Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File: rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier: EB6MUvfph330cT5P4OOX7XsOBZ+Oe3Pa0E5t2ZAEwO8=
Subject key identifier: BA:4F:D0:FF:91:39:9B:5E:F8:D4:43:6F:33:CE:D2:54:8C:5F:DA:F2
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 019A44397AA11AE3FE8EBFA543E981B6C610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number: 170B
Signing time: Sun 02 Nov 2025 11:00:08 +0000
Manifest this update: Sun 02 Nov 2025 11:00:08 +0000
Manifest next update: Mon 03 Nov 2025 11:00:08 +0000
Files and hashes: 1: 6DiQrdbcJOqBfsf9QDEXeVd2izY.roa (hash: 31oYv9nrHSwIdd+Bdi1r8AvslvZ9845lRIm+bAJz/OQ=)
2: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: oaPZRiPE/5Kxsm7naFfbDqsrJaaE0eb/Fg2StHQWQSU=)
3: vgAzovenVoSsD0vS8yfVFQ_iX5s.roa (hash: aSEm6wkVsveq0EzZjvN/ovL0lIBGsYGZzYlJEOjMlhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:39:7a:a1:1a:e3:fe:8e:bf:a5:43:e9:81:b6:c6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: Nov 2 11:00:08 2025 GMT
Not After : Nov 3 11:00:08 2025 GMT
Subject: CN=ba4fd0ff91399b5ef8d4436f33ced2548c5fdaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:c3:96:40:64:1a:60:be:87:cd:19:3c:f6:
57:ff:1d:ff:76:02:f8:5c:09:aa:ed:a5:7d:72:45:
20:06:35:75:53:87:8a:19:60:65:63:5a:0d:d8:98:
c2:da:ab:ae:c1:c2:22:fc:63:dc:a5:e6:3c:8b:f2:
4a:60:37:9c:b7:4d:b2:30:ed:ab:30:bf:82:10:9f:
2e:51:96:89:03:7d:a4:c2:c4:87:4d:74:17:43:c3:
69:43:94:0b:c9:2a:9f:33:c1:06:84:42:6e:48:7c:
b2:7d:c0:60:41:4a:9d:c4:c7:8e:09:74:7c:87:c0:
01:10:4f:45:29:fd:e6:a7:3c:37:bf:87:9c:f5:5c:
0f:db:bd:6f:37:d7:b4:a0:85:bf:1d:9f:8f:37:4a:
78:43:ee:d8:9f:28:a8:ce:f3:d4:c8:37:db:66:cc:
00:eb:a8:32:91:04:03:c7:0a:12:7a:7c:25:84:18:
cf:9f:05:ea:00:05:c3:87:f6:c9:54:33:16:05:50:
62:54:17:c8:7f:8f:90:d7:d8:4b:f0:d2:da:eb:5e:
08:39:6a:2e:af:4f:05:a9:9e:ce:8d:be:27:9b:fc:
56:4b:02:4a:c4:2f:32:29:5c:86:ab:86:2b:9b:7e:
a6:f8:d7:f8:31:40:a4:8f:e0:05:88:a9:ec:73:4e:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:D0:FF:91:39:9B:5E:F8:D4:43:6F:33:CE:D2:54:8C:5F:DA:F2
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:38:00:c1:26:42:73:37:bd:24:7b:27:72:bd:e9:65:e9:0e:
c4:72:b8:76:98:44:d2:5b:a5:81:ed:cd:90:4d:a6:8f:4f:4e:
fc:0c:87:e6:b6:dd:da:af:78:9c:f2:ed:6c:41:51:2f:85:91:
68:94:7a:ea:74:77:62:0b:4f:26:db:8c:73:40:49:34:df:1c:
6d:f0:1e:10:22:b8:e9:6d:ee:a0:c6:da:dd:a3:98:71:77:3f:
1a:ff:f3:6b:c5:1f:b7:79:47:97:ae:95:cb:c2:2a:60:8e:ab:
91:e0:55:be:31:21:ba:28:b5:44:20:54:29:c3:1d:7a:a5:69:
cb:aa:e1:50:61:54:7d:42:6d:da:ff:7a:a8:da:ea:87:35:65:
cd:2d:b5:e4:3f:03:75:24:ec:fe:3f:9c:7a:19:2c:75:70:0b:
38:6c:c2:6a:2c:79:bf:fa:8e:26:80:da:f3:10:b9:85:85:ac:
8e:35:0d:e3:46:4a:ea:54:7e:ad:ed:2d:48:61:16:2d:d0:79:
ea:0e:17:ef:77:b3:23:42:73:ac:cc:44:70:59:ba:82:a9:f3:
f1:aa:fc:4b:3b:81:f4:8e:ac:67:a3:00:d3:3a:1f:b2:76:48:
4e:19:c7:0a:1b:b3:ca:b2:1c:70:f0:94:76:94:10:1d:96:fd:
d4:63:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 18:41:55 2025 by rpki-client