7c:74:32:8e:76:4e:ac:28:f9:4a:35:
d5:49:bf:d5:9a:ad:e8:03:50:5b:33:9f:67:5a:72:
25:da:1b:89:6e:92:eb:36:68:88:c2:d9:30:bf:68:
74:14:ba:2f:30:ad:52:13:17:b6:94:5d:a1:39:9c:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:D6:A9:70:BF:65:CE:A8:12:4E:01:70:F7:07:2A:49:A4:6B:6B
X509v3 Authority Key Identifier:
keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:63:af:04:fc:f3:e5:24:6b:8e:d5:f9:aa:d5:22:d6:bd:54:
0a:ac:98:56:cf:e5:81:cd:b7:59:82:99:4b:b4:b9:59:3d:70:
3a:22:83:4d:35:24:ea:cf:9b:ca:6e:7b:77:ce:a4:0d:b0:b0:
31:38:c5:51:c4:36:a2:29:c6:74:c2:ed:bb:73:6e:1d:a2:3e:
af:f1:9a:ff:8f:9c:14:49:b8:1a:63:ee:31:cc:74:87:ee:8b:
9a:dd:74:fa:01:48:ce:fd:13:b0:66:91:d1:23:0c:45:65:32:
ac:1b:1f:7f:03:19:17:66:c6:d0:cf:63:ec:75:78:7b:f5:6b:
d6:9b:f7:78:33:b2:30:54:4d:b9:80:59:44:36:73:49:fa:ec:
69:fd:35:68:35:76:81:58:6e:35:ce:64:1e:ab:d9:0e:f9:17:
30:f6:e7:19:18:ef:d9:3f:47:47:82:ae:23:47:72:1b:24:de:
4a:de:a8:82:b8:f4:9d:fb:34:6f:6c:d2:f4:58:df:c1:30:86:
14:24:4f:34:c5:c0:ab:80:38:81:5d:b6:74:40:18:f6:c7:4b:
d5:36:60:82:c1:e4:3a:b7:50:a1:85:cf:12:a5:5c:d6:fd:11:
13:8e:d9:9f:e2:b8:7c:9f:86:9c:9a:07:2c:45:cf:d3:4e:c3:
6b:65:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:22 2025 by rpki-client