Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: 9w/OJxDiU86aNy1pvnqMoNWtvLctvbBRrDJfyf+qBOY=
Subject key identifier: BB:BC:F8:B0:60:53:DD:82:2B:B3:A3:11:0F:B3:00:B0:27:B1:FD:02
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019A4DAB1FF318DBDB39EBC9CB68B0499F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 0831
Signing time: Tue 04 Nov 2025 07:00:51 +0000
Manifest this update: Tue 04 Nov 2025 07:00:51 +0000
Manifest next update: Wed 05 Nov 2025 07:00:51 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: lMmzi82r1GJb8M1XCkk/Z1ia06Dh+VZf1xpk1Yuif3Q=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:1f:f3:18:db:db:39:eb:c9:cb:68:b0:49:9f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Nov 4 07:00:51 2025 GMT
Not After : Nov 5 07:00:51 2025 GMT
Subject: CN=bbbcf8b06053dd822bb3a3110fb300b027b1fd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:7b:15:4d:48:72:e7:2a:e9:aa:78:62:e5:
0e:6b:3f:b6:cf:e0:45:12:2e:e7:53:2b:d2:45:25:
e2:83:5a:99:29:45:d4:ab:50:3c:ca:ae:66:17:0f:
e7:aa:10:af:38:1f:8f:0c:22:4c:a3:68:d7:64:1b:
76:51:0b:0f:91:df:99:2c:05:10:3d:7f:48:1c:64:
90:b8:f6:98:97:d4:73:da:84:18:63:2d:a7:02:aa:
5d:11:c1:b5:f6:ed:1f:92:0a:c1:64:75:5d:f1:40:
15:9a:54:10:63:f2:ef:f8:39:8a:bb:f7:65:56:1d:
0d:33:da:fe:3a:0c:da:89:5e:9e:a0:ab:6e:20:35:
7b:ea:d2:23:c9:8c:b6:d1:d2:ec:94:47:01:a5:b4:
f1:c0:49:86:33:4b:99:ca:39:ae:da:dd:11:e6:3c:
a1:19:e6:f6:25:f6:07:a1:c0:96:7d:2b:06:f6:d5:
7b:f5:0b:80:b9:01:11:89:7f:48:49:fc:03:60:97:
34:16:a9:ba:10:aa:95:91:4e:10:0b:12:68:ad:8c:
b4:90:62:be:a2:ed:d5:0f:65:31:0b:a0:22:26:40:
f2:b4:f5:ec:1a:6c:49:86:64:20:8c:ae:64:cf:a5:
24:4c:7d:2e:2d:95:bc:b9:54:0b:1e:bc:69:89:4e:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:F8:B0:60:53:DD:82:2B:B3:A3:11:0F:B3:00:B0:27:B1:FD:02
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1f:55:90:f8:3c:1a:b1:c4:a8:85:1a:dd:0e:8c:a4:e1:58:
b0:d8:9a:59:8b:20:55:0e:77:22:39:c6:3f:c1:18:ec:0d:cc:
2f:25:7e:01:43:9b:e5:4a:25:93:e1:bd:b4:27:12:76:06:06:
f3:ee:85:79:02:9d:5c:0b:0a:dd:b5:30:c6:96:e1:76:43:31:
26:8b:fe:34:bc:51:7e:29:2c:d0:9b:0d:38:66:6f:71:85:97:
ec:4e:95:67:94:ef:d1:e4:26:2a:a6:45:97:bd:1f:ac:f7:72:
27:63:70:9c:02:f2:8e:18:ba:a6:eb:c1:e5:46:b4:3a:49:13:
fc:96:b1:37:55:b8:63:f5:71:4a:09:40:25:20:c9:7d:60:0b:
49:33:49:c4:37:51:1a:90:9d:cd:40:2e:ee:94:9c:09:7e:50:
ee:fe:90:63:3b:49:96:7d:a5:c3:48:24:72:0a:aa:dc:60:40:
7f:8d:34:02:69:16:9a:d6:2e:49:08:6e:70:b7:c1:7f:22:3a:
6d:76:d0:11:c6:3a:96:c9:3a:9c:e3:f9:2f:b5:78:c3:84:92:
ac:4e:6b:e3:92:25:07:be:5a:4e:75:c2:63:7e:89:c9:31:66:
2b:c9:80:d5:df:63:b7:38:19:15:1e:c9:41:9b:d6:7f:15:34:
88:ae:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:46 2025 by rpki-client