Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: 69mHLJr6GCFe1YvgivBD3fvGMFfOCBm30POffbr2r+M=
Subject key identifier: D8:3E:38:BF:E5:F8:ED:E4:F1:AB:0F:97:73:DA:94:71:B2:1C:98:08
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 019A54C10BA4CE7C26A3BEF5E4702E712E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 16:02:08 +0000
Manifest this update: Wed 05 Nov 2025 16:02:08 +0000
Manifest next update: Thu 06 Nov 2025 16:02:08 +0000
Files and hashes: 1: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (hash: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=)
2: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: G431VUNzK2okbUjARFRXzYe2JyjRH0Yvjh8ftGeUVaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c1:0b:a4:ce:7c:26:a3:be:f5:e4:70:2e:71:2e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Nov 5 16:02:08 2025 GMT
Not After : Nov 6 16:02:08 2025 GMT
Subject: CN=d83e38bfe5f8ede4f1ab0f9773da9471b21c9808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:72:91:fc:9c:25:58:1d:48:1f:dc:f6:59:
93:a3:79:81:1f:a0:a2:31:90:e1:bc:70:a8:d9:92:
80:28:ee:68:b8:ef:ea:aa:75:ca:58:ca:9e:dc:fd:
9c:6d:94:90:a8:8c:4b:e8:73:24:49:57:54:da:89:
fc:57:9d:d2:66:0a:dd:29:83:37:61:25:4d:71:31:
77:a3:3a:77:b5:fd:3a:e1:0d:9a:3e:99:3e:2f:84:
c8:e4:e4:60:25:c6:53:5c:c4:64:b1:69:20:5c:0a:
b3:35:be:36:b6:ec:ae:6d:c1:ed:c9:c1:0a:39:72:
1b:3b:bc:f4:77:f8:de:ba:90:2e:4f:af:77:55:7c:
45:58:0a:96:db:42:97:bc:f3:d0:a9:0e:18:0b:78:
ed:de:49:68:6c:c3:27:7a:49:1f:e7:2f:f0:81:a2:
52:9f:47:9c:15:1a:06:8f:c1:fb:98:5d:d3:ab:7b:
a5:9b:d1:81:fa:60:fe:75:d3:2d:88:d8:a6:68:1a:
06:c0:e9:12:e6:a1:ab:a1:4b:86:d0:da:89:67:b5:
f4:b1:b9:e4:21:f4:d7:c5:1b:53:64:8d:2c:66:09:
b0:25:46:d7:f9:ff:40:61:cc:fe:6a:00:f0:e0:ae:
8d:f0:fd:c9:14:f6:f2:53:f8:dd:77:33:e9:c7:9e:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:38:BF:E5:F8:ED:E4:F1:AB:0F:97:73:DA:94:71:B2:1C:98:08
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:87:a6:8f:55:79:0d:91:cc:52:8b:1f:62:e2:13:0c:c1:d6:
9f:a3:fd:5f:b2:46:d1:76:75:c5:45:26:a6:69:fb:f6:90:8b:
fb:85:8e:1a:56:d9:90:05:09:51:3a:1d:ce:61:2f:f2:51:9e:
97:1f:3d:aa:a7:6e:44:38:bf:78:e6:a5:54:1e:32:16:18:6a:
9c:9d:29:cb:17:3c:ca:a3:c1:40:34:52:65:63:32:3e:71:77:
48:48:89:86:ab:83:20:69:a6:e5:f9:35:30:7e:df:bf:88:f2:
bd:18:d9:e0:42:75:23:90:4b:aa:62:b2:e4:2e:6e:f9:8b:0b:
e7:24:c5:f0:e1:6c:e7:c1:90:69:a6:71:de:a0:c6:54:0a:f3:
96:cb:27:fc:32:30:c0:50:65:82:d0:c5:7b:0d:96:18:ef:99:
6f:16:2d:b7:35:e4:31:22:4e:c4:4e:c2:70:ca:ab:f3:f7:23:
33:96:9f:28:cc:b8:df:72:2f:92:5b:b2:bf:30:5d:26:07:83:
5f:86:ed:3c:0a:cc:04:64:39:c9:50:6d:75:ee:6c:10:1e:55:
33:3f:cc:27:ec:c1:08:f4:da:9f:21:6c:a8:4b:c1:02:91:4f:
57:45:46:4f:ea:a0:eb:98:ff:fd:a6:e1:f9:f4:ac:c9:3c:c2:
c4:ff:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:08:57 2025 by rpki-client