Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: q7X2k69Y9DfCE7FxADgJkXKv3qSsEl9cXpz7mPZ3YjM=
Subject key identifier: F3:14:28:24:65:EE:46:E7:ED:19:B6:67:F2:EC:EF:30:61:95:AB:F1
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 019A0B5E26715247CCE96B713EB402A068B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 16EA
Signing time: Wed 22 Oct 2025 10:01:50 +0000
Manifest this update: Wed 22 Oct 2025 10:01:50 +0000
Manifest next update: Thu 23 Oct 2025 10:01:50 +0000
Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=)
2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: icgxYo5Oo/X0oPpQYwdNk8wl75qwJIZPZDSre3H3YG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5e:26:71:52:47:cc:e9:6b:71:3e:b4:02:a0:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Oct 22 10:01:50 2025 GMT
Not After : Oct 23 10:01:50 2025 GMT
Subject: CN=f314282465ee46e7ed19b667f2ecef306195abf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:39:65:a4:7e:b3:89:f7:29:1f:45:06:b4:
88:65:76:9c:3c:5c:8b:6d:15:3e:66:96:7e:9c:5a:
33:a6:1d:21:05:e5:5c:f2:42:5d:c1:f9:f7:2e:f5:
57:5b:39:21:6c:69:13:c3:a6:82:04:4d:14:fc:74:
39:5a:ba:de:93:7c:59:dc:13:1a:bb:21:67:cc:2d:
72:bd:e2:5f:23:42:78:49:fe:74:5f:ce:92:71:e2:
34:1c:41:07:ec:4e:bc:ad:75:43:ca:68:bb:7d:2f:
e4:b5:b7:33:3f:c3:14:92:74:4b:29:53:87:75:a6:
50:9a:94:03:e0:10:22:10:46:bd:ee:f0:3c:f6:a6:
f6:30:43:4b:7a:95:7b:97:3e:ec:b1:84:34:1a:80:
08:2f:5a:f9:c9:5e:04:e1:6e:5c:35:42:05:53:34:
68:f4:24:fa:9d:4a:2c:72:93:9e:16:fc:40:41:63:
85:36:07:70:d1:55:cb:9f:55:7d:2b:8b:f9:d1:32:
f6:66:48:e7:f2:aa:75:fc:a6:c4:da:0c:6f:41:a5:
65:ed:bd:0b:83:7d:fd:19:50:40:e2:f6:88:a9:40:
37:3b:2a:10:41:25:7d:ab:5d:46:a3:57:89:6b:61:
13:10:4c:0d:a7:e4:ac:cd:a4:67:91:ad:63:6f:1b:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:14:28:24:65:EE:46:E7:ED:19:B6:67:F2:EC:EF:30:61:95:AB:F1
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:70:d5:9e:0e:52:86:a5:36:27:7c:34:8d:43:b7:20:2e:
5f:4f:37:59:25:69:b7:a3:e2:e8:ea:d8:8f:af:ee:eb:ff:1a:
3b:9b:17:fd:fd:ee:c6:46:14:ff:b4:bf:0c:02:3b:b4:99:05:
fc:17:8f:a9:4c:00:cd:11:bb:d7:c4:e0:29:cb:5b:e1:8d:78:
27:86:bf:9c:75:57:82:c1:26:13:88:9f:ee:70:ba:2b:37:48:
42:ee:0a:bb:83:17:b9:13:a7:ab:50:ce:17:ba:93:20:72:e8:
cd:ee:e2:96:ff:19:80:ee:39:47:08:39:bf:4f:23:18:9b:56:
b0:13:67:45:53:e3:bb:48:92:c1:cc:a5:ea:f6:69:58:a3:5e:
05:fd:d0:c4:6d:02:6f:c2:24:15:02:5f:ed:14:7d:81:c8:8e:
e1:4a:91:5b:04:b1:4c:56:49:8c:d1:6a:60:d4:e5:71:03:63:
ec:2f:80:14:19:7c:b7:21:58:73:d6:ae:5a:04:22:8b:15:d7:
61:9f:59:68:bc:51:83:14:35:a2:74:92:ba:19:57:39:1a:59:
0b:9b:c1:57:4e:9c:1a:64:2e:d7:ab:7b:7c:ed:f7:2b:b4:85:
6a:db:b4:d7:d7:2f:cc:11:77:ad:12:39:b3:0f:3a:a4:c2:43:
c4:65:37:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:46:38 2025 by rpki-client