Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier: /7CDFAIBZjcEAKm8IkvnoNolmUweLV01lUVH1CT4CD8=
Subject key identifier: 5D:18:11:BA:09:51:DD:2E:F8:7A:01:39:1E:7A:49:5E:66:33:11:B0
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial: 019A541B2A99243F2A0B527545DCF0983D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number: 12
Signing time: Wed 05 Nov 2025 13:00:57 +0000
Manifest this update: Wed 05 Nov 2025 13:00:57 +0000
Manifest next update: Thu 06 Nov 2025 13:00:57 +0000
Files and hashes: 1: YK5nFZTFgBEwXmaFB6vIIRqOTD0.roa (hash: jOXBRmwr3D9a+H6ywOkdI9zIP2sM0Nf1YNNjnaSWmfo=)
2: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: /DlhrkNgsPec6pbLJyVkwe1wzy9p6Cp5HFp6s2Gzkf0=)
3: xXaP2eDNgG4DZ5MWiMVfRW19g2s.roa (hash: NRx5nwi4HBO5MYl0mHSa1UutEw1DMYe/lbcn2V85lZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:2a:99:24:3f:2a:0b:52:75:45:dc:f0:98:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Validity
Not Before: Nov 5 13:00:57 2025 GMT
Not After : Nov 6 13:00:57 2025 GMT
Subject: CN=5d1811ba0951dd2ef87a01391e7a495e663311b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:08:92:17:f9:4f:63:d5:3b:d5:dc:c7:c4:
0f:38:cb:b3:9f:56:3b:7f:30:21:28:4e:c1:cd:ed:
37:15:00:16:c9:59:0f:d7:d1:0c:22:63:8d:4a:82:
bf:aa:17:b0:3c:a5:3d:40:24:e2:ba:c1:03:c6:8f:
ac:80:ef:5b:97:53:8b:43:99:d9:ae:47:f5:8d:f9:
d9:ce:7b:a2:1a:ed:fa:9c:34:94:a0:0c:12:b1:80:
26:ad:e9:b1:5a:ea:94:df:25:7e:77:c6:55:59:88:
a0:2f:c1:fd:88:5d:09:f8:58:93:66:75:d7:44:01:
2f:b2:fb:d8:87:c6:76:4f:d4:69:86:3e:9c:62:05:
44:5a:12:7f:75:10:0b:21:2b:ee:c4:92:40:02:e0:
1f:dc:ab:48:e2:22:ba:68:d9:ac:10:ba:b9:7a:fc:
c7:03:e0:83:51:ac:07:70:5e:fc:9b:aa:c0:9f:d6:
7a:aa:3b:11:e9:e5:b0:10:28:95:1c:e2:2b:49:29:
7a:96:04:9b:91:0f:33:d8:15:b9:06:d7:6f:a1:63:
7c:81:ab:51:b5:31:7f:a1:46:b2:f2:eb:53:24:df:
9b:ba:87:2e:00:97:9b:34:3a:08:05:ea:8d:e9:35:
cf:46:67:45:c0:43:05:d3:35:15:e4:b9:a3:09:ab:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:18:11:BA:09:51:DD:2E:F8:7A:01:39:1E:7A:49:5E:66:33:11:B0
X509v3 Authority Key Identifier:
keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ed:57:4d:1c:16:f5:41:94:41:98:5a:2e:82:43:26:60:f4:
83:2c:bc:56:53:7c:31:6a:4e:62:42:d0:c3:53:e6:7a:b8:82:
c6:16:f0:4a:e5:90:cd:fc:6d:00:b7:c6:50:0c:3d:00:03:90:
ab:dc:cb:23:c0:27:8b:2f:49:ed:cf:ed:0e:b2:3c:2c:5b:d0:
0e:2f:d8:e8:6b:26:d3:7f:b1:48:d9:99:b3:a2:04:21:f1:9c:
90:b2:44:0b:39:ff:2d:25:a0:8d:51:5c:60:77:9f:69:03:ce:
e7:75:e8:ed:d7:5b:83:c2:63:7b:e3:f4:87:bb:de:c5:e8:60:
a6:8a:fa:54:59:6c:6c:1f:41:60:af:9e:68:ba:0a:01:6e:f1:
0b:77:a7:59:25:8e:b3:12:7d:d1:22:37:45:a3:72:d7:ff:b6:
e5:69:4c:ba:16:61:f0:79:56:66:44:49:2a:45:6d:8e:ed:e6:
ba:ef:8f:0b:3e:23:45:aa:a0:33:30:21:68:08:35:aa:92:fc:
69:27:39:c0:bf:8b:66:75:d3:90:de:aa:26:93:7a:3a:57:3d:
b6:ab:f2:b6:61:ef:b9:e3:8f:05:78:db:98:cf:50:c5:21:ee:
66:46:f4:9a:a2:f3:48:64:7c:6d:eb:99:03:96:7e:3e:bc:e4:
af:c1:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:12:42 2025 by rpki-client