Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: o4apn3mj7qtXSI4FGTD/RPcLxY7huxVJO709tM1PK0I=
Subject key identifier: 20:A5:85:93:6A:82:19:2D:3A:70:4F:A7:EE:7B:B8:3B:E4:9B:90:56
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 019A2478A542FB9784CAAC309518D8DF08C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 1517
Signing time: Mon 27 Oct 2025 07:01:17 +0000
Manifest this update: Mon 27 Oct 2025 07:01:17 +0000
Manifest next update: Tue 28 Oct 2025 07:01:17 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: iourZEzOtW2p4ERlRH0Awy2jI/PZJJycBBtAAjzUTlU=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:a5:42:fb:97:84:ca:ac:30:95:18:d8:df:08:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Oct 27 07:01:17 2025 GMT
Not After : Oct 28 07:01:17 2025 GMT
Subject: CN=20a585936a82192d3a704fa7ee7bb83be49b9056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:55:f5:72:96:9e:7f:fd:47:fd:be:55:07:
2f:dd:d5:7b:6e:a0:76:0b:c2:b7:6c:a4:23:1b:f8:
41:c5:6d:3d:27:45:25:69:75:34:df:9a:8e:18:34:
1a:6e:79:9b:53:94:81:92:a7:bc:a2:93:1b:b7:d6:
02:af:29:a1:8a:74:dd:12:7b:03:3c:59:d5:18:77:
1d:28:02:18:58:7b:b5:19:5f:e5:ac:50:3b:28:44:
7e:32:7c:f5:51:aa:32:28:ac:f0:65:f2:8d:b7:4e:
f5:ee:67:31:8d:12:c8:95:70:07:76:90:89:15:8a:
27:97:19:2d:ea:2e:7a:a2:88:1d:ff:cc:72:da:da:
06:d3:dd:5f:58:21:a4:a6:23:9f:6f:02:28:ce:c6:
55:0a:98:b1:b3:b1:63:36:a1:95:50:90:eb:3f:bc:
d4:1e:e6:6c:26:5a:1a:d2:cd:2a:99:b6:7e:7f:e5:
fe:dc:2d:6b:62:89:6f:b6:b2:73:ab:a2:ea:35:d9:
92:89:c9:1a:4a:47:a4:30:c8:2c:44:a6:1e:ba:95:
fa:b3:a9:1b:e5:b2:8f:c8:d8:52:fb:f9:e2:c1:44:
f2:fd:87:e1:eb:00:b5:94:62:db:9a:40:9d:37:58:
30:9e:61:7c:3b:42:e8:33:8f:5b:3e:f3:ef:b0:52:
77:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A5:85:93:6A:82:19:2D:3A:70:4F:A7:EE:7B:B8:3B:E4:9B:90:56
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8c:90:04:66:01:85:b2:bc:ca:e7:9d:94:ff:48:78:60:1d:
0f:2f:e2:04:30:b8:ff:96:6b:8c:0f:9d:04:34:e3:e4:9a:8c:
3e:2e:94:5e:94:95:a1:e1:82:d6:0e:0f:ad:25:2c:1d:4a:a8:
bb:24:11:ab:7a:d4:df:4c:b5:8b:0d:8d:91:f6:28:11:b2:97:
1f:2b:a2:90:f9:76:57:cc:9d:08:c8:cc:c7:77:f2:d5:6d:b6:
ef:e9:6b:96:62:36:af:71:56:db:c0:cd:eb:1a:0d:1e:39:9c:
1f:5a:46:f2:f8:6b:a3:4c:4f:50:05:af:4a:6e:2d:be:41:b3:
d9:7c:79:33:ee:be:f2:cc:60:2c:f0:3d:a2:7d:ee:ff:db:b6:
de:b9:a8:fd:cf:b1:f9:f9:56:c0:92:ea:a7:5f:a8:ac:77:56:
67:d5:d3:d2:97:46:73:ea:59:10:05:06:73:d8:98:6c:98:13:
5f:ac:49:fb:e3:8f:c1:fb:cc:50:a3:38:9a:b5:56:3f:f1:e7:
ac:5f:6a:b5:ea:7c:a1:76:16:d7:2f:b1:a1:f5:21:56:2b:15:
49:0c:56:67:d6:61:b8:26:4b:1e:a7:e6:e7:0c:3f:9a:1e:87:
40:56:f5:0c:57:35:2a:d9:cd:0e:62:fb:18:f7:21:9b:96:1f:
6b:38:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:13:23 2025 by rpki-client