Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: 0LgP8MzY+9dFfAdVpc2duasxo2ABzrrRTdJ4Ul7JT1A=
Subject key identifier: 24:51:0E:87:D3:0B:FC:68:54:2F:89:26:8A:61:76:B5:FA:28:7C:F7
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 0199FCFDB8AC76D9E991870F868023C1CC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 1248
Signing time: Sun 19 Oct 2025 15:01:50 +0000
Manifest this update: Sun 19 Oct 2025 15:01:50 +0000
Manifest next update: Mon 20 Oct 2025 15:01:50 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: GE0M4uJ+vp/IJQRy5SRjnOJmzb3DMvSRbfTPeJl8ePQ=)
2: e11Y1BzeTv89ORv01AAdP5K30II.roa (hash: N7EMAlCoADAa7ySQW7940rPsHLZnRpbv9iF4uLAj9Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b8:ac:76:d9:e9:91:87:0f:86:80:23:c1:cc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Oct 19 15:01:50 2025 GMT
Not After : Oct 20 15:01:50 2025 GMT
Subject: CN=24510e87d30bfc68542f89268a6176b5fa287cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:99:80:1d:74:8b:d7:89:af:e6:95:c4:43:
23:1d:39:69:d5:9c:f7:3f:4c:ac:ab:58:a4:06:85:
86:5c:03:0d:e5:39:4f:0d:51:c6:7b:79:a5:45:77:
51:3a:24:b3:2b:dd:21:e0:b3:ad:a6:32:40:03:9a:
c7:2b:eb:cb:a4:6c:a8:fe:7c:a6:89:12:ef:4a:9d:
44:30:2e:ea:cd:3f:4b:90:8d:c5:d5:74:66:a8:58:
54:45:d4:21:40:f2:cf:d4:37:e0:26:52:3c:00:7c:
e2:3b:6c:e2:58:ce:ad:ac:5c:d5:ec:31:95:3f:e6:
90:eb:cb:b9:b7:ce:9e:25:99:ab:bd:3d:b9:96:f5:
9e:84:0d:6d:fe:c6:5d:fd:ab:85:e8:bb:e9:98:d1:
d0:0c:e4:7a:b0:db:4b:5f:5b:ce:dd:17:0f:66:ea:
b8:cc:4e:a4:e2:b0:d2:9d:9f:21:5b:f8:6c:1b:6c:
8e:21:28:61:11:ae:63:6a:eb:5d:b5:99:5a:76:a1:
36:86:3b:a6:58:86:fb:af:0b:c7:5b:3f:31:d8:2c:
23:d9:34:9a:5e:f3:9e:e4:cd:db:1f:68:d3:91:c6:
02:04:57:f0:10:ed:9e:e0:ad:8d:dd:0b:90:4c:79:
62:53:69:8d:6c:2a:3c:14:c2:43:68:66:13:1d:9c:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:51:0E:87:D3:0B:FC:68:54:2F:89:26:8A:61:76:B5:FA:28:7C:F7
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f0:02:1b:91:c4:f9:96:5f:d0:c0:e9:a3:ea:33:9c:ed:fb:
4f:96:72:c5:40:36:d3:34:3d:4f:a6:e9:a5:00:6e:51:41:f5:
bc:2d:ae:76:44:bd:76:15:03:db:cb:17:1d:19:81:39:67:84:
c0:4c:19:d9:bc:b0:3d:ce:f1:08:a1:f3:52:c5:d1:41:8a:6c:
81:ac:84:1a:05:ea:94:2d:37:18:35:91:af:2b:c4:3a:41:c6:
8f:bc:f7:c2:5e:e2:d8:28:8e:4c:41:30:cf:32:dc:3b:de:63:
72:59:3a:ec:30:9d:5e:58:0d:a5:a8:5f:76:a0:76:b8:37:47:
a4:5b:38:7f:26:29:21:79:71:ce:ca:49:fa:66:a2:49:1b:11:
2c:f6:55:f1:ee:41:b1:ec:6c:86:21:f9:48:c7:69:9b:b0:68:
79:66:67:4b:83:36:ae:f3:1b:7b:db:d8:75:bf:0e:50:40:36:
0c:ff:c5:9f:99:f2:5e:93:27:57:9f:e9:6c:b6:14:d6:85:6c:
f2:17:cb:fe:27:c8:38:0b:f9:7d:ae:3a:bb:7c:a4:7f:27:62:
bf:06:f6:61:cc:b3:97:ce:1d:c7:e5:92:d3:02:0f:ed:21:28:
a2:17:cc:51:63:fb:33:d2:e0:ee:49:f5:ed:72:c3:1e:1b:d4:
38:ef:1a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:41 2025 by rpki-client