Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File: v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier: ucjz1no5ESoWb6A/6bsr4s4lbgO6UFVZr8/Qi8SNITs=
Subject key identifier: 3F:55:F3:DC:F3:F8:32:AC:EC:9A:3A:63:8E:40:7B:7F:DF:54:09:B3
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 019A7112E59EE85BACFF74431060B58BEA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 04:00:54 +0000
Manifest this update: Tue 11 Nov 2025 04:00:54 +0000
Manifest next update: Wed 12 Nov 2025 04:00:54 +0000
Files and hashes: 1: GhyJElhSMkb21ni84p3HgeSkxTQ.roa (hash: KwUCFvaWxHo9sPEoV9+enTpSMnw5D6fXp7AzPwgg1sY=)
2: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: +tqymFhRdKaJ+O/og2ktMORADPkQoVSotYLpR6vv8Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e5:9e:e8:5b:ac:ff:74:43:10:60:b5:8b:ea:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Nov 11 04:00:54 2025 GMT
Not After : Nov 12 04:00:54 2025 GMT
Subject: CN=3f55f3dcf3f832acec9a3a638e407b7fdf5409b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:fd:16:ac:49:3a:d5:4a:58:cd:d4:a4:02:
a1:76:53:af:e3:0e:29:52:e6:26:d8:9d:82:b0:f8:
5d:f8:48:f6:f9:29:5c:0f:e1:f4:02:00:e9:d1:1e:
df:ba:d8:ce:1f:ef:fd:bc:79:63:3f:91:31:9c:f3:
d0:29:23:e7:75:cb:db:71:ad:12:fd:da:ba:0a:17:
b2:2b:85:7d:f5:b9:09:72:e1:36:89:e7:53:ce:36:
6d:6c:be:87:7b:79:1f:0e:c7:e0:41:ca:09:08:1d:
4a:13:59:31:60:9e:69:c3:87:39:56:49:1a:88:49:
cd:68:22:8b:3a:0b:f1:68:0d:56:f0:bd:d0:cc:67:
87:b9:01:c2:9f:a0:14:f7:e1:1e:bb:b9:dd:d1:44:
fc:6d:23:d3:ff:65:7f:74:08:d5:40:ac:b7:61:90:
19:db:6c:f9:3d:90:86:af:e7:17:0d:8c:61:e5:66:
46:9b:f7:41:69:d7:76:fd:db:d2:a1:4a:1e:14:f1:
77:d6:0b:b6:be:48:70:b2:25:36:7c:e1:2a:90:6e:
8c:77:d9:a1:af:46:1f:79:e0:ae:84:4b:63:46:9f:
f9:ae:14:fe:5f:06:cc:27:1b:be:7e:c6:3b:b2:a2:
77:09:c7:d1:6c:34:4e:62:33:89:13:f3:e1:47:a8:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:F3:DC:F3:F8:32:AC:EC:9A:3A:63:8E:40:7B:7F:DF:54:09:B3
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:4b:44:e5:f8:02:e9:9a:a7:bc:0e:78:b0:22:77:ce:17:
8a:e4:1a:ee:11:aa:c6:55:b9:f4:4c:bd:79:d4:c9:fb:3e:7c:
57:31:95:bf:05:88:c6:8b:4e:90:92:ca:88:83:08:e4:bd:ca:
48:49:c5:3e:73:b3:dd:2b:e9:d6:e3:c5:a0:28:b4:d6:be:1b:
14:76:6f:d4:d1:25:ee:24:3e:95:5b:90:91:96:b2:ee:d2:1d:
d3:9b:71:ec:6f:f7:42:68:af:3b:ed:ef:53:a3:75:f6:fb:19:
99:1c:4e:34:d8:17:fb:a0:88:a8:a4:1f:17:64:18:03:b0:a1:
41:5a:8b:63:ca:dd:5e:6e:05:62:80:53:de:a5:c7:a0:44:a4:
e8:2c:3b:7f:c5:99:a3:ec:02:d5:37:55:18:21:c9:2b:e5:11:
8a:ae:38:10:4d:a5:6b:47:cf:62:69:16:38:eb:b4:4d:af:d3:
c3:1d:e7:0c:3a:f0:53:92:5e:79:54:cf:88:99:2d:77:f1:e4:
ee:83:76:3e:ed:d6:0f:cf:33:0f:b2:60:aa:56:53:90:57:ab:
ef:70:43:da:cc:f8:77:b5:c4:fc:8b:44:1d:66:66:84:6e:37:
1d:a7:22:06:5b:df:c0:f8:31:9a:83:37:5a:50:ad:d2:e8:de:
c5:1b:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:47 2025 by rpki-client