Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: JmitqlzYbxZe48YRemO0aEc9F3W0Ozii4OA1SQ2oRiw=
Subject key identifier: 76:5E:71:FC:E9:D8:E3:51:D3:C0:95:B1:B6:B8:11:81:13:B2:1A:95
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019A4E18F6B6290EC48295988B23C1A57F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0B5E
Signing time: Tue 04 Nov 2025 09:00:50 +0000
Manifest this update: Tue 04 Nov 2025 09:00:50 +0000
Manifest next update: Wed 05 Nov 2025 09:00:50 +0000
Files and hashes: 1: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (hash: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: 86twSKO0fYimG1SK9H502dHmrP+6olhkFIvejuzbhUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f6:b6:29:0e:c4:82:95:98:8b:23:c1:a5:7f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Nov 4 09:00:50 2025 GMT
Not After : Nov 5 09:00:50 2025 GMT
Subject: CN=765e71fce9d8e351d3c095b1b6b8118113b21a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:cc:0f:71:ea:50:84:24:b7:46:cb:07:43:
56:32:af:d7:0b:68:5a:fc:e3:46:af:6f:23:c3:12:
7f:73:ed:ab:83:27:a8:d2:56:50:8b:59:b8:bb:a4:
09:34:1f:4d:00:5a:6e:51:1f:fb:c8:33:5b:c6:f6:
21:f7:6c:bb:1d:25:22:85:5d:ef:98:ec:02:1e:2a:
25:23:8d:3e:e9:2a:1e:c8:7f:65:fc:92:65:6f:91:
62:dc:40:d1:db:6c:fd:6e:56:5b:37:22:c8:aa:b8:
c9:f8:2d:fe:b8:82:89:91:e4:60:7a:ba:d6:70:02:
19:a3:5d:f7:e0:99:a7:b1:82:43:ff:8a:bb:89:a0:
6b:5c:c0:81:cb:4d:70:6e:c8:fb:f6:b1:a4:3f:f2:
67:4d:0e:67:bd:5f:94:51:2d:39:2a:fe:cd:0b:27:
eb:93:5e:8a:8f:49:fd:41:60:fc:5a:0d:93:7f:1a:
4c:0e:39:d8:f4:9c:45:ce:69:ed:5d:e3:fb:0f:7c:
25:40:38:3b:00:4b:26:e5:14:8c:eb:b2:7c:1d:de:
db:65:1e:d6:da:ca:d8:41:29:08:be:1f:ab:35:b7:
a5:e4:42:55:73:33:f6:c0:3f:f0:db:ca:53:d8:9f:
20:4a:6a:9e:64:2b:7b:ac:a5:4d:e0:21:ac:df:b2:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:71:FC:E9:D8:E3:51:D3:C0:95:B1:B6:B8:11:81:13:B2:1A:95
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:ad:fd:98:b3:21:34:ce:56:28:f6:f8:76:f3:ab:f7:29:
25:f4:88:94:e7:79:de:28:50:d8:77:6c:d0:99:6e:bc:40:a2:
1d:7d:98:ef:94:92:94:20:ce:52:36:21:b3:33:78:fb:6b:a8:
02:15:92:00:5d:42:9d:af:10:51:1f:c5:a8:82:f9:f5:f2:45:
84:69:28:41:a6:e7:7d:74:1b:df:53:33:79:87:50:38:7c:51:
ff:9a:bb:0e:00:71:7f:62:e5:ae:3a:63:34:dc:4e:fa:58:0d:
e6:11:81:5f:30:a0:38:1d:23:95:4b:f0:cd:cb:f5:a4:2f:86:
b6:31:46:e6:88:5b:f8:f0:72:3e:25:39:e3:d4:be:0b:a8:c5:
c7:33:dd:74:44:46:6f:a5:76:ff:8c:bb:65:90:b7:0f:b6:12:
22:96:b5:93:29:32:61:f4:33:5e:a6:f2:fb:af:aa:e3:73:65:
83:07:28:d2:bf:0c:01:6a:0a:a1:d4:f2:89:69:73:84:e6:07:
b3:74:bd:87:65:d4:4a:31:51:5d:5a:e7:9d:10:30:0e:c1:ec:
36:d8:71:f7:fe:ae:20:ca:e5:74:5e:83:44:3c:4b:12:58:33:
34:d3:bd:83:6f:46:63:14:20:c8:10:89:05:3a:c5:65:7a:68:
c7:1a:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:59 2025 by rpki-client