Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
File: v8pT8KWH822Jqcq4K_WlA2xhQKI.mft (raw, json)
Hash identifier: vG93NI116adq2/WRNATGhI9Ca2wf4uRwVH63+MLUSiM=
Subject key identifier: AD:6E:38:40:2D:BA:30:2B:16:0B:15:2C:92:6D:CE:EE:B5:66:EC:74
Authority key identifier: BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
Certificate issuer: /CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Certificate serial: 019A71499389857F3AD3DD2602EE59774F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:00:38 +0000
Manifest this update: Tue 11 Nov 2025 05:00:38 +0000
Manifest next update: Wed 12 Nov 2025 05:00:38 +0000
Files and hashes: 1: QDWmx_ik_mzSmaKaFjMrEYPMK6E.roa (hash: JZeZqTP/kJM8f2vw7vOLQj4DQbxRzuI8jkZc142sebw=)
2: v8pT8KWH822Jqcq4K_WlA2xhQKI.crl (hash: qRKimvBcjt1iSkXWld9RrzRG2Z9zc6Lf42BavkF7k8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:93:89:85:7f:3a:d3:dd:26:02:ee:59:77:4f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca53f0a587f36d89a9cab82bf5a5036c6140a2
Validity
Not Before: Nov 11 05:00:38 2025 GMT
Not After : Nov 12 05:00:38 2025 GMT
Subject: CN=ad6e38402dba302b160b152c926dceeeb566ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:4a:3f:25:f8:d1:c3:d5:cc:e5:51:7c:ec:
9c:e5:25:67:a3:eb:d9:ca:0c:fc:a2:3f:d9:0e:2d:
59:82:63:61:b8:3d:49:90:77:48:af:07:18:ff:0c:
f9:14:50:ab:aa:0a:34:07:6b:cd:6f:ce:4f:a3:a2:
a0:fc:a1:2a:82:ed:6f:47:f3:92:07:5b:40:bb:eb:
53:9b:7c:06:62:ce:33:fa:76:ed:af:01:b6:ba:5f:
db:30:e0:e7:1b:fe:ae:09:22:3d:8a:cc:53:b7:41:
f5:73:7e:ed:a8:74:17:34:ac:22:e4:25:ed:b3:62:
59:43:1e:f3:ae:96:27:a2:f4:cd:85:1c:00:93:66:
42:04:ec:08:16:8b:2b:77:d0:96:42:d5:39:bd:7d:
d5:6c:64:ee:94:55:92:7a:09:3b:25:b9:ce:59:92:
e8:38:1a:d6:9a:28:02:5a:c3:07:e4:9e:86:42:44:
89:a4:4c:7c:d3:71:e8:1d:f6:48:19:8b:c1:ce:49:
4d:c0:8c:f4:ee:8f:70:9b:2c:ae:9f:3a:5e:07:be:
36:84:1c:95:02:63:8d:01:40:26:32:a8:a2:0b:35:
92:0b:00:de:3c:57:02:e3:f9:ed:d9:f6:74:3d:02:
ec:39:3e:0d:3d:f7:31:fb:50:18:37:cd:7c:79:fc:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6E:38:40:2D:BA:30:2B:16:0B:15:2C:92:6D:CE:EE:B5:66:EC:74
X509v3 Authority Key Identifier:
keyid:BF:CA:53:F0:A5:87:F3:6D:89:A9:CA:B8:2B:F5:A5:03:6C:61:40:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8pT8KWH822Jqcq4K_WlA2xhQKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/fc12ec-3eac-4455-91c9-f99c4e5c2953/1/v8pT8KWH822Jqcq4K_WlA2xhQKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e8:3a:f7:92:6e:7b:df:19:f5:43:6f:81:25:e8:be:80:a5:
ef:25:4b:6c:45:ac:dc:08:d2:52:5e:ca:20:04:b3:ed:a5:4f:
ff:6d:2b:f0:eb:ef:2d:58:eb:18:2e:15:73:13:f4:39:e4:f9:
5e:d1:af:15:52:43:c4:99:99:6c:4d:dc:05:6d:9f:66:ee:0b:
89:cc:bd:41:c2:b6:14:b8:12:4c:ff:43:46:01:85:9c:f3:74:
f9:0d:95:92:8b:69:df:e4:af:c3:0a:8c:d7:bd:86:76:15:85:
4a:b0:06:ba:d1:7f:97:ca:e8:96:dd:4a:d3:81:d1:fa:59:be:
ca:a1:74:ab:30:40:ef:68:37:79:b2:53:01:45:f0:8f:18:06:
e9:28:0b:99:c8:42:37:ce:ba:6f:bf:cf:61:15:8a:c1:b3:1e:
60:44:9b:54:cd:77:f1:bc:c7:44:1f:93:7c:01:d9:f1:0f:ec:
dd:8d:33:e8:8f:38:db:5f:4c:1b:b4:e7:3b:75:92:1a:da:5e:
bf:ff:b9:b6:65:88:2c:29:fa:b1:85:8f:04:9a:fe:e6:b7:74:
a8:2c:80:6e:ca:35:bd:77:08:9c:74:75:5f:a5:73:75:27:d0:
02:a7:4c:a0:ef:c8:26:02:12:0a:a1:f8:78:dc:ff:3b:e3:09:
18:f0:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:04 2025 by rpki-client