Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: uPychbqFRX11SFuO6fyMgj64K6GSkCiri10n43s29GE=
Subject key identifier: E3:E2:48:63:51:50:A8:66:77:DE:B7:D7:CE:88:5B:45:7E:99:65:62
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 0199FE46E2820A4EB9976C2559B5506254A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: 020B
Signing time: Sun 19 Oct 2025 21:01:22 +0000
Manifest this update: Sun 19 Oct 2025 21:01:22 +0000
Manifest next update: Mon 20 Oct 2025 21:01:22 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: B4eMbN1FnuGulypzGWVpUMJAPgRhIXE9Y7OMGQbUt7I=)
2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e2:82:0a:4e:b9:97:6c:25:59:b5:50:62:54:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Oct 19 21:01:22 2025 GMT
Not After : Oct 20 21:01:22 2025 GMT
Subject: CN=e3e248635150a86677deb7d7ce885b457e996562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:cc:56:b8:bd:0f:01:e3:5c:8e:b9:d6:d4:
0e:f2:c9:ae:0f:e6:92:cd:1e:db:a6:cd:41:3a:6f:
13:32:38:0c:bd:b0:a6:28:d1:e6:1b:bc:55:56:ec:
d5:07:35:53:04:a1:b9:f1:52:89:73:47:58:79:bc:
7f:cd:48:6e:52:10:7a:de:61:08:4b:1e:e5:ed:fb:
b2:17:cc:ab:ff:9f:bf:20:d7:89:e9:86:c1:e0:2f:
60:bd:d7:76:10:3d:d2:f7:21:97:41:67:51:c4:a1:
92:27:bc:10:83:a4:07:12:ca:26:7a:fc:12:d2:61:
46:80:8b:b4:31:18:a7:1e:98:fd:48:b8:0c:c8:4c:
05:94:17:b1:2e:24:02:3c:ce:c2:a3:57:c6:77:2f:
a5:02:ef:46:a2:ad:1a:91:33:07:c3:15:96:0b:b3:
c8:06:98:1f:59:46:e4:98:4a:db:66:8f:8b:a1:f7:
b1:00:ea:03:dd:c3:0d:75:17:a3:be:95:88:87:d6:
82:cd:c6:06:5a:6f:dd:d0:f0:cb:9d:d4:f9:7f:42:
20:bd:29:9f:4c:ff:24:73:d3:91:06:9f:cc:61:68:
78:14:f9:22:61:be:14:ba:c4:9b:17:21:3e:ab:6f:
05:ae:39:89:78:72:6a:78:0b:78:a9:fd:26:49:a6:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:48:63:51:50:A8:66:77:DE:B7:D7:CE:88:5B:45:7E:99:65:62
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:84:fe:51:a5:23:8d:32:f2:b9:36:51:62:c7:58:5c:d5:ed:
b7:22:75:61:73:be:cf:56:1d:f8:fc:a7:d2:02:b2:0f:f6:8e:
55:24:b9:c4:db:19:21:96:f8:f7:f7:4e:af:8f:a3:af:d5:b0:
ff:1b:f8:d3:46:b2:3a:d6:57:f4:38:03:ad:f3:89:5d:ca:93:
5d:81:11:d8:84:ed:c0:4d:a2:28:d8:6d:3d:b3:c9:84:f2:e4:
e4:73:bc:04:d5:20:f1:5c:37:c5:ff:c6:bb:ad:27:f6:be:fd:
8e:75:61:7d:40:02:a0:bb:fa:05:03:8c:77:7f:21:4b:82:4d:
9d:65:6a:c1:06:8e:a1:30:4f:2c:84:8b:86:83:4f:46:8a:c4:
68:13:5e:39:41:81:55:4a:47:07:c5:01:6e:b7:f6:e2:7f:1f:
f9:37:74:e9:ea:5c:8e:cb:bb:75:78:3f:fa:d8:83:d7:b0:b2:
41:84:78:2a:17:f8:59:e8:05:c9:04:7e:25:e3:7f:da:f3:8b:
d7:26:19:ab:97:1e:03:2e:ad:e1:41:ad:a0:99:bd:62:9b:55:
28:90:1a:17:49:9b:d6:b8:72:87:a0:22:fa:26:12:c2:24:22:
81:0e:ef:c5:b8:e6:70:e6:40:7d:fb:4c:6b:93:5c:13:92:7a:
33:60:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:36 2025 by rpki-client