Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: UULr091vkpArlMs831VXXhLr9am4ScqQATCueDi1LTY=
Subject key identifier: 91:96:F2:69:EE:7B:F2:B2:D1:7C:A2:AF:7A:C5:76:C7:88:8E:39:D4
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 0199FC58E96C5744F4E99C9944B945D939E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: jf4n0MIbgZe/pRo3P3hJE8FdD5ZkQIuzaJAWVHRMXuo=)
3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e9:6c:57:44:f4:e9:9c:99:44:b9:45:d9:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=9196f269ee7bf2b2d17ca2af7ac576c7888e39d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:7d:59:6a:93:61:64:32:ad:1c:35:c6:21:
27:6a:8a:0d:37:8e:7e:8f:a2:91:a7:ae:bd:f6:e0:
fc:7b:6b:2a:58:2a:34:af:45:4d:82:83:66:91:0d:
da:d1:fd:f8:a7:19:7f:ac:9b:51:df:71:ba:50:19:
de:c7:6e:a4:5d:e5:48:83:fa:08:89:06:a9:65:1a:
16:fd:4a:6a:4d:02:72:1f:5b:75:54:5b:06:40:dc:
50:be:fe:97:d1:53:da:65:57:eb:8b:8c:69:95:62:
bd:c7:69:86:e7:d9:b5:dd:d2:a0:b6:6d:74:3f:48:
ed:3d:1a:6d:e5:db:9e:8f:9f:fe:b0:aa:0c:35:05:
fa:9a:38:52:9d:7b:24:79:2f:07:82:56:83:f3:84:
a8:53:29:b3:d7:74:be:71:a9:39:e8:dd:e3:3d:45:
0f:67:55:74:36:9d:4b:5f:ca:c1:be:45:59:eb:c3:
56:a1:ba:3d:a7:de:05:4d:4a:c6:2f:56:13:b5:c2:
0e:24:28:a9:a4:19:93:fc:2f:4c:36:1d:0d:16:c4:
29:7f:fd:5e:c1:5f:75:c4:8d:a3:10:29:fe:5a:20:
dc:eb:18:0b:81:4d:6c:9b:c9:56:88:ef:db:bd:3c:
65:93:74:58:a4:7d:82:85:7f:bd:70:0b:25:12:1e:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:96:F2:69:EE:7B:F2:B2:D1:7C:A2:AF:7A:C5:76:C7:88:8E:39:D4
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fe:9c:0a:8c:47:dd:7a:3d:b1:31:13:13:58:f0:7e:91:f3:
94:37:f0:3b:9e:a6:d6:1b:89:35:c1:90:c9:d1:7b:bb:df:61:
bd:2b:20:ab:8e:4e:dc:a7:ee:e5:12:45:86:97:6c:3a:06:3a:
ac:73:76:a6:7b:03:b9:a9:9d:41:01:85:8d:ef:1f:46:e2:93:
03:46:ce:76:db:de:03:90:39:5c:e4:15:8a:83:5f:b6:5e:98:
6a:54:06:88:e2:61:32:0d:88:0d:0b:0e:84:f5:d5:e7:32:4b:
15:8e:97:b0:f7:04:99:99:18:97:d4:e9:e7:dd:4b:13:a0:4d:
2a:9c:c3:3e:b1:dc:75:4e:03:eb:cb:71:a6:4b:3c:12:cb:75:
5b:75:f6:6e:a5:13:fa:e1:f3:cf:1b:c3:1a:ff:db:f4:da:09:
5e:e8:3e:6e:f5:f8:68:cc:d1:66:b3:79:5d:0f:e1:e4:97:83:
ef:11:62:43:68:c0:42:b0:f0:11:57:e8:78:c5:0c:49:0d:02:
62:d9:18:9f:9e:96:37:db:6b:ee:c5:70:93:41:3d:c2:74:98:
e9:85:6c:08:3a:27:d9:13:e0:2d:10:0e:d2:6c:c2:a7:f1:ec:
71:5f:cf:25:f4:4e:3d:b3:8e:fa:ea:3f:e3:5b:bd:86:50:a2:
84:30:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:51 2025 by rpki-client