Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File: buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier: 1dqC6JvleTY7gHk2qHfTBf6wEYsdT7QATVAnmuWjzY8=
Subject key identifier: 8C:1C:9C:FD:43:8E:79:12:B6:56:5A:5B:C5:67:94:AC:4A:1A:F1:A8
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer: /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial: 019A54F653D7A6C97C560E496F6EA1082A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 17:00:20 +0000
Manifest this update: Wed 05 Nov 2025 17:00:20 +0000
Manifest next update: Thu 06 Nov 2025 17:00:20 +0000
Files and hashes: 1: YWeKpT1rE5D3jQdqNfYDMaSRQ-o.roa (hash: Zb5RmiW5EJ1sc/m0g84BzROe4xUzHJtXaAdIweCX3Co=)
2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: 6s09kL+xLKf1KjJA/wIqcEeZdSh4CQBUYrlYe20BL7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:53:d7:a6:c9:7c:56:0e:49:6f:6e:a1:08:2a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
Validity
Not Before: Nov 5 17:00:20 2025 GMT
Not After : Nov 6 17:00:20 2025 GMT
Subject: CN=8c1c9cfd438e7912b6565a5bc56794ac4a1af1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:19:f2:4a:4a:ff:05:90:71:88:5c:83:9e:
83:1c:24:e4:31:bd:08:53:96:ca:ef:7a:74:a8:21:
5e:14:fb:1b:e6:a7:86:84:79:68:29:98:f7:2e:82:
98:2d:fb:50:5c:b3:90:8c:ea:e8:07:14:b6:3f:55:
94:c5:64:f2:b2:80:2b:01:26:77:80:97:fc:bb:ce:
40:46:74:39:de:d5:97:5b:95:df:fd:b6:13:4c:e2:
85:68:15:19:eb:df:9d:00:e3:f1:ea:fe:09:a0:e9:
cb:8a:9c:c2:a2:f2:5c:7c:15:22:97:46:e8:83:59:
1d:b1:e4:50:24:7b:9d:68:2e:3c:61:52:9f:9f:7e:
64:88:e1:8e:d4:e8:43:95:06:29:2d:77:4f:0f:c9:
34:ec:08:e5:bb:cc:e8:78:52:62:b1:4c:6a:db:73:
12:25:f5:4e:d4:72:1e:57:9a:df:94:22:4b:f5:98:
9b:e1:13:b0:1d:57:8b:d7:0c:d3:5b:bd:f9:c3:da:
d0:bd:94:91:cf:e0:38:db:35:69:50:d9:17:4b:9b:
7c:b1:46:25:e5:7f:73:05:4a:02:d9:49:da:69:7a:
27:26:92:6e:1d:d3:96:64:32:b2:85:a4:2d:45:a8:
f9:0b:93:be:35:1c:24:97:b4:bf:d0:30:81:a3:6f:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1C:9C:FD:43:8E:79:12:B6:56:5A:5B:C5:67:94:AC:4A:1A:F1:A8
X509v3 Authority Key Identifier:
keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:bb:dc:25:51:69:cd:57:67:1d:3a:dc:ea:90:10:a0:6b:
f3:ed:0a:80:d4:e7:b3:fc:cc:0f:ee:f4:2f:fb:ac:21:91:f6:
34:6f:0c:99:38:ac:34:b0:71:3e:b2:cc:ed:b8:da:d2:57:ff:
a6:a1:79:94:8a:73:3e:41:58:81:6e:d7:f9:30:6c:2b:38:4e:
c2:f0:8a:f4:68:6f:12:e1:0c:bf:bf:08:a7:ae:10:eb:34:5a:
04:9c:da:54:91:74:8e:a3:cf:11:d0:e9:a4:c8:88:07:a1:15:
b1:14:f3:54:1d:2b:4a:98:eb:18:ff:59:7f:27:21:2c:ce:2f:
31:b7:91:44:13:bd:c3:25:b4:d0:ef:12:b9:3e:41:04:81:44:
8a:a8:5d:cf:2c:c1:33:c2:48:f0:9c:82:53:15:43:29:11:bd:
07:35:09:74:b4:49:e8:98:fa:c4:1f:10:24:85:cb:a7:ba:ad:
ad:73:64:b7:76:77:4c:c9:c6:1c:e0:f8:bb:1f:d0:35:c2:95:
0c:22:a2:76:a4:18:a9:ec:77:66:b1:a8:4a:eb:be:25:a4:9a:
35:28:f5:6c:5b:1e:00:1c:e2:5f:16:43:c1:c1:e2:e1:8a:dd:
d4:04:24:49:0d:51:28:d2:2c:e9:a6:9f:66:fc:6c:a8:4f:a5:
4a:99:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:41:08 2025 by rpki-client