Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: 80F/PJnOd0m3WvwTDs8d/vHztnS0jg2KzEN1ta02NIc=
Subject key identifier: FA:BF:E0:79:F8:A5:2B:BD:6B:48:0E:F8:D0:6B:80:78:8C:B3:A5:B1
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019A515062DE7D81011F2BCD103E568A6AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:00:13 +0000
Manifest this update: Wed 05 Nov 2025 00:00:13 +0000
Manifest next update: Thu 06 Nov 2025 00:00:13 +0000
Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: xnIYvpRLuIr/JI5ie6DCMZSjBomYno6qQt6GjO2I9lk=)
2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:62:de:7d:81:01:1f:2b:cd:10:3e:56:8a:6a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Nov 5 00:00:13 2025 GMT
Not After : Nov 6 00:00:13 2025 GMT
Subject: CN=fabfe079f8a52bbd6b480ef8d06b80788cb3a5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:18:d3:01:b9:ad:e1:dc:5e:a8:97:99:3b:
2b:8e:fc:3e:97:36:bc:af:1f:dd:18:4a:c4:01:31:
41:c2:7c:99:76:5d:e5:e1:c9:a0:99:27:ec:55:19:
c8:5a:04:34:e1:ca:e3:d4:b4:a3:a0:33:60:ee:28:
c4:2e:60:91:16:ed:c4:71:64:1e:40:81:84:7b:a1:
4c:8b:c5:b4:c1:52:95:35:47:59:82:69:46:7b:b7:
e5:98:0d:65:45:96:c6:16:46:bf:e1:a5:bc:40:b7:
84:ca:7f:ca:1d:fe:86:87:d5:72:11:cc:3a:39:fe:
f8:b5:9d:0d:d5:14:1e:81:3b:12:f0:bb:02:5c:b2:
d8:b8:3e:52:f5:e4:9b:12:53:63:7f:11:37:21:50:
c8:70:ae:ec:c6:91:8b:a8:aa:e7:99:32:68:80:ad:
0e:b1:83:dc:80:d2:7d:64:9a:87:f1:f8:89:69:5b:
d8:4b:e1:75:5c:66:ac:ef:e1:5f:dc:7e:22:e3:55:
82:3b:8a:03:0b:df:62:bd:67:a9:d4:f5:52:bc:75:
04:d9:42:9e:2b:9c:e0:d7:a6:ee:df:df:ad:4b:d4:
f9:ba:e1:d2:40:b3:3f:82:28:d2:41:cf:40:a0:0f:
46:29:f1:c2:02:b2:9a:d1:0e:e9:ec:d2:45:b9:33:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BF:E0:79:F8:A5:2B:BD:6B:48:0E:F8:D0:6B:80:78:8C:B3:A5:B1
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:28:35:8c:cd:3e:eb:35:47:c2:a2:2c:d2:24:11:a6:da:e0:
0e:3d:e7:49:c5:36:6a:f4:32:78:95:e9:2c:f5:ae:86:93:49:
e7:c3:0f:94:12:8e:f9:a1:ad:6f:60:d9:8a:65:56:04:45:94:
5a:94:66:7c:5d:45:4a:0f:cd:59:7d:40:d1:50:b8:32:66:f9:
de:52:5e:96:23:b8:4b:e9:83:3a:4e:a2:02:5b:7b:9a:e4:af:
40:e8:2f:d6:27:74:86:90:b7:38:f3:83:9e:a6:0d:6b:dd:61:
d0:52:eb:0d:7d:fb:b2:0f:a9:96:18:7c:7e:a3:d5:34:dc:ca:
2b:0b:8e:3f:e7:76:96:81:b5:ac:35:88:9a:84:d3:3f:98:f9:
92:fe:74:97:fa:57:43:8f:10:3a:83:86:28:7c:d2:0b:14:9e:
23:0d:43:66:63:f3:e8:1e:3c:ae:cd:48:b5:3c:e1:71:03:42:
00:13:3b:14:da:51:f5:71:cf:4c:c4:85:b2:1b:62:14:af:6b:
a0:42:6e:97:50:68:7b:08:cc:98:a4:6c:f3:ce:a3:ce:79:1c:
bb:a5:a5:99:32:3f:b7:bb:66:a5:24:4c:c1:04:24:81:a5:28:
dd:49:bb:ec:97:b9:ed:e2:f8:61:fb:8e:9b:77:64:d8:81:15:
79:b6:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:46 2025 by rpki-client