Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: X+tNi4i2GbOJVBL4u5M/XK9CQW0B75rin5xZsDq3bx4=
Subject key identifier: 62:5D:8A:F1:95:11:C5:FC:21:D0:E3:86:3C:6F:A6:F6:F5:A8:02:AD
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 019A725CC863A78EC0C436FA0E14F78F222C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: 6wIJeBLgqhDzfNt9JtN/ANzYqNbGxlfIG/5Kl86A7Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c8:63:a7:8e:c0:c4:36:fa:0e:14:f7:8f:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=625d8af19511c5fc21d0e3863c6fa6f6f5a802ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:77:bd:b6:b4:a4:a7:7c:96:6b:42:cb:fd:
4c:1c:34:48:7f:98:bc:95:2f:18:37:ec:99:d9:78:
ec:5e:44:8f:e6:1f:f2:a0:36:30:93:41:83:b9:80:
55:a3:93:72:8f:b1:2c:83:bd:4f:de:3b:8b:3e:48:
51:29:3a:89:60:a7:30:7d:e5:00:56:4e:0d:4e:01:
c4:12:96:f2:d2:1e:35:b4:2c:b7:43:a8:1e:47:49:
7d:4a:6d:53:de:be:14:9e:ed:af:89:0f:e3:17:1c:
51:c7:e3:8a:91:b6:92:94:e8:33:d2:c7:45:cd:74:
f4:56:ef:26:b2:eb:53:4c:e0:43:ee:90:06:c5:48:
0b:e0:6c:4b:f4:3a:0d:38:a5:b7:b1:6d:ae:f2:1c:
63:d3:c8:fd:08:b2:f8:54:69:19:4a:c0:21:69:80:
96:0a:7e:64:15:7d:63:b1:3f:f7:72:b8:0b:b1:31:
d8:82:37:bf:52:69:1c:9c:2d:81:7d:73:d6:29:73:
48:69:91:a7:a5:92:d0:c6:c1:40:d4:37:62:b3:88:
96:c5:71:e8:1d:e9:62:09:d7:c1:96:cd:33:91:02:
84:7e:3b:ab:53:16:d2:d4:93:ac:d6:4b:a5:ba:00:
48:b3:d2:af:f0:0a:10:74:c3:3a:0a:b3:0c:63:20:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5D:8A:F1:95:11:C5:FC:21:D0:E3:86:3C:6F:A6:F6:F5:A8:02:AD
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:57:8f:4f:cb:0b:7c:02:27:e8:9a:5d:09:c7:fe:6e:6e:68:
c4:36:9d:99:b1:92:84:56:f4:6a:1f:65:6e:bc:ab:fd:08:04:
b6:7b:4a:c1:e6:09:0d:da:3f:c1:8c:8d:46:69:cf:b3:96:67:
86:db:da:20:a7:f2:d5:82:33:13:47:26:23:64:af:73:dc:ab:
e5:e1:a5:4c:f2:a0:fd:0b:ca:35:18:cd:0d:a2:a9:f7:4e:e9:
dc:db:a4:89:ba:7e:81:bf:9a:eb:53:82:06:a1:28:a9:8f:1e:
93:b0:25:5a:29:8f:94:37:3a:fd:81:70:f7:95:bb:bf:c3:30:
3b:ef:3b:5b:e3:63:2c:bd:fb:31:98:6c:ba:51:3c:e2:a9:d7:
67:2c:71:5d:0a:ad:cc:13:d6:d5:af:9f:cc:34:5d:25:1f:1e:
73:b3:94:98:34:1b:b1:f3:91:cc:4d:89:37:1e:1b:fc:33:4f:
b8:e1:16:5c:7c:2c:35:47:ea:97:52:8b:98:85:0b:57:1e:be:
2b:f1:7e:36:d8:f8:16:e9:df:4a:1e:3a:16:f6:a8:45:4a:d7:
07:b5:20:c4:98:ce:6b:f1:f5:0b:5c:a4:1a:4e:99:75:74:c7:
20:a5:52:80:95:c1:35:bf:9c:d5:5f:1b:26:4f:7a:ae:44:56:
f9:a5:39:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:25 2025 by rpki-client