Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File: p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier: +gdGaTuEn8vz/0Xp1mZpeCQrnJNfYjvlS704kwhFs4g=
Subject key identifier: 3A:8D:DA:2C:BE:4D:65:6A:5C:D9:A4:B8:C6:B0:65:E5:F2:F5:FF:FA
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer: /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial: 0199FDD91401DFAFF4B16ADE8077FFEE6822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number: 04FA
Signing time: Sun 19 Oct 2025 19:01:25 +0000
Manifest this update: Sun 19 Oct 2025 19:01:25 +0000
Manifest next update: Mon 20 Oct 2025 19:01:25 +0000
Files and hashes: 1: IZ6vDZjMHwfmvRBOdfcy5i9E3QM.roa (hash: uS025afpY/Jz9tEZKMABnGMw3AujzF5/XTw1sc/dgNo=)
2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: QVFqZXJFPdSwlH5BH968X948Y4p+hNtBv/r5W4ozWVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:14:01:df:af:f4:b1:6a:de:80:77:ff:ee:68:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Validity
Not Before: Oct 19 19:01:25 2025 GMT
Not After : Oct 20 19:01:25 2025 GMT
Subject: CN=3a8dda2cbe4d656a5cd9a4b8c6b065e5f2f5fffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:f8:0e:7b:fb:c2:04:e2:cb:72:69:ce:8f:
b8:57:ce:55:8b:d6:22:a3:8a:a4:1c:72:ab:18:7f:
61:b8:22:36:89:8d:53:c7:27:c7:c0:64:d8:9b:c5:
02:c5:e5:20:dd:c5:bb:02:a0:d6:59:83:8d:72:4c:
ba:ae:16:09:fd:70:3c:9a:b0:39:89:ca:da:b0:5d:
5f:d5:88:a9:7b:31:ee:85:c5:a1:93:de:eb:f2:fb:
e7:b8:ed:b1:04:2f:c0:4f:21:bd:f1:98:23:04:2b:
82:7e:59:90:fc:a3:c3:2e:52:b1:5f:b9:37:d5:97:
bf:aa:ad:9f:ea:29:07:68:a2:b1:51:09:cb:fc:9b:
4c:eb:95:2a:d8:0e:5c:6e:08:d4:65:2b:bd:78:a3:
d7:25:c8:61:ea:6c:61:2a:71:a2:14:f4:58:5a:aa:
01:8d:1e:8b:60:f7:8a:71:81:e7:62:33:e3:6d:5e:
4e:2e:f1:7e:28:65:dd:41:e5:cb:c3:84:f7:d2:de:
25:19:ed:de:64:16:d4:ac:b0:4b:e6:fd:3d:bd:39:
8d:7a:bd:a2:2f:30:a8:ad:4d:a9:32:d3:eb:1d:ab:
d9:be:f9:13:13:1b:f1:9c:7e:bc:1a:a2:13:3b:9d:
3d:3c:8d:74:5b:a2:3e:c9:51:63:85:a4:4e:7d:56:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8D:DA:2C:BE:4D:65:6A:5C:D9:A4:B8:C6:B0:65:E5:F2:F5:FF:FA
X509v3 Authority Key Identifier:
keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fc:a9:a7:cb:68:f7:3b:c7:32:ce:07:80:53:bc:da:a2:7e:
a2:9c:44:2b:6f:8f:33:6f:c6:2c:cd:79:01:a1:c0:b9:a9:29:
36:25:07:83:c3:7d:ea:9e:2e:4f:9e:2b:e2:ea:cb:48:f8:70:
4b:7e:f9:60:41:c7:ce:aa:91:bd:32:ea:fe:2e:e8:59:7c:c6:
1b:76:b7:0a:9a:6e:1e:9c:b4:3e:50:10:ea:f6:df:2c:d3:8e:
b4:31:6f:49:21:75:f7:23:02:23:0d:e1:ec:f1:77:b5:09:ce:
03:ab:04:aa:28:36:1b:b8:6a:e6:b4:90:0f:75:4f:d0:02:7c:
19:94:f4:df:70:43:15:b9:1c:8e:c5:09:6b:1d:45:ff:94:e8:
01:df:eb:c6:e3:f2:18:6e:f6:82:5d:fa:c8:d3:d7:84:d1:82:
9f:b2:2d:c9:db:7b:73:4f:3b:10:50:b6:ce:80:1f:44:52:f6:
11:51:97:7f:fb:be:87:4b:56:f5:44:3a:40:ad:97:01:8b:f7:
ef:40:6d:76:9f:09:9b:7e:40:5b:d0:0a:a4:c8:03:df:8e:e2:
34:3b:17:65:02:d1:83:4d:ce:94:02:00:98:d5:69:0c:4c:16:
bd:8c:d6:9b:ae:d8:9b:27:a4:25:53:49:0e:d0:7d:1b:4c:53:
ef:7c:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:55 2025 by rpki-client