
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: rfc7LD4ylAGXqE2vAEUE4LPD216scco3ep7VN+UNFS8=
Subject key identifier: 72:65:47:F2:1B:99:D4:66:DB:20:EA:B1:EC:F0:BD:D4:EF:DA:91:7A
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 0199FAD8291201491EE848371E919ED1D0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0B1E
Signing time: Sun 19 Oct 2025 05:01:34 +0000
Manifest this update: Sun 19 Oct 2025 05:01:34 +0000
Manifest next update: Mon 20 Oct 2025 05:01:34 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: 0ewpg7s02N7SIkowioR2rSrpHFJR+2F9wy7jpX1oWFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:29:12:01:49:1e:e8:48:37:1e:91:9e:d1:d0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Oct 19 05:01:34 2025 GMT
Not After : Oct 20 05:01:34 2025 GMT
Subject: CN=726547f21b99d466db20eab1ecf0bdd4efda917a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:65:cf:95:c4:48:ea:c8:53:0c:92:92:5a:
46:99:aa:de:4a:88:38:3c:cc:6d:f5:6d:3f:10:5e:
21:06:49:8f:06:2b:e9:1c:04:2f:40:10:43:14:65:
87:35:a7:7d:09:84:d2:41:53:24:ae:b7:6b:e9:d6:
b3:e5:df:5e:fd:d1:ab:09:03:a3:9f:1b:4b:00:03:
70:47:92:45:a5:95:2f:e9:59:f1:cf:f9:16:e5:6f:
7f:f0:b5:49:3f:15:bd:25:0e:a9:ab:87:92:4a:7b:
6a:b5:e9:df:25:fe:b0:95:0a:e1:0b:d5:29:47:2d:
41:b8:ca:6e:e9:42:5d:48:bf:2a:32:70:77:74:e9:
de:77:4d:73:e4:21:cd:26:c4:77:66:c4:89:e5:57:
d7:49:13:3d:b9:8f:bd:de:d2:b0:71:87:9d:b4:60:
f3:b5:cc:bd:15:85:e5:11:2d:eb:51:76:75:d8:c0:
fa:0a:47:e1:fa:4f:3f:b0:a2:1b:4f:19:ef:2b:f7:
5e:da:9f:1a:3b:82:1a:51:a2:8f:2a:95:03:76:19:
84:c5:e6:89:8e:c6:48:af:97:11:b0:89:09:bb:ba:
5c:2e:f0:86:28:ba:5d:a3:91:13:52:bd:57:99:a7:
11:e8:92:93:60:e1:29:8b:53:47:ba:03:6f:46:64:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:47:F2:1B:99:D4:66:DB:20:EA:B1:EC:F0:BD:D4:EF:DA:91:7A
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ce:80:c6:a0:c0:59:27:b0:80:f7:ef:87:7f:10:42:ee:6f:
3b:e1:7f:b3:ef:56:d0:9b:80:79:bd:2a:df:7e:78:85:01:86:
18:ec:10:83:77:1a:a3:61:47:fc:7d:67:05:4a:15:75:de:79:
b5:4c:36:ee:50:1c:a0:48:20:50:bb:c4:59:a6:34:e2:e1:2d:
51:14:d3:d5:a1:75:61:34:e2:95:26:8e:e1:84:66:ca:c8:7f:
37:78:6f:54:07:ab:3c:8e:a2:41:b2:4b:fd:46:25:1e:66:ff:
68:57:07:49:73:91:c0:f7:a3:55:15:fc:d1:68:ed:56:a6:82:
e7:0f:bc:1d:01:d3:82:90:b3:c7:8b:46:41:3a:3e:11:01:14:
97:35:bc:b1:fa:39:da:d0:9d:9a:88:65:8b:94:b8:3c:5a:bb:
96:2f:35:3d:84:47:22:e2:69:d8:dd:53:bc:72:15:4b:df:87:
74:26:60:bf:19:22:6b:d0:7b:56:4f:77:fb:57:58:bb:b2:55:
f1:e5:b1:51:b7:a0:51:f4:36:2a:ee:9e:e2:dc:65:88:53:7c:
e6:68:a9:7d:38:6a:e1:d5:be:a8:1d:65:2e:20:41:70:ad:57:
51:05:b1:b8:50:1a:48:d5:37:e6:49:84:73:0f:07:8f:b9:6c:
69:1b:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:33 2025 by rpki-client