Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json)
Hash identifier: aRgVn1Lsw/yUHywDpUyAXvkU/Aw/b2LPEwzGGDEiPmw=
Subject key identifier: 95:40:34:A4:47:57:DF:BE:2F:11:6E:AF:86:33:6E:16:FB:98:B7:3E
Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Certificate serial: 0199FDD9BD63075330B304E85A88B49E6DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
Manifest number: 0964
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: DTxczwIBr_nfZRTIPgBtQYWGTi8.roa (hash: +VMycRtyrx3wbrRNOQ5x4frKIMykN9VHtpPYdKmVF5w=)
2: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: VT/3ETnduVociNfxnA0CrSzO7tn1ObAdA0x3pNzv6tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bd:63:07:53:30:b3:04:e8:5a:88:b4:9e:6d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=954034a44757dfbe2f116eaf86336e16fb98b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:19:2f:0c:6f:05:f7:06:2c:33:88:e2:63:
d1:c3:d0:47:49:67:a1:4f:c0:ad:17:e4:63:ab:94:
40:a3:06:aa:43:81:5d:39:08:3f:f3:a2:1f:47:64:
75:b9:69:69:1a:f8:fa:45:d0:f1:4f:b9:8d:8c:1e:
b6:7e:a2:d9:7e:94:01:19:1d:30:e3:2c:00:9c:3e:
93:32:74:6f:99:f7:b6:b3:bc:4f:52:90:c8:39:4a:
d8:ef:e4:7b:25:d0:e4:2e:0b:32:9f:05:04:e2:1a:
d9:a2:11:e2:06:26:73:8e:aa:b6:7e:89:21:87:70:
44:08:1e:62:d9:ff:9d:15:52:c3:f4:bd:d7:ed:87:
f2:de:29:a3:6f:bb:d4:b9:3c:55:29:76:a7:65:ff:
eb:74:dc:a2:14:8c:3b:11:39:05:4b:8e:77:1a:18:
82:0b:78:d8:ba:47:5a:9e:81:23:aa:db:4d:aa:c9:
53:0b:14:21:76:60:4b:6b:15:4b:64:66:76:41:ad:
f4:3b:52:8b:d2:94:c2:f8:b6:f7:7e:3a:10:40:58:
dd:8b:e4:58:88:90:51:42:50:5b:7f:a4:c8:e6:d7:
ff:d6:78:e1:a2:bf:37:04:cf:38:45:cd:61:58:9c:
71:f8:89:73:5a:33:8a:42:c6:5e:0d:b4:c2:e6:25:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:34:A4:47:57:DF:BE:2F:11:6E:AF:86:33:6E:16:FB:98:B7:3E
X509v3 Authority Key Identifier:
keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:08:32:88:99:c2:e8:47:71:dd:5f:bb:7a:5d:af:9b:d6:48:
23:01:0a:49:81:ab:4c:e1:ce:52:7d:5a:93:08:81:c8:87:f6:
13:8e:fa:04:99:28:96:d5:a5:9b:93:6f:01:29:e2:88:9b:48:
95:22:73:c2:c7:83:97:7c:fe:cb:8a:34:3a:2c:52:62:13:5c:
51:fe:71:54:14:4e:e6:49:25:7c:a6:5a:8d:6d:f3:cc:14:e1:
5e:7c:02:57:d9:7f:dc:f5:df:a3:5f:89:86:16:18:b4:72:c9:
b3:cf:7b:04:1c:3e:7c:98:68:6d:99:1c:59:96:4a:5d:36:e1:
eb:ad:80:68:5b:fa:13:54:64:d2:05:1a:35:c3:b2:cd:8e:9e:
15:44:e2:57:94:2b:d1:8b:d8:b7:3a:cd:55:3c:56:94:33:37:
3b:a9:50:8f:2a:a8:f1:0e:47:72:af:58:92:20:c1:69:97:2a:
70:99:74:8b:57:eb:46:0e:57:72:d4:49:88:52:11:29:60:14:
01:94:33:b1:2e:31:6a:01:bf:44:32:e8:10:7e:b9:5c:cd:64:
58:27:c3:54:f3:58:33:55:93:36:bc:53:84:b3:05:ec:fa:2a:
ba:74:bc:37:df:96:f2:db:fe:7e:24:10:41:71:b1:f4:1b:4a:
27:82:54:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:50 2025 by rpki-client