Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: WDXIfZYjTK28kW0EBmLQQ6cizLX7rKhOFOZn9dDa6fA=
Subject key identifier: 6B:38:32:A3:08:BD:BC:12:5C:05:5A:49:8A:DD:43:D9:1F:B0:DE:53
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019A0290DEFFA208C29534F8736804CD01AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 02B6
Signing time: Mon 20 Oct 2025 17:00:39 +0000
Manifest this update: Mon 20 Oct 2025 17:00:39 +0000
Manifest next update: Tue 21 Oct 2025 17:00:39 +0000
Files and hashes: 1: 5iMuwWI8XaEhRZXS7r7Tcitw9PQ.roa (hash: 8fAOJFpGS1CZZLyn3E+heU8rt8qm4ywsWgdel84Aa/Q=)
2: YvRVUVUo7_yU7Iq1s_PjtWUSc3E.roa (hash: 573R9YYxB5EQXEuIaiXRONNginQD8FqOnode2lo9il4=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: lIBSAx3Al5P7c0Y8/Xd8HlxJaABvO8M8lkjJeK/25Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:de:ff:a2:08:c2:95:34:f8:73:68:04:cd:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Oct 20 17:00:39 2025 GMT
Not After : Oct 21 17:00:39 2025 GMT
Subject: CN=6b3832a308bdbc125c055a498add43d91fb0de53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:95:75:cf:c5:4d:37:3d:65:2a:84:85:f2:
8f:9d:01:74:2d:55:b5:e4:2c:d1:77:75:1c:61:e9:
f1:68:29:c1:b8:1c:66:f8:5e:39:d5:59:f2:b3:45:
98:82:48:4e:2b:d0:a3:81:20:cb:5d:3f:8e:28:7b:
14:dc:64:0d:9c:ce:47:3b:4e:8c:b2:84:6a:ad:21:
ca:ad:dd:48:15:11:94:ed:e0:8e:b0:2b:12:20:7b:
d9:74:de:a4:b0:e8:2f:17:93:84:7f:7e:4f:32:90:
67:78:f5:37:10:7a:43:37:d8:e1:98:5a:b1:a2:6d:
e8:df:c3:cd:18:9e:c2:ca:d8:99:0d:6a:ba:81:87:
91:c5:eb:b3:05:04:a2:b1:ed:6e:00:e2:ce:45:b0:
50:84:81:97:be:3c:28:b7:8f:4d:a0:ce:c4:78:33:
71:91:79:d7:ce:a5:a8:66:80:13:e0:de:8d:f4:0b:
d3:11:ed:c9:22:8f:ac:c5:d6:ca:f6:cc:3c:a6:30:
b4:7a:45:ef:1f:17:7a:ff:22:77:4f:88:75:69:a9:
c1:96:3c:55:dc:0d:a3:46:19:8d:ed:90:f4:78:27:
53:66:27:ae:1c:09:26:68:b5:4a:73:3a:ca:2d:78:
e3:8a:b5:3f:b3:61:5d:9c:70:60:c6:79:0c:b7:7d:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:38:32:A3:08:BD:BC:12:5C:05:5A:49:8A:DD:43:D9:1F:B0:DE:53
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fa:41:51:5c:e9:d8:93:42:58:d8:16:9e:f8:56:fe:95:29:
f8:68:9c:00:8f:71:3e:fb:d5:b8:3a:2c:f7:11:40:ef:30:c5:
5f:61:5d:fa:6c:b7:71:86:51:70:ad:08:9d:fb:68:f1:35:af:
0e:50:84:c9:e2:33:e7:f1:79:fd:f5:9d:db:8f:47:9d:09:00:
f4:f8:06:24:1c:8b:63:5a:4b:f8:8d:01:a8:40:71:f0:4b:ef:
b1:ac:85:a8:bb:e2:2f:c6:99:98:df:ae:57:84:9c:d9:38:57:
64:17:e7:95:2e:32:6e:25:70:69:02:98:c1:fb:ee:8d:6d:1b:
a2:9c:74:47:76:29:c7:ad:fe:ea:b7:56:89:bb:b2:de:42:1b:
6e:97:bf:d8:43:a4:3c:33:1f:99:6c:5c:ab:2d:8c:2d:62:86:
df:87:07:83:d2:49:17:ef:a9:b2:3a:c5:9e:83:a0:58:6e:c4:
a4:c0:ae:d8:a8:66:2f:c0:25:9f:08:b6:7d:5b:57:07:90:b0:
63:33:39:81:a4:cd:69:60:8e:d7:86:0a:b3:71:8c:69:ec:21:
eb:52:c7:8d:5d:f7:73:77:95:f0:43:6d:55:d3:98:6c:a4:b5:
d5:93:75:7b:1d:bd:b0:5b:ff:a6:2a:2f:42:af:91:a6:a2:57:
c4:8a:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:19:22 2025 by rpki-client