Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: PWKciMphq1sHJurK0pHf7HARARMiMqBGTh+IfBOngwA=
Subject key identifier: FA:B0:44:19:03:58:84:8C:8C:7E:8E:67:AA:63:74:F5:9B:10:34:8A
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 019A04B5EAA1D3FEC7C65A792F6A222788B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 1676
Signing time: Tue 21 Oct 2025 03:00:22 +0000
Manifest this update: Tue 21 Oct 2025 03:00:22 +0000
Manifest next update: Wed 22 Oct 2025 03:00:22 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: H59yxACZf+RV2RAG1bFnt9AtmQTE1QzrexbuL+kundI=)
2: vvNRTPRqU8Pnch_p0B0gqgkil_Q.roa (hash: nLSnGecWyvHzo3G0jRopUHVVK/4X1Sw9XUMyVphgWSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:b5:ea:a1:d3:fe:c7:c6:5a:79:2f:6a:22:27:88:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Oct 21 03:00:22 2025 GMT
Not After : Oct 22 03:00:22 2025 GMT
Subject: CN=fab044190358848c8c7e8e67aa6374f59b10348a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:d7:59:8d:51:84:36:31:3b:b8:06:50:21:
7d:d9:5c:65:2b:d0:79:33:1c:57:a4:d2:d8:0b:cf:
00:22:2c:39:8e:39:fa:50:4b:7e:17:ff:fb:04:e6:
de:98:46:68:5d:2a:99:96:c6:37:2f:8d:d7:4e:d0:
00:9f:64:5f:bc:60:54:eb:44:df:9a:3a:25:1e:51:
ed:30:b3:a4:16:7e:48:0c:f9:71:68:cb:01:d2:3c:
c8:bb:e5:7f:57:05:c1:7d:67:a5:06:ce:15:9c:98:
0f:af:c0:ff:e5:e5:93:d7:22:16:7f:5d:5d:a8:49:
7a:70:8f:a8:f5:f2:40:dc:8a:a4:d7:9d:a3:3e:0e:
09:30:2d:ed:37:89:df:43:50:89:5e:84:5e:13:62:
b6:34:5b:8d:ba:d4:82:09:36:31:8f:5e:3e:01:5d:
6d:09:94:21:51:aa:73:0f:1d:27:6b:d1:3d:85:b3:
41:42:28:7f:d3:60:31:a1:18:8f:67:29:7d:8f:c1:
4d:7b:a9:c3:0b:8b:11:27:f0:68:c3:0e:7b:8f:8a:
5d:32:ad:d1:3f:65:b7:96:ff:ad:af:68:3f:db:30:
b0:fc:6c:03:53:ce:d4:58:55:8b:7e:7c:6d:68:7d:
02:a9:2e:6d:07:16:83:e5:64:d2:96:75:03:67:13:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:44:19:03:58:84:8C:8C:7E:8E:67:AA:63:74:F5:9B:10:34:8A
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:05:da:24:10:9d:18:fe:f7:fa:02:99:21:3d:87:a2:8a:11:
04:1c:14:42:7a:38:87:26:53:05:73:aa:96:6f:1d:e7:9f:d0:
bd:c2:08:54:73:76:4d:39:ed:49:83:f9:eb:c8:9a:12:ce:db:
10:dd:f1:91:de:9f:c1:52:21:14:f0:f6:90:e1:df:48:57:c9:
e2:65:f2:33:92:39:58:77:3d:5d:d5:36:3e:be:0b:6a:24:e3:
14:b9:e7:3f:59:54:da:51:1d:3c:90:ec:92:d4:4c:49:a1:d8:
0a:96:76:19:a1:a7:24:cb:ea:00:d5:e0:c9:e5:84:09:93:ed:
e9:7b:ad:35:63:2e:87:81:df:47:6c:5a:42:e0:c7:4a:9d:9c:
5d:81:56:9f:0d:4c:f1:7f:68:34:a0:ee:96:1f:0c:fd:cc:18:
65:49:ac:4f:21:be:cf:4a:eb:68:cf:53:f6:59:79:b2:c3:21:
cb:cc:54:70:21:71:b5:2a:ca:3a:91:e5:4e:6b:4b:22:9b:5c:
04:1f:65:37:11:d4:25:34:51:c3:ac:5e:e7:17:90:eb:07:0c:
a1:b8:28:02:e7:57:67:55:26:8d:3a:05:45:b0:a0:32:06:43:
70:9a:77:25:14:44:32:48:cf:04:26:9a:d2:14:df:dd:77:2c:
55:a6:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:32:48 2025 by rpki-client