Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: 1KhVL/yEjH1FAvAB77nSFVWI/mDc5ibOUjgA8/9c+ro=
Subject key identifier: 53:71:BD:B1:16:88:B0:D9:55:72:0B:70:45:57:0D:EC:51:95:1A:E6
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019A51BE25DF12709C05DFB8EF48DDCAE471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 02DF
Signing time: Wed 05 Nov 2025 02:00:07 +0000
Manifest this update: Wed 05 Nov 2025 02:00:07 +0000
Manifest next update: Thu 06 Nov 2025 02:00:07 +0000
Files and hashes: 1: 5iMuwWI8XaEhRZXS7r7Tcitw9PQ.roa (hash: 8fAOJFpGS1CZZLyn3E+heU8rt8qm4ywsWgdel84Aa/Q=)
2: YvRVUVUo7_yU7Iq1s_PjtWUSc3E.roa (hash: 573R9YYxB5EQXEuIaiXRONNginQD8FqOnode2lo9il4=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: 92V0+F11UY/ezoj5SzGVnAgMb8Ua4wQ48nYWRzKYqe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:25:df:12:70:9c:05:df:b8:ef:48:dd:ca:e4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Nov 5 02:00:07 2025 GMT
Not After : Nov 6 02:00:07 2025 GMT
Subject: CN=5371bdb11688b0d955720b7045570dec51951ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:a5:ed:8e:79:37:a1:d7:c2:cd:7c:79:1a:
f5:d5:aa:5a:25:04:48:21:48:4e:01:08:6b:59:eb:
e7:d4:ba:0e:fd:59:2e:b6:c2:b8:87:c4:7e:0c:a3:
d7:ff:c7:b6:5b:01:ec:69:27:d0:72:36:7f:3c:f8:
0b:2d:e5:ec:87:4c:cb:27:9d:0e:81:19:ef:0b:69:
06:b1:2a:1e:e7:5e:2c:fe:b9:85:61:1a:e8:b3:7c:
8b:a6:9c:9e:c6:c3:c2:a0:49:17:c1:17:1c:5a:10:
fe:bd:6e:70:6b:ea:64:cc:da:fe:a8:6d:fc:e2:69:
bb:46:fb:31:ae:d6:0e:4c:70:29:9f:93:56:4a:00:
6e:95:c9:44:d1:b1:2e:56:9f:91:2d:4d:31:00:27:
ae:7e:53:17:e4:74:75:94:d9:0a:0e:03:7c:b5:94:
4c:21:8a:03:53:d6:18:d5:7c:f0:15:15:e3:7a:f4:
8d:34:ae:7c:02:a9:17:e0:3b:60:c1:e4:77:58:45:
47:40:63:16:3e:f3:79:01:e1:ce:ae:c0:92:ac:b2:
7d:93:31:17:2b:28:2b:31:92:10:7c:85:93:fe:0a:
24:20:41:78:33:19:16:64:fa:d9:6f:36:13:7b:52:
cf:a8:86:70:f1:83:01:f7:49:3b:7c:13:18:af:32:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:BD:B1:16:88:B0:D9:55:72:0B:70:45:57:0D:EC:51:95:1A:E6
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:c0:2b:e0:f6:8d:e0:f8:ec:98:15:07:d1:21:f6:d6:72:
4f:de:31:33:0e:d5:e0:51:7a:89:2b:bc:e1:48:1b:45:bc:47:
08:81:78:fd:ed:70:4a:9c:41:79:c8:a2:54:d4:10:f4:1f:59:
09:58:d2:7f:05:5e:df:d9:13:2f:cc:55:a5:db:20:db:06:0c:
5f:ab:1c:76:d0:45:e7:73:4a:39:8d:ec:f7:db:a0:8f:bc:b2:
5d:b0:ed:de:aa:a7:d2:14:4b:a7:34:c8:19:ca:27:8e:89:a7:
29:49:ca:76:6d:79:ac:fd:c1:79:db:b5:f0:b6:a4:5d:91:e0:
77:2b:28:10:65:cc:33:e9:3f:4d:c1:08:ed:73:41:46:7a:4d:
eb:43:9a:e5:20:69:f7:c9:f0:4d:da:f0:12:97:38:df:dc:a1:
f6:ad:ea:36:67:a2:98:38:d7:95:e1:54:39:91:74:7f:71:92:
8e:11:38:8d:40:a3:36:f1:b0:8b:93:da:69:ff:e8:b4:c8:15:
82:51:4d:ad:c8:f7:ef:e6:26:5c:f9:24:36:f7:0b:d4:0c:a2:
91:9f:56:aa:9a:8d:43:75:b5:de:65:5d:7c:05:10:23:01:10:
f6:7a:36:e9:5b:d9:f3:51:97:5e:90:54:8d:20:3c:5b:67:2f:
d3:cf:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:22 2025 by rpki-client