Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File: v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier: VK/Dk+tNf/qJbkj4e8ks20GhJvpYwfD4tn17g0v+XoM=
Subject key identifier: 2A:FB:4A:46:10:51:9F:41:39:15:4E:DF:4D:86:6A:10:20:38:59:67
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer: /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial: 019A503DD57CE4399696A0792FE5821E4117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number: 02F5
Signing time: Tue 04 Nov 2025 19:00:20 +0000
Manifest this update: Tue 04 Nov 2025 19:00:20 +0000
Manifest next update: Wed 05 Nov 2025 19:00:20 +0000
Files and hashes: 1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=)
2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: UTMkUGgMZBC6Y1/KV1t4IemnLJyfXtYgKonDtSeqw6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:d5:7c:e4:39:96:96:a0:79:2f:e5:82:1e:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
Validity
Not Before: Nov 4 19:00:20 2025 GMT
Not After : Nov 5 19:00:20 2025 GMT
Subject: CN=2afb4a4610519f4139154edf4d866a1020385967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:d4:e5:87:f2:d5:3c:3f:b8:29:7f:18:72:
c3:94:ae:54:34:4e:98:80:53:ff:df:6f:e5:e7:3a:
d3:1c:f2:1d:ea:9b:1b:71:3a:22:6d:17:05:12:37:
8b:02:d3:96:d3:b1:5c:b6:8c:5b:f3:54:0d:9c:90:
e3:75:ea:77:f2:a0:5a:dc:f9:30:c7:a9:81:b5:e9:
38:ba:28:59:5d:d7:6a:d0:58:17:9e:f3:9e:87:17:
8d:4d:34:c7:f7:1b:67:3d:91:e7:7f:48:74:45:c2:
b1:55:e6:84:4e:a6:70:1a:0d:0d:11:05:5c:6e:1c:
0c:6a:0b:d9:df:f2:b8:b6:cc:26:08:a7:39:0b:78:
fd:c8:de:9c:11:9a:1d:30:f3:ab:5f:9d:c8:80:bc:
f5:ee:d5:21:95:ad:7c:2e:ce:57:4d:2f:6b:84:dd:
3a:52:67:e8:31:da:f0:f7:ea:3b:f2:32:9b:b7:52:
01:25:be:28:a5:27:cc:50:44:70:27:4d:42:1b:fe:
78:43:c8:90:82:c9:8d:b9:ae:74:46:b5:e1:98:5b:
51:bb:fd:1a:77:f3:a6:d9:bd:09:d3:b7:b1:e0:58:
63:8b:c3:25:88:5d:2d:8f:e3:29:14:6e:46:2f:d7:
87:61:f5:7e:a7:37:90:b1:c1:28:25:99:a6:df:97:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:4A:46:10:51:9F:41:39:15:4E:DF:4D:86:6A:10:20:38:59:67
X509v3 Authority Key Identifier:
keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:78:87:e0:06:80:0e:85:c1:42:d0:f1:83:28:0d:02:29:d5:
f1:51:c9:51:a0:1e:0a:d0:30:cd:f5:43:72:bf:8b:59:2e:0d:
0b:aa:f4:8b:87:e4:2a:93:a3:84:00:9d:9c:87:bc:9b:e5:36:
b4:5e:94:5d:ec:89:c9:e5:25:49:77:fd:61:a0:de:9e:1b:12:
50:58:a7:d2:e3:f3:27:91:32:3b:01:86:5e:ef:d9:af:1c:8b:
e6:53:f0:dc:f0:89:9d:8c:0e:43:94:11:04:f5:a9:cb:08:e0:
f0:96:ca:23:c4:ca:a7:7c:f3:ce:f6:f5:0b:2d:a1:e7:56:65:
6c:cd:dd:57:eb:56:ff:48:15:fe:5b:28:3e:09:6d:76:21:b8:
b4:e1:83:f7:24:ff:3b:74:3d:65:7d:ff:17:7e:92:7b:f6:ef:
8c:00:ad:81:40:07:b6:e4:ac:c7:97:60:b0:f6:ed:37:ae:97:
f6:08:9f:b5:dd:40:39:39:63:41:90:1e:11:c4:c7:29:47:6c:
f8:07:8f:da:ca:f5:df:58:fd:db:60:db:69:34:2f:9f:8b:a0:
7a:83:33:92:63:ae:84:3f:2c:f1:af:d0:40:cf:27:b0:e0:97:
cd:42:97:13:24:35:a3:4c:07:a2:40:fa:46:3d:60:b1:ec:cf:
2b:d6:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:33 2025 by rpki-client