Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: FegZHIMA5ykzKUevXENIRg2GdUFKGKnOIwR2Z1UWuSQ=
Subject key identifier: 0F:AB:67:97:AB:52:B7:02:5F:00:83:1C:32:16:79:29:D5:A8:80:B2
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019A4D7423D78B1B5D0FADFF869E9B94C5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 06:00:48 +0000
Manifest this update: Tue 04 Nov 2025 06:00:48 +0000
Manifest next update: Wed 05 Nov 2025 06:00:48 +0000
Files and hashes: 1: BbPU1Bnn4njLoJyEV_1fon0xq_M.roa (hash: hSofywL/61c+ycaV0QrJyYDUafrPsowFjsTpxS/wPU8=)
2: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: ot9ehjRmQpDz2q9DEfE7/lr1fYcdL0rYgfwD7667D0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:23:d7:8b:1b:5d:0f:ad:ff:86:9e:9b:94:c5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Nov 4 06:00:48 2025 GMT
Not After : Nov 5 06:00:48 2025 GMT
Subject: CN=0fab6797ab52b7025f00831c32167929d5a880b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7b:23:12:b0:1a:1d:64:87:f1:46:2f:ff:31:
01:25:a7:80:e4:35:11:88:09:c6:0d:7b:a2:c6:53:
92:2e:bf:26:9d:5f:ae:8c:80:ec:9e:ab:15:f9:4f:
19:2b:29:99:de:41:58:c0:a7:2a:0c:c4:84:93:dd:
ab:bc:4d:31:22:3e:a9:50:1f:bc:fa:4c:39:c7:20:
a7:ff:68:3f:81:ce:d9:f6:ab:f0:36:e0:fd:77:15:
ab:fd:8c:9f:77:74:6a:4c:0c:ab:cf:3f:45:e7:74:
d5:5d:04:c1:74:e8:ae:d2:d2:eb:85:28:21:1d:43:
31:db:7a:27:0a:4f:fe:f2:56:91:f3:a2:33:91:6c:
46:40:a1:b4:d4:a8:e0:e6:ef:fa:ec:d4:3c:35:dd:
80:65:f4:f1:d8:1f:96:2d:89:a1:78:9b:e7:54:70:
be:69:f8:f6:13:de:39:8c:d8:f9:5a:0e:fc:ad:f2:
5a:34:1b:cf:26:3c:51:80:8c:63:d8:a8:3e:c6:9c:
a9:0b:e4:52:02:1c:47:dc:fe:fb:d9:c6:6a:9f:a7:
eb:5d:7e:d5:eb:38:4b:ff:80:7b:8b:5d:9c:6c:e2:
90:2b:88:f9:d2:7b:88:d1:8d:bc:07:78:e5:d2:2b:
27:69:ba:10:ed:39:d3:64:bc:ab:a4:78:17:ce:1a:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:67:97:AB:52:B7:02:5F:00:83:1C:32:16:79:29:D5:A8:80:B2
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3d:71:aa:2d:b5:c0:95:25:61:8b:53:8c:d4:7b:14:66:22:
4d:b5:d1:3b:ab:81:80:41:ad:c6:1b:42:cd:ce:03:9d:ab:7e:
22:bc:94:d2:70:d2:1f:14:71:4f:86:1b:38:f1:e2:b3:80:9b:
57:79:bb:5e:e2:f5:a0:c6:cb:3c:6e:7a:bd:ee:77:ed:e5:e3:
e4:6a:93:bf:56:c7:80:77:22:61:09:ae:44:84:ee:47:e8:37:
23:bf:52:b3:40:59:bf:73:bf:e0:18:5f:63:09:79:c6:6d:e0:
f5:1e:6d:61:fb:bd:de:88:2b:54:72:b9:9a:39:35:f2:3f:35:
0f:29:8f:eb:2d:cd:3f:3d:7d:37:9c:c5:fb:27:d8:63:51:74:
58:f6:f5:b1:d3:6b:89:c4:fa:6f:2a:7c:b2:c1:e8:31:56:9e:
cb:bf:14:41:08:68:77:44:cf:7f:83:f2:0a:0f:fe:5b:16:81:
cf:02:a6:67:c3:a4:ec:06:69:b3:1e:b9:f1:c6:8e:2d:c1:d9:
ff:48:3d:1d:f4:02:1a:a7:e9:d4:7d:71:f8:43:77:10:be:e4:
3d:e7:0f:b3:a4:d2:50:e9:16:90:83:3c:6c:e3:63:c8:af:69:
2a:32:dd:97:89:cd:84:4c:e0:7d:c2:2e:94:bd:6d:a5:6d:68:
89:63:97:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:09 2025 by rpki-client