Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier: Rj7nl2HJCBvc19TdZZUJF7pXkkV+uSpyY48PWFZIM3g=
Subject key identifier: 20:38:CB:74:09:42:B4:91:70:2E:B0:15:A3:07:A4:4B:85:61:76:C5
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial: 019A725C95B5D91CDEF06634A9D0BE0A50A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (hash: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=)
2: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: dNqdAheBzwXFPJ04XgsQGh0Y5ZKNxYkpK3ZyL1DiQ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:95:b5:d9:1c:de:f0:66:34:a9:d0:be:0a:50:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=2038cb740942b491702eb015a307a44b856176c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:74:0b:4a:17:73:a4:10:f7:e8:d9:48:40:
97:d5:f7:c6:68:77:ff:06:ef:dc:ca:34:f3:5d:e4:
04:46:36:c6:60:4c:11:66:86:35:8c:45:18:d3:50:
55:51:ee:1a:17:06:ee:c2:18:7f:e1:af:eb:29:01:
7f:2c:3c:8c:70:7b:79:39:70:11:a7:49:0d:54:01:
8f:33:03:00:fe:5e:0b:cc:20:e7:2a:a1:10:f4:29:
db:78:72:2f:06:41:59:e7:d6:bf:45:a0:4d:77:2e:
79:c8:85:0b:6c:25:8f:21:69:33:12:69:ff:00:47:
3d:1f:7d:1c:34:c9:0b:c5:4c:40:12:c2:4d:b0:19:
54:ff:6e:c5:b6:59:2f:a3:25:56:30:8f:f1:16:f8:
e1:dd:ac:70:9f:9f:8d:e8:00:18:cd:3c:a2:19:f3:
62:4b:da:09:6b:c8:a6:72:62:18:24:9b:0e:0c:e5:
41:9f:c5:69:99:41:81:50:2f:4c:f0:56:e1:71:a5:
1c:00:98:3b:a7:d9:cf:57:21:5b:0b:cb:51:32:19:
e2:26:d8:7d:4d:42:76:fa:04:a3:96:bf:8a:6f:48:
6f:f8:02:28:07:ce:e9:d6:fd:35:f4:c4:1a:54:a5:
5e:05:a0:a4:9a:89:c9:65:3b:fb:d9:d4:3a:7f:33:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:38:CB:74:09:42:B4:91:70:2E:B0:15:A3:07:A4:4B:85:61:76:C5
X509v3 Authority Key Identifier:
keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:02:6d:e3:e9:2b:6d:35:5f:15:7a:23:e4:e5:23:b2:f3:23:
c8:4a:c9:3f:8b:8f:cb:66:05:04:9c:5f:78:04:1f:de:42:71:
31:f5:09:22:35:9f:18:1f:c5:2f:9c:e5:85:34:5e:f6:07:98:
e1:c1:b4:ab:1e:0d:41:97:fd:15:c4:4a:13:33:40:b5:bb:f3:
ea:9c:bb:3c:22:82:75:0b:8f:c2:fc:89:0f:d1:0a:7b:81:8d:
36:6c:d1:02:8d:02:f4:60:66:95:da:41:be:a9:3c:77:cb:8e:
ea:00:82:26:ca:3c:0e:fa:cb:47:ab:30:fa:55:e8:8c:22:cf:
57:3f:5a:43:c3:a1:18:42:43:c5:39:0a:cc:25:e1:28:ed:93:
12:70:f7:97:a1:f3:ca:01:3b:73:65:ed:1f:f7:53:39:2d:e7:
1b:9a:31:13:78:f5:2f:51:ad:8a:53:8b:f9:ae:75:8b:8e:a7:
f1:59:6e:2a:8c:ee:7b:3c:30:9a:36:48:93:19:9d:54:ab:8f:
00:71:f9:23:d3:ac:7f:95:8d:e6:31:38:24:a9:47:88:0d:b3:
a4:b7:24:cb:84:b8:2d:db:86:79:b4:5c:c7:95:21:2e:24:66:
50:f7:a8:f6:57:3e:b4:79:50:b5:e6:35:a6:1a:8f:af:d0:73:
e5:c8:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:07 2025 by rpki-client