Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: t9znMKeUBzE+YuAMl18dg5fOI5Qypi6SWju1fGqExoY=
Subject key identifier: 04:25:2A:29:10:40:68:D8:1E:6A:9C:D2:14:29:69:2B:F2:4D:78:AE
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 0199FC583980237B5B5ACE829886C3A3BD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 065C
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: DZ3MwVW27YJjTXL81Us54BEw8Ws.roa (hash: YPwEXqNgTojazI3UWL2Hg790NFdOZ5Zp1qDnzkWSOdQ=)
2: O8RYzdOGcber5Lyd0fkaQNOBiZM.roa (hash: /upGWqeDSmoTCs0TmrDJ+JgYywdWmCG+PwMCdlRHNTc=)
3: ZuaAuBr3mjYLZzt7nOoi3jtwzIY.roa (hash: WFz46VHFEUHY6d8iPoLy2pWWOpD7nX+IiME/4TJnl4M=)
4: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: DfzGkG84308QClOlWbGUyYfpXB4tEh1nPKK8TvkbbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:39:80:23:7b:5b:5a:ce:82:98:86:c3:a3:bd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=04252a29104068d81e6a9cd21429692bf24d78ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:57:80:ea:fc:0f:cc:df:c9:a5:32:8c:65:
e2:2c:0b:1d:ec:f3:f2:22:8c:48:f1:02:0e:f6:01:
24:e5:73:59:c4:77:64:33:06:a3:ac:e1:6b:c6:72:
e6:45:11:69:6f:fa:1e:0a:5e:8f:9c:b8:dc:92:00:
fb:81:ed:9e:77:ab:75:a3:ac:3e:c1:03:9f:41:e9:
12:d3:ed:af:c1:ac:c8:db:94:29:42:f8:d8:8d:d3:
8e:6d:be:9d:78:b8:ca:d0:d7:30:44:ec:c0:32:02:
5a:c5:0c:f4:b3:fc:ec:92:41:03:cc:fd:32:5a:7b:
43:d6:74:d5:0d:a9:44:6c:47:a9:2b:36:28:a9:0e:
c2:61:b4:4a:9f:09:cc:14:f2:55:49:28:63:fc:ad:
48:0f:b4:85:75:0e:c1:95:8d:5d:49:50:57:2f:4b:
cc:19:80:27:fd:26:5f:45:6f:29:09:36:5e:66:0f:
c7:46:29:18:3e:d1:c2:c7:4d:bf:67:3b:04:64:b0:
52:ba:16:87:04:1f:38:a9:3a:68:3c:22:78:15:19:
85:6b:8e:b0:93:f1:e5:f3:0d:5a:63:38:fb:1e:ed:
b9:ab:5e:de:32:f7:79:70:2f:1f:4f:3a:dd:46:8c:
02:93:e1:f9:38:c9:4d:95:54:ea:89:df:99:38:b4:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:2A:29:10:40:68:D8:1E:6A:9C:D2:14:29:69:2B:F2:4D:78:AE
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fa:2d:75:71:f7:1a:a6:60:cf:30:e2:55:3e:e1:35:ca:50:
af:20:78:4e:54:52:83:a9:c5:56:f5:7e:34:33:bc:e9:40:87:
18:01:92:dc:84:ee:1f:b8:52:ea:eb:a1:9e:87:f7:2b:f7:b1:
8d:d7:95:8c:ed:0e:1d:aa:f0:a6:eb:f7:fe:61:6d:b4:c9:75:
75:91:45:85:28:e2:4f:dd:9a:44:88:75:f6:2e:46:d3:3d:69:
bf:eb:ce:a8:e0:c8:6a:61:94:01:16:5b:7b:e2:63:d3:4b:f0:
c0:cf:1b:7e:55:0b:04:86:f3:14:51:2c:5c:9b:56:26:e1:2a:
0e:96:19:01:3e:58:10:e5:71:94:9e:06:54:bd:4e:50:ab:ba:
bc:f5:66:45:6f:c3:cb:7e:8e:b7:1a:1b:70:2c:53:87:fe:6e:
20:67:39:eb:38:7c:21:b1:87:c4:fa:57:3e:7a:8e:ba:20:08:
13:c9:5a:be:de:86:4e:41:eb:32:f7:3e:5a:b1:0f:91:0f:8b:
a5:26:c6:19:9a:72:80:02:1e:fd:87:60:2d:57:bc:c1:cf:a5:
cd:8c:7c:be:36:9c:85:b9:eb:e6:d2:ac:50:43:3f:f0:74:20:
8d:8a:e0:e1:bb:73:e7:19:c9:49:32:e8:51:b1:c0:eb:22:37:
dc:9b:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:48 2025 by rpki-client