
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: suP54qUFDaeXUtBYAjqL5Nn480i70WGqSfWPt0eWOqk=
Subject key identifier: BD:DA:6A:E4:BD:6B:84:85:40:63:84:9E:A6:A6:4C:94:A4:C1:45:16
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 0199FAD802491BB35E1E03E4C46FF41C8A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 05:01:24 +0000
Manifest this update: Sun 19 Oct 2025 05:01:24 +0000
Manifest next update: Mon 20 Oct 2025 05:01:24 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: pkaq7EAZF7tb4OMr5CJ6JAL3rj19DU1TpjFhNOHdwHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:02:49:1b:b3:5e:1e:03:e4:c4:6f:f4:1c:8a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Oct 19 05:01:24 2025 GMT
Not After : Oct 20 05:01:24 2025 GMT
Subject: CN=bdda6ae4bd6b84854063849ea6a64c94a4c14516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:3a:04:b3:0b:9f:7a:b6:2f:18:99:fa:79:
57:1c:b4:4c:52:55:38:93:ee:7d:38:85:4f:5b:e2:
7f:57:31:a9:7b:1d:1d:44:43:fa:5d:7f:e6:fd:67:
ab:76:27:cf:84:d3:f1:70:84:45:37:02:28:d4:59:
be:06:e8:1a:89:34:eb:cc:12:ab:e2:69:b1:88:ba:
f7:d9:55:28:00:b7:b6:0a:55:38:cd:c9:3a:af:2b:
b5:ef:e4:74:f0:6d:d8:c9:de:85:65:66:66:26:81:
45:51:80:6e:9f:19:05:e8:3d:a4:ea:06:80:42:3e:
67:a0:4d:d1:f8:86:bb:8a:79:05:8b:46:0f:fe:6e:
ed:eb:13:9c:23:6a:cc:e5:db:cc:8d:bd:f6:02:32:
54:0c:85:42:12:e5:25:c4:cc:57:9e:61:52:bc:90:
a3:83:04:da:9b:e9:06:bb:be:ed:ec:bf:f1:d3:f1:
4e:1a:6f:4d:a0:cd:11:bd:9f:fc:c0:72:96:d6:93:
99:d9:61:07:9b:c3:fc:fe:3d:cc:d5:7b:15:88:0c:
81:c4:a3:99:36:da:e3:8e:31:60:07:6a:b3:7d:bc:
c9:48:03:b1:0c:01:54:55:c0:f2:69:cf:04:28:3d:
9b:e4:a0:0e:3d:7a:35:88:ca:d6:50:14:a4:78:c9:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:6A:E4:BD:6B:84:85:40:63:84:9E:A6:A6:4C:94:A4:C1:45:16
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:19:be:2c:6d:df:f8:c0:cc:8f:24:a3:7c:34:13:d2:96:9a:
5e:a6:14:87:1b:19:81:83:94:16:20:72:62:23:a9:a1:24:89:
57:ed:66:e2:78:94:0b:77:52:72:87:78:35:87:57:bc:b6:b7:
30:e5:f5:98:05:40:a6:87:0b:a7:08:9b:73:82:ab:74:e9:c2:
1b:3e:b8:ee:83:e8:8c:ab:b8:d3:c3:48:e9:8c:44:4d:e5:66:
ce:80:c4:9a:9b:d8:bf:68:3d:2f:df:bd:83:d2:e0:7a:f9:53:
f9:87:e7:0a:93:0e:91:82:d1:6e:0d:5f:9b:e1:73:81:5f:f4:
05:d7:53:d8:d4:2c:6e:12:84:c4:29:b1:60:cd:47:68:c5:08:
91:ef:d8:e4:b8:02:53:92:a4:95:40:35:a7:59:b2:6c:1d:b6:
da:0c:34:36:f7:a9:60:57:ca:3c:0d:54:bf:d2:27:7d:42:e3:
01:dc:8d:fb:d4:aa:0e:c4:c0:13:83:e7:18:fb:6d:87:1d:c9:
b0:ac:c0:fb:38:70:7f:b1:18:9c:c9:04:35:bf:01:36:e6:a8:
fd:75:62:35:72:70:ec:e6:41:27:85:45:a5:3f:bb:80:d7:63:
78:ee:1c:77:53:16:98:43:f3:9a:d6:0b:e9:b5:85:db:de:59:
19:f9:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:13 2025 by rpki-client