Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
File: R1Ng86GS3KodPRlNtkwCVMN0vUY.mft (raw, json)
Hash identifier: ZZrPcBuCALYYe55saZsg/haz+WAZcY9C6TsAG9iuIwc=
Subject key identifier: E0:F5:3D:47:F2:F5:10:79:C4:8F:77:80:D8:85:73:53:E0:8E:36:7B
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 0199FDA1D3AE9A1939BEDD4D4BC51560CCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
Manifest number: B3
Signing time: Sun 19 Oct 2025 18:01:05 +0000
Manifest this update: Sun 19 Oct 2025 18:01:05 +0000
Manifest next update: Mon 20 Oct 2025 18:01:05 +0000
Files and hashes: 1: LkJWDbjbslz0nNAtvCL992PnNAo.roa (hash: RL1MW6ZhRKLWTzPdhCcY/dLPWGU6pPW/YpPEx5flQPg=)
2: R1Ng86GS3KodPRlNtkwCVMN0vUY.crl (hash: thrTDr6EC5dpJLnn6FB7GY5ovjGe5b5ZZPB0iypJ4h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:d3:ae:9a:19:39:be:dd:4d:4b:c5:15:60:cc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Oct 19 18:01:05 2025 GMT
Not After : Oct 20 18:01:05 2025 GMT
Subject: CN=e0f53d47f2f51079c48f7780d8857353e08e367b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:46:eb:f1:29:09:08:88:5a:23:22:4f:f9:
89:d2:14:60:20:86:d9:9e:a2:76:18:e9:78:5b:7b:
58:98:7a:de:87:0c:d2:64:32:31:52:74:f8:26:01:
88:8b:78:90:0e:3b:97:a5:c6:8c:cb:7e:30:32:f7:
27:01:28:f0:8f:fd:fa:a6:97:3d:0c:5d:8b:b1:a2:
15:ad:0a:c7:45:e5:74:ac:e1:19:f5:50:b3:84:d1:
7b:85:37:6d:61:89:a6:96:ae:4d:16:00:14:20:b5:
18:d7:0f:f4:9f:33:48:d9:2b:f0:1f:74:bb:d9:6d:
0e:60:c0:37:e9:8e:be:48:56:25:98:61:bd:d4:29:
06:80:a6:dc:5f:7c:1b:32:f7:d3:49:25:63:45:d4:
50:93:d5:86:28:87:62:8a:9f:4b:ef:8f:a9:3b:30:
4f:02:a1:17:a7:0c:b9:fe:db:7c:8b:26:b9:88:57:
83:30:6d:17:65:e7:24:d4:47:a4:87:4d:96:c6:e7:
20:87:61:e2:5f:7e:32:51:0d:ff:ce:f5:9d:f7:19:
5c:fe:b0:2a:a1:c2:dd:dc:9a:75:3f:88:88:e9:1e:
d4:86:5a:5b:66:1c:1f:b8:86:e8:f4:92:38:10:41:
27:01:ab:4c:5d:48:b6:ab:41:e1:f2:4f:33:92:97:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F5:3D:47:F2:F5:10:79:C4:8F:77:80:D8:85:73:53:E0:8E:36:7B
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2f:a8:e9:4d:e9:f5:ec:a9:7c:c9:15:49:4f:de:46:e4:02:
c5:9a:59:e3:77:c9:cd:eb:ac:fb:4a:cb:2a:97:3e:bc:f4:17:
70:86:c3:48:17:15:8e:0c:54:9f:ad:39:1e:ba:74:7c:15:ca:
8a:18:71:69:e2:2f:07:e0:63:da:1e:d1:5a:95:15:5f:8c:ea:
a7:29:9f:b3:e3:ef:7f:11:4d:9d:30:2a:03:e4:91:03:fa:86:
cc:47:18:35:8d:25:08:d8:77:fb:6a:be:3c:ac:15:1d:8b:9d:
53:76:ac:b4:41:9b:19:87:63:58:55:54:17:75:1e:20:58:e0:
a3:99:b5:26:e3:0b:b0:e4:2e:73:7a:4e:d0:65:d7:ea:2e:74:
f5:b1:83:9a:bb:bd:3e:a9:ee:6a:c7:1b:f3:d2:6a:9a:6d:02:
90:ab:13:9a:24:22:49:a6:09:b0:27:bf:01:33:c5:f8:b5:ee:
6d:96:82:82:13:d3:a7:7a:7a:47:50:46:fa:1e:52:16:e9:41:
72:01:9e:00:d1:ed:47:bc:c1:5a:4d:04:bd:86:0a:68:d8:dd:
1a:35:5b:66:f0:54:fe:37:d4:a3:e8:78:b9:f4:df:0b:ad:44:
7e:50:07:67:28:47:0c:d6:e1:81:35:ee:ea:fd:f5:c1:d6:5b:
c0:7e:03:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:28 2025 by rpki-client