Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: YrIIoL3S/e2mIMVh7hlayMQ6zjfkQpmECIR2+137xhs=
Subject key identifier: AC:03:D8:D5:1D:3F:2D:5F:ED:A2:62:C4:E2:63:64:BD:56:1F:D9:EA
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 019A21AD67E22558E497C19FD649520E0409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0B47
Signing time: Sun 26 Oct 2025 18:00:03 +0000
Manifest this update: Sun 26 Oct 2025 18:00:03 +0000
Manifest next update: Mon 27 Oct 2025 18:00:03 +0000
Files and hashes: 1: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (hash: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: dblIZEdwXSt2pRpM2+Y8+TkDx5DaLzNA0la1NdjE7GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:67:e2:25:58:e4:97:c1:9f:d6:49:52:0e:04:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Oct 26 18:00:03 2025 GMT
Not After : Oct 27 18:00:03 2025 GMT
Subject: CN=ac03d8d51d3f2d5feda262c4e26364bd561fd9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:85:79:fb:49:bd:91:05:fd:7b:ee:c7:2e:
f5:ca:d3:3e:10:6c:c6:6d:be:34:64:c2:e0:cc:49:
5a:63:75:a5:ac:f8:42:d4:fb:8a:58:4c:78:93:df:
b5:a3:50:5d:ee:07:83:83:3d:16:d5:cd:c4:9e:c5:
dd:f0:80:45:e5:cc:84:34:23:4c:2e:78:af:ce:ee:
1d:ad:a4:b5:42:07:ba:fc:1b:c0:95:09:31:80:21:
bc:ad:ae:3d:f1:95:b2:54:15:25:72:89:05:0d:03:
80:2c:54:7b:5b:57:5d:c6:e8:f7:52:18:71:2b:2a:
44:29:f3:52:84:c3:aa:8e:40:91:fa:50:ae:f7:12:
3f:a4:2f:86:08:a1:7e:52:af:2c:a3:f2:02:ed:82:
dd:5e:43:48:67:13:dd:b5:98:21:4f:4b:75:95:c5:
17:f3:a2:c7:aa:50:14:0d:d9:15:b4:fc:3b:f4:b0:
e9:02:ad:b4:dc:bd:6d:ab:9c:aa:2f:83:94:e0:2e:
08:56:c7:81:9b:96:fd:d5:d8:e2:9e:a4:ce:45:54:
ee:8e:c6:f4:f6:2f:33:c1:b9:35:84:34:f1:47:35:
17:c9:78:b3:a8:82:94:df:e2:ec:d1:e3:d5:5f:18:
ae:16:08:48:95:93:88:67:a0:67:64:1d:e3:8d:e8:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:03:D8:D5:1D:3F:2D:5F:ED:A2:62:C4:E2:63:64:BD:56:1F:D9:EA
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f5:d1:a0:fb:95:e1:62:2a:dc:53:81:a2:21:51:7d:68:0b:
43:6b:5e:3f:03:07:fa:5b:5f:43:9b:3a:27:0f:d2:d2:cc:86:
d0:08:9e:63:6c:8c:f8:eb:04:15:e1:c3:a6:12:03:c6:fd:8d:
ae:88:2d:ee:d1:05:41:ab:5c:26:ac:d9:01:d1:80:59:2e:89:
e9:a3:cf:d3:27:73:17:ee:ac:9d:83:71:10:fb:9c:c1:44:06:
c3:3a:87:45:d8:68:ab:c1:ff:23:26:af:c2:99:96:dc:17:51:
b9:07:e2:6c:2b:c4:fd:65:f9:e6:33:82:29:cb:73:cb:1c:f8:
0b:6c:21:db:41:e6:bb:db:64:7f:56:6d:72:b5:6a:e7:1c:3d:
1e:9a:c2:87:ff:4d:c8:26:b0:b5:a0:14:b3:0b:a7:6a:0a:aa:
8e:82:b4:b6:dc:59:68:71:34:1d:0b:84:e7:d6:f2:ad:91:55:
bd:5b:29:79:a0:41:89:04:cd:2d:c2:56:a9:c9:b3:0f:af:c4:
10:53:11:39:3b:9c:56:5d:67:19:bd:19:04:aa:ce:c7:61:38:
50:eb:a8:69:74:c8:0f:cc:c4:09:46:89:06:bd:b5:ea:f3:f7:
4a:75:06:91:77:90:bf:45:4a:7d:82:db:6f:59:99:ab:65:93:
a2:29:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:16:08 2025 by rpki-client