Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: xDyAv2jQaGfV1ng8/Sd8AcZoOW41S1y47gKfTb9fR+I=
Subject key identifier: 6E:45:0F:63:F6:7B:F4:AA:F3:D1:5B:AC:5A:B8:0F:5F:0B:E5:A0:FB
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 019A22F7742282833D2B07EB64ED14D56C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 168A
Signing time: Mon 27 Oct 2025 00:00:33 +0000
Manifest this update: Mon 27 Oct 2025 00:00:33 +0000
Manifest next update: Tue 28 Oct 2025 00:00:33 +0000
Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: zxceWTHZd5GbhmAJKQquuZnM5zKCVxFTunDwrKW7ij0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:74:22:82:83:3d:2b:07:eb:64:ed:14:d5:6c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Oct 27 00:00:33 2025 GMT
Not After : Oct 28 00:00:33 2025 GMT
Subject: CN=6e450f63f67bf4aaf3d15bac5ab80f5f0be5a0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:37:16:91:ed:72:a7:24:04:8d:76:4a:c1:90:
44:4e:6e:6e:60:eb:2d:9c:ab:89:cd:15:b2:34:94:
68:b8:f0:9e:20:a6:91:b2:0c:6a:37:1d:79:21:77:
5e:f0:ae:b4:48:d0:20:43:fe:fd:00:0e:9d:6b:65:
7d:9f:84:4b:b3:00:d9:42:29:f9:40:20:86:a3:e4:
8f:c8:1c:06:7d:df:ce:fd:d5:f3:f6:b1:50:4e:76:
87:70:f8:b2:1c:b9:82:bf:3c:5c:ed:23:e3:d5:24:
e8:9a:1c:8a:50:b5:48:47:2a:f7:02:36:1b:0e:ed:
ef:c2:7d:3b:59:18:be:b8:ee:a9:5a:f3:45:17:b0:
b3:9e:28:18:ae:17:b3:2e:23:59:7a:4b:52:68:80:
df:4d:b6:d3:39:ff:ad:c9:bf:db:e5:4f:fb:77:a3:
8a:7e:27:94:6a:10:08:ac:bf:94:45:8b:36:e6:98:
50:c6:fc:1e:b3:05:bb:1e:b3:cc:24:9b:81:a7:69:
7e:e0:61:da:f7:ef:65:e6:f4:18:48:fa:3d:f5:43:
9a:47:6e:d3:44:ea:0b:84:5e:7b:d0:4d:7e:85:35:
27:55:10:17:c7:70:42:1d:b7:df:b4:fb:6a:fc:99:
30:6c:66:90:13:5e:0d:f5:25:61:a0:32:93:ce:d1:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:45:0F:63:F6:7B:F4:AA:F3:D1:5B:AC:5A:B8:0F:5F:0B:E5:A0:FB
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d6:26:40:77:6c:6e:be:13:51:6c:22:85:f3:87:08:2d:fe:
22:a4:ef:69:5b:2f:59:70:0a:b9:cf:dc:b0:ec:57:e6:a0:0e:
94:fa:37:c6:de:8d:09:d4:69:95:7b:2e:0a:3a:1e:d1:f1:4d:
68:a5:ee:ef:a3:40:f9:fa:a2:b0:ac:56:f5:59:5c:de:1b:81:
45:f5:9c:e5:53:bd:5d:46:1a:2f:a4:4a:56:1e:0f:9e:f3:0a:
49:57:a4:b4:a2:c7:9b:82:67:b5:d2:64:7b:20:df:5d:ed:9b:
d2:ed:df:9f:e7:41:71:11:c4:5b:96:8d:c7:bc:71:45:93:7e:
f3:56:d3:98:63:99:5f:1e:8b:77:04:69:2b:c3:38:ef:35:a6:
a1:7e:eb:3c:a5:f6:6a:83:42:fc:5f:43:ef:9a:3e:30:d5:c3:
a2:fd:54:f0:42:8c:34:5f:6f:f0:d2:1c:b5:31:24:78:00:66:
31:43:79:b9:74:8b:a4:40:49:20:c7:7f:36:17:c6:ad:58:73:
37:f0:80:c8:56:3c:98:a4:14:02:e1:ce:9e:44:61:72:db:78:
ee:f6:de:d1:98:70:87:4a:f4:fd:c7:75:34:52:3f:8a:6c:b8:
aa:98:f6:4b:8c:ae:a1:05:f4:38:9e:81:2a:d3:3c:60:19:40:
59:9a:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:23:41 2025 by rpki-client