Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File: v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier: PxS5XhLFnQFbwoMF9UIo4xqUe1V3etNua5BNJByFecA=
Subject key identifier: D4:4A:8B:CD:36:23:6A:3C:72:74:2A:F3:6B:B6:0A:A7:F7:5B:42:3A
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 019A2108B0663FF300896D694E97B97753EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 15:00:08 +0000
Manifest this update: Sun 26 Oct 2025 15:00:08 +0000
Manifest next update: Mon 27 Oct 2025 15:00:08 +0000
Files and hashes: 1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: Pm2jfAfH8JdIQ5wu6D0VyMeJ2Aeyo9EyTRzutYIWWIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:b0:66:3f:f3:00:89:6d:69:4e:97:b9:77:53:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Oct 26 15:00:08 2025 GMT
Not After : Oct 27 15:00:08 2025 GMT
Subject: CN=d44a8bcd36236a3c72742af36bb60aa7f75b423a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:8b:81:dd:fc:c3:09:66:f2:8b:66:60:61:
23:31:66:73:2c:23:bd:01:1d:b8:64:66:c8:4b:35:
b1:a7:9b:e4:e2:3c:5e:fc:1d:93:d8:e7:e2:af:af:
4b:7f:04:fa:78:da:83:b9:87:78:36:52:e2:8c:d7:
af:e9:d8:b8:80:58:78:60:ee:3b:03:a5:7f:c2:dc:
3b:de:f8:f2:ff:89:33:8c:35:a5:ca:e9:b2:30:58:
71:15:c6:8f:2c:d4:59:da:e5:ad:7e:96:61:34:22:
9a:ad:ce:9e:69:11:56:91:2e:46:72:ef:e3:90:76:
2b:84:31:53:03:01:5b:54:6e:16:ea:3a:fe:53:5a:
fa:4a:84:b1:26:5c:16:b4:45:0a:bd:97:44:8c:11:
a1:2a:22:91:f3:23:de:47:1c:6f:81:5d:e7:dd:41:
a0:08:1e:7f:be:d1:69:a5:ec:b6:67:94:62:4d:98:
08:12:48:ce:d5:85:37:ad:ca:41:ea:d3:ed:18:78:
f2:0e:3e:05:dd:ff:98:ef:73:5c:98:68:94:c5:cb:
4f:ee:77:56:8f:fb:bd:44:08:43:23:b9:fc:3d:f7:
8a:b9:a4:a7:93:e0:c8:fa:20:11:64:74:06:97:61:
7d:f4:16:0f:4c:aa:09:6e:62:d9:6f:c2:41:58:63:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:8B:CD:36:23:6A:3C:72:74:2A:F3:6B:B6:0A:A7:F7:5B:42:3A
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:47:3a:4e:5a:ac:db:e7:74:4a:56:c6:f1:10:64:32:fb:e1:
10:71:49:10:e8:2c:38:2c:ec:18:7b:37:a2:ce:19:9a:6c:fb:
62:ca:d4:12:a9:96:19:a7:93:ba:de:83:22:60:fe:4c:4a:bd:
2c:8a:79:e6:cd:af:1a:52:fc:61:8b:0b:6e:f5:f1:70:35:77:
ea:27:eb:04:88:22:b0:de:84:b5:5f:2f:45:de:07:df:98:c0:
27:1f:cb:3c:ca:6a:63:d5:eb:6e:2c:29:4d:4f:c7:90:0c:bf:
ec:15:88:bd:b2:2b:e5:cb:74:6f:59:48:f1:d0:96:4f:4d:80:
62:ad:92:dd:66:4c:b0:0e:2f:d0:c5:b5:9f:3d:3d:9e:d2:f4:
98:80:55:1b:df:b3:32:a7:ae:c0:fc:1a:05:b5:47:f5:7b:0d:
62:1a:cd:a5:14:23:e5:06:b3:c2:58:67:ac:e1:7b:4a:6b:b0:
a8:f8:d2:40:23:ec:d0:fc:dd:db:02:7e:08:99:ea:3c:3f:d9:
07:72:1d:23:83:5b:1f:a8:06:be:86:5b:27:2f:89:f6:e1:62:
29:33:40:2a:f0:7d:6b:9f:5a:c7:37:37:72:82:4d:9c:dc:90:
9f:6f:9a:e5:12:b9:5d:f0:55:bf:94:9d:b5:f6:39:4a:66:8e:
9b:6f:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:09:50 2025 by rpki-client