Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: 64Qt9AYikloELSnNkWLe7IE9H/cZbRB6Na5R+gqLswk=
Subject key identifier: C2:F2:90:6C:9B:FC:31:2D:6D:EF:C8:E6:04:F3:3B:D6:4D:C8:6C:DA
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 019A4EF59E711E412AFBFE234412EC073F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:51 +0000
Manifest this update: Tue 04 Nov 2025 13:01:51 +0000
Manifest next update: Wed 05 Nov 2025 13:01:51 +0000
Files and hashes: 1: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (hash: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=)
2: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: D/JBIXXSCmgtFqVf3yrHAr7IMpPtZ1wF+MAHxkV7oGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9e:71:1e:41:2a:fb:fe:23:44:12:ec:07:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Nov 4 13:01:51 2025 GMT
Not After : Nov 5 13:01:51 2025 GMT
Subject: CN=c2f2906c9bfc312d6defc8e604f33bd64dc86cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:ca:40:3e:19:b2:8e:c2:8c:c3:f0:e3:bd:
dd:7b:89:17:75:f6:30:da:12:9b:46:d2:c8:2c:4c:
b4:61:84:23:27:9d:00:b1:3c:8e:06:39:bb:d8:30:
19:25:e9:93:86:7d:25:79:f8:c1:75:6d:ae:ed:d0:
9f:96:00:c8:73:75:e9:12:8b:cf:62:af:94:65:ba:
f4:87:14:2a:8c:45:ef:db:b3:02:7d:6d:78:65:43:
a6:44:7a:be:5b:c0:2a:2a:ae:4d:70:98:c3:0a:14:
24:68:bb:da:fa:c5:98:7e:0f:27:b6:b1:8f:85:ba:
c3:be:1f:be:60:f4:1d:5c:31:e0:a8:46:cc:36:9d:
25:ef:19:9e:a4:bc:97:5c:66:82:99:aa:d9:5d:0a:
d3:58:7e:63:3e:77:cd:48:98:c6:84:7f:11:a5:05:
f0:38:79:d2:d9:8e:e2:f7:49:10:ce:bb:b2:a0:18:
a2:b7:f5:0d:7a:6f:49:7d:9d:ae:0f:80:81:f1:c0:
46:96:c0:62:cc:e4:e8:15:14:a5:5b:da:2c:49:58:
fe:24:ac:f9:4e:05:89:48:12:52:2f:2f:d4:6a:6d:
3e:0a:13:fe:39:53:77:c0:0a:1d:d9:60:4f:94:6b:
22:c3:2c:79:b6:b4:d2:18:41:2d:70:91:d9:c2:e2:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:90:6C:9B:FC:31:2D:6D:EF:C8:E6:04:F3:3B:D6:4D:C8:6C:DA
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7f:80:e3:43:65:80:ce:6d:e7:4e:37:9b:2a:8f:8e:cd:ee:
9a:f0:8f:6f:2e:b7:5c:6f:bd:e9:6a:b1:3d:e0:49:e9:09:df:
70:e4:94:23:d8:2d:c0:f3:a0:97:69:39:d2:a9:83:9b:e7:20:
98:9c:b2:64:b3:19:44:47:88:71:d7:bb:cb:a8:f8:2b:15:aa:
b5:28:cf:c4:61:60:ef:76:8c:7a:21:54:a7:1c:62:1f:6c:d9:
35:64:62:15:1e:07:35:fb:47:8a:77:32:6b:ae:5d:99:e8:f3:
5b:eb:46:f6:fe:09:97:12:98:a4:f6:2c:f7:bd:e6:8f:7f:43:
ab:c2:58:5b:c7:7f:30:0c:30:86:52:33:ce:78:0f:7b:38:b1:
ca:4b:0a:b8:90:a0:39:7d:7b:cd:62:e4:3f:bf:ce:60:48:25:
d7:ac:9e:69:01:81:ea:b7:4e:21:c9:54:ff:79:f0:38:c9:c5:
2b:d4:c8:9b:9f:29:c6:85:0a:d7:52:74:7c:1b:17:74:1d:12:
b9:8d:c4:be:5f:c8:a2:b1:e1:49:32:bf:58:27:4d:6f:83:32:
92:b2:10:0b:1f:01:8b:f4:5f:98:70:09:63:b1:ee:47:40:58:
65:44:7b:8d:95:42:ac:d1:f7:6d:47:0c:19:ec:31:80:27:08:
49:85:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:50 2025 by rpki-client