Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
File: V2si8nkFl0hL-WkVqDVDwZSz_R4.mft (raw, json)
Hash identifier: 0zvzm995MHdCKXczAXg8N4ZlvOevQ88gLfilvxbb0Cc=
Subject key identifier: B3:1C:07:2E:18:D3:85:0B:70:11:08:6F:EC:69:0A:76:8D:0A:8A:E9
Authority key identifier: 57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
Certificate issuer: /CN=576b22f2790597484bf96915a83543c194b3fd1e
Certificate serial: 019A4F62D77B58D4F4E8199985F71CEE2FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
Manifest number: 0650
Signing time: Tue 04 Nov 2025 15:01:09 +0000
Manifest this update: Tue 04 Nov 2025 15:01:09 +0000
Manifest next update: Wed 05 Nov 2025 15:01:09 +0000
Files and hashes: 1: V2si8nkFl0hL-WkVqDVDwZSz_R4.crl (hash: SkqcNxOxeKSsmEo70/yCGr1pAeh+g2jIYw3G04Dw43s=)
2: WnvN9eO0xROw8P2u2NunmIAmhFM.roa (hash: ICDMCpB80BuzlOdYTKVVB47BHhMFIG3MGwkKpb0Kjms=)
3: ga2NxvzjVumF5thvPvomOtqub-A.roa (hash: Fnu74FvZlaTUv1bGjbnayDCXm216CFcy4KRgAcWl9Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d7:7b:58:d4:f4:e8:19:99:85:f7:1c:ee:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576b22f2790597484bf96915a83543c194b3fd1e
Validity
Not Before: Nov 4 15:01:09 2025 GMT
Not After : Nov 5 15:01:09 2025 GMT
Subject: CN=b31c072e18d3850b7011086fec690a768d0a8ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:5e:e1:10:35:00:ae:1e:34:ae:df:79:13:
b9:02:48:27:14:6b:50:dc:6e:41:1d:c0:e8:9e:a0:
d0:47:93:98:16:30:b2:f0:65:ac:2e:0e:be:c3:5b:
fc:10:3b:b4:25:f8:0f:1c:25:81:c7:3f:6c:e6:e5:
69:a5:37:ea:43:23:e7:97:ae:be:1c:92:ed:9e:40:
59:50:98:54:71:22:3d:c8:d4:0a:90:da:04:4b:f1:
9e:9f:01:04:f5:8b:69:8f:c4:da:73:e6:cd:ca:e5:
4a:92:a6:2c:07:33:3c:8c:54:38:a0:af:9b:f1:64:
91:19:57:d6:cb:8f:2b:be:83:de:d8:ae:d8:67:a7:
5a:af:d6:8e:c7:d9:e9:06:f7:c4:cb:4e:78:2a:cd:
6c:9e:fc:61:5a:58:58:d8:b3:a0:0c:6a:68:28:5d:
aa:b3:3b:79:7c:fd:40:4b:3f:10:cd:10:99:00:ab:
97:48:8b:a1:04:95:1d:49:3c:0e:5e:f7:6d:ca:13:
26:7f:e3:c7:1a:1e:70:8b:5f:36:23:6c:a5:89:37:
ab:a8:9e:c5:91:0b:0b:b9:20:dd:f2:21:9b:8d:57:
21:21:74:c0:be:b4:2c:49:49:07:99:46:80:6b:4b:
ea:9e:b4:1d:e8:67:32:1e:38:49:78:7e:52:ec:c5:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1C:07:2E:18:D3:85:0B:70:11:08:6F:EC:69:0A:76:8D:0A:8A:E9
X509v3 Authority Key Identifier:
keyid:57:6B:22:F2:79:05:97:48:4B:F9:69:15:A8:35:43:C1:94:B3:FD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2si8nkFl0hL-WkVqDVDwZSz_R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6efac4-d75a-425d-9157-aee6eb28514d/1/V2si8nkFl0hL-WkVqDVDwZSz_R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6e:74:a7:9a:04:85:18:ee:3c:f7:2a:bb:a2:99:a8:64:61:
90:28:b6:02:c5:be:89:35:c7:7f:83:86:13:4a:74:82:4b:78:
86:13:42:0e:35:d9:65:84:71:be:f9:9f:36:b3:98:d1:97:10:
0f:25:a0:8f:df:f1:ca:b8:14:7a:e4:19:aa:68:96:c5:bc:e1:
9a:bb:54:71:98:77:c9:ac:eb:db:63:51:ce:9a:eb:39:61:96:
c7:bb:1c:92:ce:3c:89:18:a9:09:1c:4a:f2:12:12:dc:2f:87:
36:6e:3b:e9:df:83:5d:c4:ed:e1:1a:69:14:8c:72:ef:c9:33:
e8:ac:54:ab:2b:3c:33:12:e9:4b:47:fc:5f:32:0c:4f:0f:2c:
6f:b1:39:43:bf:a3:40:9b:e0:07:e1:a6:74:21:96:40:6d:15:
83:d5:12:2a:00:52:de:1a:b6:47:96:38:a5:48:75:d6:5c:43:
83:cf:1e:d2:21:6d:93:5d:ab:1c:d1:0a:95:d8:ed:47:3a:73:
e6:60:1a:33:73:ed:c9:1f:e5:0e:44:15:df:16:63:b1:b8:c1:
62:0d:a7:ff:44:5a:5d:e2:9e:b7:d2:e6:ab:16:6b:5c:33:2c:
5e:4e:be:0c:f1:58:63:83:79:0c:47:21:38:4c:f8:2e:d0:e5:
0a:ae:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:43 2025 by rpki-client