Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: +5f7h7fEXwO36jW33f5dQfIJ1QLcBTD+/ghhQhr2hxg=
Subject key identifier: A3:E8:18:0B:E6:AC:B2:04:00:70:C2:4A:5D:88:50:41:4F:0C:7B:41
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 0199FDD980B0EFEC8316AC601EDD4ECF833A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 0528
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: T8ZJ3wumwdaqGtvGFgGy+KuC26Ee0EoDmcbtyg42aIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:80:b0:ef:ec:83:16:ac:60:1e:dd:4e:cf:83:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=a3e8180be6acb2040070c24a5d8850414f0c7b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:db:0d:5e:0d:1c:c6:35:ec:f8:b6:4c:0b:
8f:75:ef:e0:57:24:6b:8b:59:93:c9:27:d8:b9:00:
2c:fd:ba:f4:db:21:da:a3:de:e1:5d:6a:f1:48:e2:
17:6e:c1:d5:d2:8d:62:07:b5:70:de:a1:e8:0a:93:
db:4b:ec:e4:76:8a:98:da:83:61:79:bc:2f:33:eb:
8e:af:0c:61:ad:c4:6a:c4:1c:5a:ce:4f:8d:39:2f:
54:f1:be:27:bd:99:7f:7b:a0:22:06:78:69:ba:82:
1b:2a:64:59:25:e0:2d:1c:b3:9b:d3:70:88:3b:97:
41:5d:ca:04:50:ea:25:ac:b9:ed:0a:c9:ed:93:b9:
f3:88:e3:cd:76:34:3c:ef:d2:e0:7f:34:ba:5f:23:
85:3b:76:e2:15:8b:ce:52:f4:13:53:a2:9b:a8:40:
53:d3:8f:8d:3a:ba:31:1e:73:59:6b:64:5b:b0:5e:
64:a1:8e:be:f6:f6:1b:a1:63:43:c6:24:74:39:2e:
9d:cd:9e:9c:b6:7b:99:03:8a:b1:8e:98:51:da:98:
6a:d8:91:b9:3b:18:b2:9d:fb:9f:65:7e:eb:5f:71:
ac:70:8a:69:bd:4c:39:8c:95:16:f7:0e:5b:1e:d8:
4c:28:13:fb:62:12:49:35:d1:2d:fa:d8:98:5b:a4:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:18:0B:E6:AC:B2:04:00:70:C2:4A:5D:88:50:41:4F:0C:7B:41
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b1:f9:58:b0:f0:6a:8f:c1:14:61:59:fd:9b:5b:58:be:d6:
5f:84:95:b7:6f:3f:c7:f4:19:a1:b9:8b:88:da:20:1b:a5:e3:
6e:44:d9:81:22:f5:92:f9:7d:d0:21:57:c0:20:2a:76:7a:ab:
b8:69:46:cb:48:df:b4:23:0c:c2:69:54:c0:04:ba:a1:f8:e7:
2f:50:b7:fc:f5:dd:e4:03:ba:4e:01:07:ba:d7:30:8f:51:85:
79:cc:63:a2:a1:55:6a:64:d5:60:73:9c:37:46:24:89:a1:33:
39:92:e7:3f:6f:d4:d2:4b:db:19:33:27:0e:24:22:75:63:97:
1b:c0:65:a2:21:fc:b7:35:d9:2a:e7:30:25:d4:6b:88:b8:94:
60:7b:94:cb:88:f2:3e:37:26:f7:43:c1:63:4d:f8:8b:b9:d4:
21:d6:61:c8:4b:e6:30:73:4a:42:47:4d:0c:ff:b3:54:d5:21:
97:3d:4f:b3:b2:b3:33:39:d6:93:87:b3:d8:78:c4:b6:05:2b:
8b:9c:b9:f5:c1:fa:95:92:d1:53:41:26:ca:6e:2e:26:b4:70:
aa:b9:b2:90:ca:fa:1a:02:55:13:07:9e:ca:01:6c:c6:6d:c5:
ba:98:4a:62:58:fa:42:6c:49:56:fa:a3:0b:93:88:78:f7:6a:
86:bf:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:13 2025 by rpki-client