Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: Eo8FuWJVoaRUxK6rrpaw3b1Y/P3ybxo5wMzvPtSmjsI=
Subject key identifier: 43:97:4E:96:8A:FE:01:E2:15:40:82:97:7C:A7:6D:8E:0A:C3:EF:4A
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 0199FBEB6A4B1EBE39AE0B06FDF8416E8BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 0EE3
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=)
2: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=)
3: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=)
4: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: mnFv9KLXeP/dEWqQtAAhkvV+KgBSlcoUlr+6b2vmHlw=)
6: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=)
7: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6a:4b:1e:be:39:ae:0b:06:fd:f8:41:6e:8b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=43974e968afe01e2154082977ca76d8e0ac3ef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:63:47:e0:35:6e:7d:57:a2:a5:99:25:5f:
ae:b5:6a:40:48:02:45:8c:a1:a5:e4:9a:a2:9c:2e:
39:30:11:14:1c:d0:d1:7c:0e:4e:de:3a:06:a0:e0:
60:ae:b5:4e:5f:6c:8d:c4:9a:d7:ec:c7:72:de:58:
73:eb:99:1f:11:13:12:b1:d0:e5:d7:03:7a:b7:2b:
cd:68:56:ee:da:c9:fb:d6:b5:79:0f:95:bd:1c:fd:
3a:85:9c:e4:b9:72:93:5f:32:3e:94:f7:b9:50:e0:
36:db:a4:b4:37:3c:23:c4:98:f7:eb:5f:02:82:ff:
a0:e4:0b:1f:1f:cc:cf:20:78:3c:77:9a:4f:72:f8:
bd:96:fb:32:92:a0:58:bd:8c:c1:44:a3:5a:dd:43:
eb:6d:76:16:bb:67:42:d0:cb:07:b0:c4:25:53:64:
99:b8:d1:cb:35:ee:c3:02:a4:8d:af:30:3e:d5:dd:
2e:c2:f9:d8:43:d2:41:cc:cc:0f:35:5d:48:5d:66:
81:0d:f5:7d:83:d9:93:33:8e:8a:19:bf:db:4d:ca:
d4:ee:84:84:4e:a6:6b:b2:74:2d:92:35:f2:22:f4:
b9:f0:86:c1:29:85:f0:d3:76:e0:92:e4:46:78:3a:
29:ba:67:0b:55:06:8b:fd:81:31:d8:66:e3:23:7e:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:4E:96:8A:FE:01:E2:15:40:82:97:7C:A7:6D:8E:0A:C3:EF:4A
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d8:0a:99:af:68:ce:c7:bf:27:09:30:7d:ba:1b:09:f3:65:
6d:b3:99:6f:74:ab:47:51:ba:ca:ee:32:c3:2f:a6:69:91:a2:
b3:22:32:7f:5d:1d:84:2c:7c:03:bf:44:d0:18:3e:78:5a:3b:
2f:2d:79:91:da:ff:94:36:55:e1:28:ab:da:e7:b4:f9:5e:b7:
47:a3:4f:a5:74:0e:55:72:2a:e6:06:fe:ac:6d:88:75:16:5e:
66:3e:21:54:d5:9a:bf:4a:7d:f8:09:80:10:c2:bc:f2:79:f0:
16:25:84:b3:89:42:4d:ac:aa:fb:f9:96:d0:3f:0f:d1:ef:be:
bb:5f:d7:f5:5e:3d:39:2e:76:81:15:36:f1:93:0b:9c:21:65:
a7:be:3c:d5:14:b3:db:5c:95:bb:60:19:ba:e5:db:64:b6:3a:
8d:dc:14:ea:d5:fa:2b:26:d7:98:02:72:ca:a6:c0:61:99:1e:
9a:84:4a:b9:0c:68:34:ab:33:da:80:92:04:bd:2a:68:fc:8f:
05:a5:3d:e8:39:65:a3:e3:24:5c:bb:80:12:54:4f:2b:7d:60:
a3:01:e7:52:25:5c:18:d2:0d:e8:eb:b6:09:8a:7a:62:cd:74:
54:67:06:4d:00:cb:0f:8b:0a:02:cd:b3:e5:6b:69:ba:cd:aa:
e9:60:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:07:02 2025 by rpki-client