Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: X+ixJ4F13nXO8AJYcpQ/Yn9SGBQz9DkIpfdqx0Ep4J0=
Subject key identifier: 46:11:86:32:51:74:52:92:ED:D5:BA:DA:CB:08:46:8F:A4:F3:93:06
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 0199FE7E245778AAB9630666F7B2F99E2F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 1395
Signing time: Sun 19 Oct 2025 22:01:43 +0000
Manifest this update: Sun 19 Oct 2025 22:01:43 +0000
Manifest next update: Mon 20 Oct 2025 22:01:43 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: LP3AvqHCarssRI3z8TW6Qx7ywCuJpDlvuabjJnSjPRw=)
2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:24:57:78:aa:b9:63:06:66:f7:b2:f9:9e:2f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Oct 19 22:01:43 2025 GMT
Not After : Oct 20 22:01:43 2025 GMT
Subject: CN=4611863251745292edd5badacb08468fa4f39306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:35:37:be:c8:8e:86:af:c7:70:ac:aa:f6:
62:24:cc:23:09:f0:ff:02:a5:ea:1e:4b:99:87:1a:
0e:14:bd:89:c9:7c:03:ab:4d:6c:85:08:b1:c9:a2:
41:fb:1c:8d:08:71:07:63:15:81:82:95:2b:b5:93:
54:82:28:aa:66:ce:78:ea:46:ea:5d:28:e4:f1:d5:
6d:ad:c8:f9:d5:7a:bc:33:34:91:9e:42:d5:eb:3d:
46:e5:56:88:eb:4e:7a:bc:37:09:1b:bb:d2:24:c1:
bc:2c:04:d0:3d:55:29:3f:c2:94:14:6b:8e:93:08:
6c:f3:ac:52:58:18:69:20:dc:f4:27:d0:fb:69:e6:
4b:0d:a2:56:c7:c3:49:4c:ff:b2:89:73:d0:dd:2b:
35:0c:0d:51:76:dd:aa:85:3f:4b:c0:26:52:bc:41:
1d:74:d6:69:55:3c:f8:99:83:4e:dd:22:2d:df:db:
62:ef:d8:76:2f:23:fd:c7:e3:07:b8:83:b1:37:b7:
0e:cd:39:23:d2:f7:c4:c0:e2:34:3b:9f:a1:14:8c:
d3:33:74:0d:9f:b5:7c:37:b9:dd:79:b1:42:d2:79:
01:5f:bc:95:26:90:f0:31:42:84:48:4d:4e:17:65:
96:f4:26:c6:8a:d4:09:5a:1c:42:63:a2:19:4a:4a:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:86:32:51:74:52:92:ED:D5:BA:DA:CB:08:46:8F:A4:F3:93:06
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d2:35:ff:c5:88:24:e8:4a:20:ff:5f:d9:0d:6d:49:13:4a:
70:d4:1a:5b:47:03:1d:50:3c:04:22:61:ab:8d:29:fc:12:8b:
4a:27:5b:9f:e6:17:49:91:53:eb:43:24:f4:09:c9:90:05:5b:
d2:1f:cd:4a:7a:5a:1b:44:8d:a7:1e:f5:9e:f4:54:6a:fd:a7:
7a:63:04:1c:b9:0d:29:0c:11:0b:ad:6b:ad:e2:61:0a:78:09:
c9:b8:5a:60:c9:09:7a:55:f1:ad:0b:28:85:bc:1c:61:85:4c:
8c:a6:ad:09:34:ab:3b:c4:1d:65:71:64:c6:0a:0f:88:40:ed:
af:b0:fa:75:d5:5c:1f:fc:52:e1:4b:c8:12:ea:10:37:75:84:
6c:f8:df:73:fa:e4:4f:d2:de:24:3f:e5:76:f0:2c:b1:79:b5:
ac:db:fd:72:55:53:67:26:69:6b:23:d2:92:dd:60:88:f4:9a:
1c:5f:bd:fc:eb:12:0f:70:bd:00:10:2b:33:3c:de:89:fb:2a:
5b:b2:af:9c:c4:ac:cc:f8:e8:46:62:f1:93:61:d7:95:92:64:
9a:00:f8:d3:a7:70:b5:be:33:f5:48:9e:36:8b:c1:86:dc:6f:
b4:e8:72:bd:8c:d4:40:5a:5d:c2:ea:5e:d6:d4:06:ca:c3:ac:
5e:9a:6b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:14:28 2025 by rpki-client