Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File: buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier: FF5T4MAMhJCCuKOTbGVym7PPd7gRI8GqUC+tpmUZNLo=
Subject key identifier: CA:7E:F4:31:02:EA:E0:1D:7D:21:FD:A1:C3:8B:A0:C9:24:0E:E4:81
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer: /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial: 019A71EE9A62BE5D2632B07F3F3A7518048F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: YWeKpT1rE5D3jQdqNfYDMaSRQ-o.roa (hash: Zb5RmiW5EJ1sc/m0g84BzROe4xUzHJtXaAdIweCX3Co=)
2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: POXN3sWICSzXLVXFuGqbNSN/R5AAys3gx3OFY4lvLyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9a:62:be:5d:26:32:b0:7f:3f:3a:75:18:04:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=ca7ef43102eae01d7d21fda1c38ba0c9240ee481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:76:93:9c:00:bb:c7:51:ad:22:64:9f:54:
b7:73:37:de:7c:f9:5e:af:47:c0:3b:10:28:f1:ec:
57:31:be:9a:49:e0:67:71:00:0b:ba:3a:cc:e1:2f:
d1:84:8c:a3:3f:c0:0f:fc:0f:c3:26:5e:39:0a:62:
59:e5:00:6b:45:a2:d2:21:cd:d8:51:5f:dd:f2:1a:
fc:97:79:5e:71:bb:aa:df:01:a6:23:7f:6f:9e:ab:
3d:d9:f9:fa:7e:f0:82:40:67:8f:5c:c5:b1:f3:b6:
e2:7f:bf:14:4c:99:08:be:2e:f9:09:b9:ac:0b:02:
75:ac:56:e4:b3:0a:f9:49:32:30:26:3e:a5:af:90:
59:07:ba:2f:dc:2c:15:98:18:20:f4:f9:58:0f:5a:
50:ad:c2:10:5d:0b:f9:10:31:ee:08:84:b1:b2:a3:
fa:d0:6a:3e:51:ba:07:64:25:3e:27:25:36:a4:f4:
e4:d8:8f:30:b2:5c:0f:e5:b5:c6:cc:25:e1:3f:a7:
6c:9d:9d:a4:c2:24:73:8f:25:a3:5d:54:0b:b3:22:
19:93:9b:1d:6b:9a:f4:21:01:9e:3e:eb:c8:ee:b4:
5c:e6:90:e1:c6:c3:c1:10:92:e0:1a:29:62:01:be:
14:b1:73:5b:ba:94:e0:3d:55:6b:69:16:9b:d4:08:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:F4:31:02:EA:E0:1D:7D:21:FD:A1:C3:8B:A0:C9:24:0E:E4:81
X509v3 Authority Key Identifier:
keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:07:e4:a3:73:5c:a9:69:5e:59:92:c7:19:d6:03:57:9a:1b:
8e:c1:ed:ae:1c:25:3b:81:09:66:21:b8:6a:d7:bf:09:9a:31:
95:17:df:18:d7:ad:fe:d1:85:51:cb:94:d7:e0:85:41:60:62:
71:3c:25:5c:f4:20:c5:5d:bd:f6:6f:b8:71:ea:b4:11:58:f9:
f8:84:57:b3:19:d0:09:90:27:46:4a:7a:3e:49:1c:aa:87:ca:
17:64:b3:9c:ec:65:5b:26:7c:f4:54:a5:fd:de:e0:bc:db:ee:
f4:1c:91:82:7e:90:04:09:3a:01:85:76:29:31:e7:39:8c:03:
41:fe:85:3c:ad:73:11:ca:c5:80:32:7e:dc:7e:81:f2:5b:0c:
98:83:55:0b:a5:3a:f2:e0:10:50:05:0b:46:33:ce:2a:de:8c:
2d:40:a0:1d:96:ce:d8:b9:16:4c:63:b7:47:55:e1:fe:5e:d3:
5f:99:be:39:52:fc:0a:e5:77:54:c0:ab:38:22:cb:cc:ce:32:
3d:cd:45:33:0e:42:37:ed:5b:42:c2:66:8b:db:68:a6:d7:51:
65:89:dd:e4:79:ae:4f:f9:a6:3d:0a:5e:94:c5:84:a4:7b:82:
6c:9e:06:a0:a3:df:9c:cb:1a:5d:d1:ee:5c:06:ad:7e:f8:2f:
44:88:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:49 2025 by rpki-client