Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
File: v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft (raw, json)
Hash identifier: wHw5uVfUd9boh7xRPdArB/ke3/UJtm9uN0CoHNvTEhk=
Subject key identifier: 58:51:D0:97:73:F3:CD:DC:09:6C:D4:1C:C2:6D:DE:D7:55:9B:87:99
Authority key identifier: BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
Certificate issuer: /CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Certificate serial: 019A503E58FA585FE596985332B7B4C08D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
Manifest number: 10
Signing time: Tue 04 Nov 2025 19:00:54 +0000
Manifest this update: Tue 04 Nov 2025 19:00:54 +0000
Manifest next update: Wed 05 Nov 2025 19:00:54 +0000
Files and hashes: 1: YK5nFZTFgBEwXmaFB6vIIRqOTD0.roa (hash: jOXBRmwr3D9a+H6ywOkdI9zIP2sM0Nf1YNNjnaSWmfo=)
2: v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl (hash: 7ickuD7Lkfo/8KtJ8U6W7mufK0vhGxB5ANo2UD+T+Gk=)
3: xXaP2eDNgG4DZ5MWiMVfRW19g2s.roa (hash: NRx5nwi4HBO5MYl0mHSa1UutEw1DMYe/lbcn2V85lZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:58:fa:58:5f:e5:96:98:53:32:b7:b4:c0:8d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff76a06eaa2a03c7991347509b8608f4a71071f
Validity
Not Before: Nov 4 19:00:54 2025 GMT
Not After : Nov 5 19:00:54 2025 GMT
Subject: CN=5851d09773f3cddc096cd41cc26dded7559b8799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:ae:e6:5b:de:4f:30:3f:87:fd:01:97:7a:
e4:55:a6:ea:a2:9f:d6:91:ea:cc:6c:1e:e7:3d:6a:
e5:e0:60:7c:b9:2c:2a:56:16:be:6f:77:11:9d:52:
96:38:f1:1d:35:f4:4c:fe:0a:31:64:04:77:01:5d:
e7:d8:98:90:00:5e:db:af:ef:fc:d8:a7:7e:f6:8f:
93:a0:0b:a7:99:c1:53:86:93:c6:1b:28:04:1d:43:
e4:ef:4d:c5:dc:cd:e5:8e:01:3a:57:3a:97:20:c4:
e4:ac:a2:f9:3e:93:ca:49:39:16:98:3a:af:9f:18:
1c:d2:7b:f9:d3:36:05:e4:07:e3:a6:11:1b:be:81:
c5:95:83:03:c5:49:0a:a8:d7:7f:9e:0d:56:67:8e:
5a:19:3a:4d:53:3a:76:7e:df:3f:ff:c3:c4:cc:83:
1c:3a:61:2a:3d:c6:de:b3:e6:c7:65:24:97:1c:e0:
69:99:ee:32:37:96:83:1a:97:11:13:33:1f:91:81:
1f:98:96:64:f6:b9:17:b4:20:36:a7:e1:93:af:7d:
2b:b2:b8:d3:9b:10:bb:28:7c:52:c2:dd:2c:f6:74:
41:ee:0d:8f:cc:c2:37:2d:4d:f4:e8:98:2a:80:77:
49:b7:7a:55:09:7a:81:4c:16:59:68:08:5d:cb:27:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:D0:97:73:F3:CD:DC:09:6C:D4:1C:C2:6D:DE:D7:55:9B:87:99
X509v3 Authority Key Identifier:
keyid:BF:F7:6A:06:EA:A2:A0:3C:79:91:34:75:09:B8:60:8F:4A:71:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_dqBuqioDx5kTR1Cbhgj0pxBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/145943-651f-46ff-93b2-949662b271b2/1/v_dqBuqioDx5kTR1Cbhgj0pxBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:de:ba:d3:31:94:a4:b9:60:7d:51:4d:f6:5a:4a:d3:29:00:
a8:7d:25:f2:a6:86:32:89:61:7a:3d:a1:a0:7d:7e:4c:ff:f3:
35:3f:88:d5:cb:ed:ce:ce:ea:70:ce:2d:cd:a5:57:c9:d4:7c:
8c:8f:4e:d2:f7:b8:53:0e:63:ed:87:45:2d:57:26:b4:7e:c9:
2e:dc:0c:f1:c0:4e:c7:59:73:71:89:58:cc:50:ae:7e:16:82:
3f:8c:f2:79:fe:0c:2b:dc:32:66:06:18:f0:20:82:ac:14:36:
b7:84:a7:9e:b5:fb:b1:aa:5b:bc:9e:54:82:b1:a1:24:fa:7c:
85:45:c0:c8:7a:55:c9:6d:01:2a:f5:89:66:e0:83:26:5f:f3:
49:f7:92:43:3f:0e:41:bd:03:4d:95:7d:8d:1f:2c:b1:b6:70:
77:02:58:32:87:c9:9f:98:92:46:ae:55:66:66:3f:d9:c5:a7:
58:ee:9a:96:85:80:f8:7d:ec:d4:29:30:7b:20:8e:2e:7e:1b:
23:42:73:3f:6c:6a:8f:cf:3a:83:ed:de:76:65:a5:a2:49:91:
f5:11:ac:2c:e7:84:39:b1:65:2e:e9:cd:c6:7c:7f:ae:ab:0e:
f5:13:45:c5:9b:98:ec:8d:47:59:c8:fd:68:ad:24:5b:7f:b6:
be:72:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:07:02 2025 by rpki-client