Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File: v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier: 0KiLPLvo74tyT4+HYFsMPLXBoNuT2P06yCgwKa5fVgs=
Subject key identifier: E2:11:42:E2:5B:07:5B:A4:D1:5C:8D:53:9D:1F:6A:7C:AC:14:68:03
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer: /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial: 019A7113618EAE5546B6823BCE38F79E1C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number: 0306
Signing time: Tue 11 Nov 2025 04:01:26 +0000
Manifest this update: Tue 11 Nov 2025 04:01:26 +0000
Manifest next update: Wed 12 Nov 2025 04:01:26 +0000
Files and hashes: 1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=)
2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: N3Ri+0ZL51xC0hs6P8WfUSunO8Va8gSJsMTEZpXuBoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:61:8e:ae:55:46:b6:82:3b:ce:38:f7:9e:1c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
Validity
Not Before: Nov 11 04:01:26 2025 GMT
Not After : Nov 12 04:01:26 2025 GMT
Subject: CN=e21142e25b075ba4d15c8d539d1f6a7cac146803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:2a:6b:05:9f:1f:79:e7:3d:5d:58:f3:4d:
bd:b1:dd:fc:fa:16:90:3a:ac:52:c8:04:65:d7:37:
c8:6d:bd:2a:e5:11:17:ad:22:0f:a2:42:ed:ea:42:
d7:aa:c2:4e:3d:c2:46:b9:8b:51:ed:28:5f:78:8a:
0d:7b:b2:6e:76:54:a2:f0:45:ff:e5:fb:76:03:84:
f9:87:ac:f9:2d:ff:c6:6e:94:c9:c1:98:32:75:e9:
9e:3a:32:8f:bb:1f:6b:27:5f:67:e7:5e:d3:89:ac:
a0:36:48:66:6f:11:cb:18:ae:85:2e:c2:e5:97:7e:
6f:25:cf:61:b4:64:1d:ef:55:fc:54:df:99:76:12:
db:ec:c5:3e:f1:00:aa:b2:94:7d:3e:f7:6c:be:14:
98:86:db:b0:5c:16:f2:e5:86:55:4a:1c:aa:a4:63:
bd:a1:6e:09:b3:48:5d:87:67:6c:07:7c:e9:60:05:
7e:0f:91:ad:9a:7c:36:ea:c5:71:6b:10:47:c7:9d:
16:c1:4f:7c:cd:23:b4:ba:1e:1b:fa:31:23:f2:d1:
fc:38:46:12:07:d2:e7:fd:dc:ed:f9:f1:ca:28:a8:
26:39:40:18:1c:34:b1:bb:5f:7b:c6:f2:71:5b:29:
78:e8:ab:90:38:47:6f:24:f4:10:0e:09:32:77:10:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:11:42:E2:5B:07:5B:A4:D1:5C:8D:53:9D:1F:6A:7C:AC:14:68:03
X509v3 Authority Key Identifier:
keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:10:67:c8:05:05:c6:2a:f7:a8:27:23:cc:9f:ca:70:08:69:
60:bc:d2:fe:f8:97:0b:4a:bc:67:52:ae:02:fe:1f:45:34:d0:
cb:c7:65:b1:de:0b:56:f9:6f:e0:8b:23:39:24:79:92:df:76:
16:31:2e:8c:69:c9:fe:c8:44:83:11:ed:bf:ac:ef:8a:12:bb:
0d:a1:c6:b4:50:28:a7:a8:4e:d4:fa:88:0f:2f:55:25:a1:c9:
1b:37:4f:5d:3c:78:96:3a:ac:66:8e:95:5b:fd:ea:62:c0:9e:
7a:37:25:39:ad:e8:ae:0e:74:a7:f8:83:ff:5a:3a:d3:bd:13:
14:ca:2f:e3:31:39:42:28:a7:d4:59:ee:81:30:59:f8:ef:8d:
22:17:1b:76:d0:3c:4a:47:57:58:df:70:e6:05:a0:ed:1e:ad:
3a:0c:5b:50:4b:09:0e:30:a2:1e:3b:73:66:ee:c7:42:b8:9a:
04:22:16:33:6a:b0:fd:04:85:29:77:50:b1:58:79:41:83:31:
a9:61:c4:59:00:66:59:14:62:f6:99:8f:24:ff:47:1c:15:3d:
a3:28:2c:f0:1a:c2:d2:e8:92:23:5c:d6:88:9a:da:6a:12:00:
89:fd:e9:47:8f:fa:39:88:6c:50:3b:12:57:01:75:86:63:f5:
bf:de:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:38 2025 by rpki-client