Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json)
Hash identifier: AvBFMlckART7JbGslu2iPpCsHr2VUIIQfg+XuBa+2QY=
Subject key identifier: 46:72:C3:0B:B1:CC:84:4D:21:75:DC:9A:61:30:A8:3C:A7:5D:1F:C5
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 019A4E18D82D71378D8B052E89416DF96896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
Manifest number: 0FA8
Signing time: Tue 04 Nov 2025 09:00:42 +0000
Manifest this update: Tue 04 Nov 2025 09:00:42 +0000
Manifest next update: Wed 05 Nov 2025 09:00:42 +0000
Files and hashes: 1: 3nKPvfyefhBBthk-LrRdD-jfvW0.roa (hash: 1vR7bznA03xVBTq7D8itXQ6xNZUvjtjklTS5nPcHTr0=)
2: 8JVtNiH742v8cd9f6HB8HsLnHqc.roa (hash: en+F0ICvUKwr0qrq9ILAxUcATJZUAoxaoEpiR8+7A9M=)
3: GzE_PF4lRurN113fXZhaZRzDRYM.roa (hash: b8RRWDnlm3gv9H+fLurnrwDRk5Rn7Ig722jB2SuqPOg=)
4: O1rsJf608w55c6uzax6qELf-V10.roa (hash: eTLBCFWFUORcPgLfQZK3GxMskhs+vxERoSr/SRYqzwQ=)
5: W0ytEpzp3PGLQgQDEe1kmGvhrx8.roa (hash: Rx2fPbh4hFdhpWyNIm7FiwaS49uoStv5r5BjlCfRWrA=)
6: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: 0iPi0gm4QCxVwvVe5a2Q08iYmfmxRu+5GX0nyVgCON4=)
7: gnZzs6ma6bupZv_QFfeHC2w5vfs.roa (hash: tmmh6VOJ4XQ6zqxdY06hmFVr0WRGDB+DoX6nJefrwl4=)
8: qfLtpL022R2vNSfmfA6qR_jq_6k.roa (hash: 99hvsDHWBX451/OxAu/FvLR5vG5KLyjpmEGTCKGnQ6c=)
9: s5XW1sPa3LVHkVbaHF8KM4lyi3k.roa (hash: kYlioc7r4tkKKuXQwZeSGnhgTGO7wN8mLbsZJSv0XnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d8:2d:71:37:8d:8b:05:2e:89:41:6d:f9:68:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Nov 4 09:00:42 2025 GMT
Not After : Nov 5 09:00:42 2025 GMT
Subject: CN=4672c30bb1cc844d2175dc9a6130a83ca75d1fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:19:fc:18:47:a2:6a:70:69:df:f4:85:e2:
c0:4f:cf:a7:05:f8:2b:94:ea:1e:c9:45:f4:6a:74:
f0:e0:fd:7f:8b:5c:e7:a3:e4:56:7d:84:c9:a2:c7:
28:5e:40:5b:bc:5e:c7:d9:04:3f:56:60:5c:9a:4c:
de:00:1f:2f:c8:16:b2:93:1d:9b:3f:c2:44:4a:5b:
95:9e:3d:8a:d8:63:64:04:a3:e9:0e:ce:c5:71:12:
2d:12:a8:1a:01:7c:61:94:90:68:2c:db:67:84:a7:
cf:98:62:fd:55:cc:08:3d:d9:19:88:8b:d9:82:61:
aa:78:72:50:da:bb:8b:0f:c7:77:7e:1b:0d:a7:ce:
f5:3c:a7:57:77:74:af:d9:c6:01:3c:2b:e8:fd:e0:
0a:1e:ed:94:ab:20:cf:96:03:14:be:d1:90:58:23:
bc:f2:87:d8:55:7f:e8:9f:a8:70:b9:ac:6d:4e:b0:
66:41:97:7a:4e:4b:ae:5a:1b:54:7f:3c:46:fb:c9:
49:8c:49:bf:aa:cc:ca:a2:29:ca:98:58:06:ac:8c:
5a:0c:dd:fc:7a:9a:b9:f4:39:77:59:a7:97:0d:49:
9b:1a:c8:4b:b2:bd:fd:73:18:ba:6d:73:59:48:57:
f3:b1:e2:72:1d:20:13:65:1c:73:0a:15:a0:5f:af:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:C3:0B:B1:CC:84:4D:21:75:DC:9A:61:30:A8:3C:A7:5D:1F:C5
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:48:5a:9a:21:79:1f:92:07:f5:8f:96:d5:8e:14:db:32:a5:
54:3b:37:cc:2b:58:6d:01:5a:20:8c:a6:30:3f:76:04:97:5d:
e5:5e:fe:9d:73:8f:8c:df:84:58:51:3a:7b:a3:4f:22:b0:bc:
de:69:1a:36:c9:7f:84:15:35:18:f9:08:02:1f:e1:b4:0c:8d:
b2:54:aa:8b:30:2c:5f:c1:d0:0e:30:8a:67:86:7e:62:a6:78:
14:03:c5:54:e2:4c:78:45:22:06:62:ae:b9:3f:20:92:d7:af:
7e:d4:db:4c:1f:76:ea:de:de:c7:8e:0c:36:86:1b:a9:3f:4d:
a7:cb:a4:1e:55:6c:d2:d3:d0:44:c6:88:37:41:20:4f:ac:64:
ee:71:98:7a:70:30:ee:a0:1e:1e:28:0d:e0:88:e8:8b:b2:f7:
63:00:54:46:98:de:4a:1a:c4:60:b9:8b:60:13:4d:c6:c9:3e:
32:83:3c:70:37:c3:ae:97:2e:51:df:a4:10:c0:b2:55:b5:29:
93:0f:0a:18:00:90:9f:ef:f1:8f:1d:8d:ec:c7:eb:dc:a7:2e:
0a:3c:5b:c3:75:ac:d7:fe:40:6d:8d:94:ff:e5:b1:00:e0:66:
e6:41:bc:2e:70:bd:18:97:f6:b2:9e:d4:00:39:11:3f:ea:83:
7a:f2:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:26 2025 by rpki-client