
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
File: P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json)
Hash identifier: Qa8iKx6vKsFUOHFHQXigogrkT4mzcaJAW0V1pBb/rVk=
Subject key identifier: 01:6F:93:CB:BD:CE:0A:B8:F0:3A:90:89:40:B7:25:B4:CC:43:72:14
Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Certificate issuer: /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Certificate serial: 0199FEB481077F7881FF51E8C7E2BBA7051A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
Manifest number: 0219
Signing time: Sun 19 Oct 2025 23:01:06 +0000
Manifest this update: Sun 19 Oct 2025 23:01:06 +0000
Manifest next update: Mon 20 Oct 2025 23:01:06 +0000
Files and hashes: 1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: KgR8UySO0IlsMCcoHiTQYFcWiNuuI3abei+YP5JynfI=)
2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:81:07:7f:78:81:ff:51:e8:c7:e2:bb:a7:05:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Validity
Not Before: Oct 19 23:01:06 2025 GMT
Not After : Oct 20 23:01:06 2025 GMT
Subject: CN=016f93cbbdce0ab8f03a908940b725b4cc437214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:7f:3f:c4:75:99:db:d6:d2:fc:f2:d0:7b:
fb:ff:7e:bc:c2:ee:08:3a:40:12:16:16:97:98:bb:
9f:c5:c1:c7:5b:61:be:8c:a5:3d:df:03:1b:2a:80:
a5:a6:32:3b:28:ec:a9:47:ef:63:fd:69:49:e2:99:
75:f9:bd:bc:ef:c3:b4:28:bd:3f:db:c1:95:93:d2:
40:59:40:67:c4:f4:b1:3f:ea:64:2b:90:c0:33:09:
aa:34:d3:15:72:d0:6e:d3:95:a7:e5:3a:ec:96:ca:
f2:bd:60:9a:f0:c9:00:b4:2b:20:4b:41:53:36:50:
32:b5:c9:13:a0:1e:d5:b7:6b:8b:a2:d9:79:26:74:
cc:1a:d5:8a:e5:aa:36:af:a9:b9:ff:c2:c6:78:d8:
a7:c6:16:6b:00:97:e6:e1:d5:a6:86:24:5d:f0:2a:
40:ba:08:85:5b:f0:c8:8d:ce:80:59:0e:bf:e1:4b:
ce:8a:6b:ad:58:60:84:53:8c:d5:2d:18:c4:9d:d2:
fc:7a:0b:31:5c:c9:7b:5d:2d:2c:ec:5e:55:19:04:
6d:12:23:b8:cd:b3:0a:e5:6d:c3:8f:7f:33:39:fa:
1d:67:30:6e:e7:30:8c:39:9c:0d:16:aa:c5:7b:18:
d1:05:e9:d7:4d:10:55:c1:c2:61:d0:04:0b:15:49:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6F:93:CB:BD:CE:0A:B8:F0:3A:90:89:40:B7:25:B4:CC:43:72:14
X509v3 Authority Key Identifier:
keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:93:20:fe:bd:38:48:a8:e8:ab:27:1c:56:9f:7b:c4:aa:5b:
87:13:42:82:f2:6a:ff:ce:68:ed:fd:e5:d4:99:cf:1a:59:20:
fc:cc:6c:e6:f0:7a:49:eb:4a:02:99:4e:4b:d6:cf:71:48:01:
59:1d:f7:56:21:7c:c9:63:de:b6:6c:05:00:7b:f4:ce:4f:5d:
3b:67:6d:97:77:f1:48:ed:72:fc:b9:98:71:10:60:82:a3:c6:
20:8c:17:ce:aa:5c:bc:84:76:c6:6b:ca:6c:95:d0:17:12:30:
56:cf:90:7d:ce:3d:3c:76:4b:33:5b:cb:01:41:5d:dc:c9:a8:
eb:0d:01:03:31:fe:93:45:70:06:f5:f2:d3:5c:78:24:94:59:
f0:5f:67:b8:95:fe:6d:c2:c3:49:47:18:01:1c:62:89:4a:7d:
94:b9:67:c9:05:63:cf:35:a9:07:7f:88:a1:3a:ba:65:08:a7:
19:42:c3:c9:05:af:7f:3d:d4:46:a7:1f:b8:1c:50:71:f4:15:
61:6c:3c:52:df:f4:1c:9c:bf:4c:7b:aa:c6:a7:f9:1c:dd:d4:
e3:87:7c:ad:d0:59:80:37:c2:79:84:86:f2:6f:2e:88:c1:75:
10:f8:3c:f5:6e:fe:68:b7:43:60:64:99:fa:2d:94:a2:4d:7b:
28:d2:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:47 2025 by rpki-client