Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File: v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier: ZILBPxZvNKTpo88cXFtW7RXTAZmhSSjrqerIZxgKZV0=
Subject key identifier: F3:3B:78:73:F7:64:F6:86:CB:DF:F1:62:8F:03:B9:93:2A:12:E3:0B
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 019A7112BDEA0B9B871662D64A264827D65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number: 0FF2
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (hash: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=)
2: FL4VCP2ebS0KpzdEEjgpeOZ0WHU.roa (hash: a8hxfR30jfZG7itjDgkJbvAUR1rTEz6wQmvQZHvY+Vg=)
3: LWIsGZerMX3p84vU2rGIj-HLsj4.roa (hash: V653yeNd9OWwSecStXWVbNQrGBjKZX6SHpE0zx75CIQ=)
4: NXFNvPreWKmytgudduJxNubp9ag.roa (hash: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=)
5: kbTOh855t8tddDIlGKiPIgCKjmo.roa (hash: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=)
6: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: sWdE99TsmwFJB47gMaO+p+Z1rYtKIzbhO/GX5nLbyGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bd:ea:0b:9b:87:16:62:d6:4a:26:48:27:d6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=f33b7873f764f686cbdff1628f03b9932a12e30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:9c:ba:9d:d6:c8:f4:2d:92:5e:13:5c:ba:
3d:c5:ce:2b:10:06:d0:b3:e8:c9:cb:68:0a:1d:41:
e5:6c:dd:b6:d1:07:2b:a6:3a:eb:1f:cd:0f:d5:7d:
e8:85:ae:be:e6:bb:cf:dd:86:ee:be:ab:50:78:65:
97:2d:00:b1:db:37:8b:61:f5:23:6d:17:41:45:02:
74:3b:6b:9e:66:36:88:c2:1d:21:5a:38:cd:ef:8d:
35:d7:a5:77:a2:27:9e:67:56:72:9c:45:0f:b1:ee:
c7:0f:e0:a5:3e:be:89:b9:fc:0f:39:7e:b2:be:71:
87:c9:06:df:3c:e3:bb:c6:a2:1c:08:3f:f3:b9:a1:
a6:05:1a:99:5e:ab:01:01:4d:89:7a:8b:1a:30:f0:
39:fa:07:0a:e8:1f:93:73:80:1c:7a:0b:2f:49:10:
d9:e1:67:92:33:82:66:8f:f5:f7:c1:86:22:d7:3b:
e8:2c:7c:ba:23:7d:54:22:bb:5f:6d:89:cd:ec:8c:
14:cf:60:8a:c5:f2:b3:a6:bb:06:fa:15:76:18:ca:
10:b1:1b:38:30:e1:85:b1:6d:33:e4:a7:8f:92:68:
3c:65:6e:d5:53:22:64:9c:14:61:d3:ca:f1:45:29:
3a:95:e0:f9:c5:6e:e9:2b:ec:8a:0f:a6:45:51:0f:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3B:78:73:F7:64:F6:86:CB:DF:F1:62:8F:03:B9:93:2A:12:E3:0B
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:64:57:a1:97:08:b4:76:f5:44:25:92:02:3d:4c:3f:17:87:
8a:8e:8e:a8:d4:f6:b7:3e:36:fc:3b:b1:cf:1f:5a:f0:14:87:
73:df:2c:46:55:38:76:ea:09:a0:71:e4:a5:b5:69:70:5c:ea:
1d:28:9a:98:99:5a:f6:b6:c7:94:13:5d:27:e3:6d:73:4f:ee:
7d:e3:04:3a:5d:98:43:d0:2a:fc:ef:3f:dd:1e:46:aa:19:6b:
78:ff:bb:25:c2:bf:56:05:bf:3d:a7:9a:e3:ea:d6:55:00:06:
f2:14:33:11:4d:ee:b5:c4:64:74:1a:7d:d3:3f:61:ea:1e:50:
0a:93:17:d8:4e:df:ef:14:2f:73:39:e5:bc:9b:56:b2:85:7b:
4a:06:17:e3:90:a2:34:04:96:1f:be:c5:de:72:5d:35:b4:0e:
33:cc:b0:c5:77:e4:51:e5:1f:be:d8:58:0a:47:65:fe:ca:ab:
96:3a:44:13:9e:37:44:58:7a:8d:86:94:79:50:75:d0:f3:70:
93:8b:3f:af:3f:ea:a4:b9:e6:11:dc:7b:79:ea:13:ab:14:9a:
56:93:ce:92:8b:75:ed:d1:21:fe:1f:01:92:47:6d:3a:3f:d3:
87:23:94:0d:82:ad:92:e3:5a:aa:70:e9:a8:e4:88:1a:8c:21:
80:66:cf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client