Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: 6z6kxEYXSsidwoE4Mk5/smyxW0sbepUC4VvwV2v9AVk=
Subject key identifier: 12:2F:70:CC:A9:7B:2D:A2:F6:83:99:46:34:34:34:A5:0C:F7:6F:EC
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 0199FB0F080EA43D38F72990EE12240E18FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 10D1
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: xMplilBsNyKwCjcHSRc+3TChPjAdgNhBYmg5ghHi/hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:08:0e:a4:3d:38:f7:29:90:ee:12:24:0e:18:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=122f70cca97b2da2f6839946343434a50cf76fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:1e:f7:d4:50:64:10:4d:a1:25:b8:7f:fc:
cb:a7:4a:0c:b4:68:94:38:84:a2:8f:5b:35:ce:0c:
1d:c0:19:69:f6:f2:d4:a1:59:c8:c7:98:29:f0:f7:
86:f3:c9:c6:1e:9d:71:72:6c:f9:a0:8e:9b:b1:3f:
4f:ce:db:b8:3c:55:9f:7a:16:94:a9:b0:f0:c3:65:
dc:d6:4e:6f:98:fe:ba:8e:56:e4:01:7a:8d:6b:11:
85:ff:90:10:dc:a6:84:a7:94:9e:74:d6:8f:d8:61:
3e:09:68:45:b3:4c:e4:50:d6:ea:d4:7f:c8:3b:6f:
de:cf:38:36:a2:41:89:3d:43:a5:ce:5f:db:35:75:
ef:54:d1:aa:7e:1d:5c:4f:82:92:c1:07:ac:7b:1b:
85:e4:29:67:b2:21:13:2a:dc:b1:09:9a:4a:9c:6c:
94:17:cc:c8:72:7b:2a:4d:b7:d5:ff:55:04:dd:78:
22:26:20:9b:b1:ca:b3:4b:3a:b9:36:e2:17:41:57:
f1:b3:22:1c:1a:09:66:40:a5:c2:04:da:06:5b:e6:
5e:ac:67:9e:75:9c:36:98:89:63:be:10:ee:78:49:
22:d8:17:de:9b:4a:4d:59:2d:ee:fb:b0:ec:29:be:
48:7a:65:85:c0:ad:ce:bc:3f:77:d8:2e:d8:d0:2a:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2F:70:CC:A9:7B:2D:A2:F6:83:99:46:34:34:34:A5:0C:F7:6F:EC
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ca:b7:56:14:34:e9:43:eb:38:40:de:d6:47:ca:ad:33:56:
3d:25:dd:60:2e:95:0a:d5:29:b8:dc:94:c2:8e:89:bb:b3:f9:
be:74:ba:7f:90:78:7c:4c:8a:ea:06:73:31:bb:85:e9:8c:6a:
ce:ca:90:0d:1d:27:be:f7:77:9a:0a:27:18:1f:13:91:15:57:
ed:15:9a:58:fd:c8:56:46:5f:59:e6:cc:71:ef:f8:a8:ff:45:
c1:59:24:1d:f6:33:83:f3:bc:15:ab:dd:53:08:a2:3c:dd:10:
42:de:75:68:0d:4f:79:f2:3a:94:a1:38:a6:f3:a8:c5:b2:70:
6b:c6:88:57:35:fc:9e:d2:9d:08:bd:19:9c:14:c1:45:c0:a2:
7f:16:a4:af:3e:59:6c:d9:fc:0b:82:cd:af:f6:5a:c8:c1:19:
fb:ca:14:e4:17:4b:8a:ea:0b:bc:10:f0:04:c1:8a:92:14:e8:
7b:a2:b7:53:81:5e:33:ce:46:2f:71:59:1d:0a:db:ba:20:ce:
c5:ab:59:67:03:89:69:07:5c:65:c0:2b:5a:df:bf:6d:20:33:
71:e1:89:0a:1d:c9:d4:ea:41:8f:24:88:0e:80:78:db:cb:14:
b7:bb:15:ab:30:42:10:a9:05:38:27:76:c7:96:15:e1:f9:c4:
4c:6f:af:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:09 2025 by rpki-client