Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: YTGchqq2W0c7gH7JD+wHybiFKN2rxvaLeAyyfcm6WDY=
Subject key identifier: 56:05:77:20:FE:02:F1:39:CE:D7:C8:E7:D5:04:D0:10:A3:1C:FD:9A
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019A2109277B4C7159580497F9D31DA8A52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0863
Signing time: Sun 26 Oct 2025 15:00:39 +0000
Manifest this update: Sun 26 Oct 2025 15:00:39 +0000
Manifest next update: Mon 27 Oct 2025 15:00:39 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=)
3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: UTSu5EHsR1uEk+egGIXwgORA8vbRVz6SwPOZZyZxGQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:27:7b:4c:71:59:58:04:97:f9:d3:1d:a8:a5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Oct 26 15:00:39 2025 GMT
Not After : Oct 27 15:00:39 2025 GMT
Subject: CN=56057720fe02f139ced7c8e7d504d010a31cfd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:24:4c:fe:76:85:2b:57:b4:42:94:ca:93:
92:00:ed:c8:d9:36:04:19:26:a5:c9:2e:fa:1d:e1:
a2:b2:fc:2a:36:6e:26:98:9c:db:16:98:c1:66:4b:
26:11:72:7e:de:2f:ed:f8:8d:8c:95:37:1d:47:3e:
d2:ca:39:44:5c:08:e1:87:df:97:1a:05:d8:e0:32:
94:79:a4:4c:ad:e9:84:f8:9f:18:f0:ce:4a:e3:82:
b4:3d:92:c8:02:75:41:2c:b4:69:1b:6e:7f:65:b3:
bc:46:ef:59:23:8d:2a:3d:11:35:c9:85:b4:5d:b4:
1f:81:d6:7a:cb:d9:74:a7:fb:b6:7d:1d:3b:c6:7f:
0d:de:66:a3:61:fe:3b:0f:de:52:ef:19:dd:19:1f:
a5:64:88:08:f2:3d:43:f7:a1:1d:18:e8:bf:bb:6c:
74:44:60:ae:88:ae:19:bc:06:68:33:a4:11:36:b6:
62:bb:ed:7b:f8:3c:d1:ac:d8:ab:2a:fd:78:90:85:
b2:47:76:85:84:7f:5f:a0:26:19:86:ed:d2:05:e5:
e4:d0:21:bf:53:04:0d:ac:bb:ea:5b:8c:fb:cf:c3:
4c:85:e9:5b:e3:72:2a:3a:a2:5d:45:fb:bb:ad:5a:
1f:84:dd:f7:c9:9c:40:f1:ce:26:80:d6:34:db:e7:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:77:20:FE:02:F1:39:CE:D7:C8:E7:D5:04:D0:10:A3:1C:FD:9A
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:68:42:e1:a8:0a:32:78:9d:fe:51:88:d9:72:8e:f7:41:e6:
a9:5f:3f:a0:a6:ec:09:61:5d:1b:4c:48:0d:0d:7a:bc:01:ef:
a7:93:bf:9e:f8:02:f9:9b:17:a2:43:2a:3b:40:b8:fe:6b:cd:
9d:d1:a8:9b:ec:11:a5:a8:20:8f:bb:af:8b:95:d4:f9:fc:bb:
9c:c2:fd:36:2d:2e:8d:b5:b4:64:fb:c3:34:d7:1a:8f:91:74:
73:ef:a0:51:f7:42:2d:7f:85:55:04:56:b6:c2:61:ba:a2:4f:
2d:d3:d7:6f:8f:f4:12:fc:32:67:82:af:74:e2:ae:db:b4:24:
b8:f3:f9:32:84:8e:54:47:62:24:da:c7:fb:e7:6f:24:02:52:
82:f0:2e:04:c3:69:4f:71:5a:5a:50:88:f1:6c:c7:9e:c5:b0:
5a:77:c6:b5:15:2b:bd:b3:de:8c:07:e2:94:84:df:3c:d1:65:
4f:ee:4a:b7:2f:df:eb:a4:c4:75:63:a6:98:31:fc:10:78:3f:
71:8a:30:d8:e2:cd:56:b0:13:2e:08:e7:d4:62:97:2a:f3:a7:
c4:da:4b:50:8d:92:b6:27:f2:8b:83:1d:28:5e:ad:d3:19:ba:
42:30:98:0d:c8:43:d5:64:eb:af:e7:f1:d8:72:74:14:b9:a5:
35:bb:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:22:06 2025 by rpki-client