Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier: cxHwmW7Ax0DlsfbJMhaVU5ICr51BYKS4J/v7q4S2Miw=
Subject key identifier: C1:0F:E6:6A:0A:97:83:7F:F9:F9:AF:8D:B2:C4:5A:9E:73:39:5A:5D
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial: 019A4EF504156978C442AE06B710591A3F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number: 13A0
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=)
2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: RbyjerXh7flfcjdk1sJ2A6NHUV10/EUAff1GMi8RjlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:04:15:69:78:c4:42:ae:06:b7:10:59:1a:3f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=c10fe66a0a97837ff9f9af8db2c45a9e73395a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:bf:85:4b:8d:bb:94:37:4d:ca:d8:12:76:aa:
4a:ce:af:fa:1b:f8:95:ea:ee:52:af:c2:1d:85:44:
0c:24:fa:4b:76:98:67:99:ce:30:27:62:be:05:fa:
f5:64:e6:75:0c:25:51:7c:71:c2:d0:6d:8e:1b:77:
09:8b:3c:32:6f:2a:d1:65:af:b1:3c:55:21:ed:50:
eb:50:7c:9b:8f:73:bc:59:d9:29:41:13:e5:62:dd:
5b:ea:aa:76:6a:35:5f:f6:e0:bd:7d:38:8a:c6:ff:
d4:0e:27:af:c9:b5:99:ca:85:a5:e7:09:90:92:9e:
89:27:3d:d7:00:90:f1:bf:51:c1:69:39:a3:c6:86:
1f:c9:3d:2c:b6:23:1f:ee:2f:bc:a3:b2:f8:8b:78:
ea:3e:ec:f1:92:48:22:57:82:3d:d1:93:72:25:cc:
45:e6:ca:96:22:cd:88:89:f6:cc:3e:8b:46:0b:71:
50:42:51:cc:fe:69:48:df:89:61:04:3c:43:f9:0d:
c8:19:a9:f2:aa:8f:c0:21:be:87:07:f5:e7:be:ba:
c4:8b:07:af:ed:56:9a:17:e5:23:a2:0e:b5:8b:96:
59:68:78:81:bc:99:a1:2d:2b:68:27:6e:53:39:ef:
f9:e8:cf:86:7d:81:f3:4e:59:d7:55:13:9f:3b:db:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0F:E6:6A:0A:97:83:7F:F9:F9:AF:8D:B2:C4:5A:9E:73:39:5A:5D
X509v3 Authority Key Identifier:
keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0e:50:af:c1:f5:54:f4:0a:bc:e4:65:d4:2e:03:4b:73:e1:
e4:d1:ae:7e:32:eb:7a:d0:6b:85:ea:0a:02:0c:e5:6d:be:27:
87:6c:e8:77:7a:21:d7:ce:e1:1b:55:af:6b:64:f9:f2:08:93:
ae:d3:bc:72:9c:2d:62:0f:eb:03:a9:ca:3a:1a:df:bb:92:a1:
ea:6e:04:04:68:56:a8:c9:b6:a4:5c:70:1e:0d:e3:bf:63:fa:
5a:d4:f7:5a:d0:63:2c:22:dc:54:1f:ed:a6:0d:f2:63:76:0b:
be:0e:fe:e5:02:e3:4f:00:e5:cb:a6:41:5a:b8:4a:1c:2c:95:
42:9a:40:85:b8:a6:44:29:e8:6b:a6:12:2f:b4:2b:ce:6e:00:
38:16:b0:c1:6d:1b:4d:70:5a:ad:5d:fa:7d:6b:3c:97:f6:8d:
9e:50:83:03:18:13:33:e4:f2:61:8c:99:a1:77:5b:89:83:75:
16:75:91:6b:f1:74:24:32:73:ae:6a:99:b9:14:ad:a4:81:a5:
75:92:e2:69:5e:56:31:a3:76:2e:8d:f9:1a:b7:c1:4c:d1:1c:
1d:ad:70:45:46:04:65:a3:8b:36:53:a7:19:a4:84:61:3f:75:
96:e0:27:0b:b0:a7:49:fd:0d:b1:6a:5e:1d:42:a1:db:3a:7f:
96:e0:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:28 2025 by rpki-client