Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: pX0sctL+zLeRB0fnOgNe/npBW/63Iju5yX3ks3H0OrU=
Subject key identifier: 4B:EF:EA:F0:08:18:E2:78:0F:2A:94:98:09:73:7E:99:77:B8:95:C9
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 0199FD6B0670F900F02D0CEE5A2F9D89410E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:13 +0000
Manifest this update: Sun 19 Oct 2025 17:01:13 +0000
Manifest next update: Mon 20 Oct 2025 17:01:13 +0000
Files and hashes: 1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: rB5laH9zdfzKw/wuxVixHP0PPNOgSlPU8PPVOechYM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:06:70:f9:00:f0:2d:0c:ee:5a:2f:9d:89:41:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Oct 19 17:01:13 2025 GMT
Not After : Oct 20 17:01:13 2025 GMT
Subject: CN=4befeaf00818e2780f2a949809737e9977b895c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:fb:06:7e:d8:fa:65:22:27:f5:02:a4:e4:
7d:c7:ec:72:dc:04:2c:5c:55:08:a1:7d:b1:56:bc:
01:40:7f:b0:98:d7:9d:43:02:9b:d0:ec:c9:cc:5b:
9e:67:bc:be:32:c0:a2:17:ee:3b:6a:47:f5:4f:e9:
d5:5b:3f:7c:b5:90:2f:5d:9b:0b:f3:95:9f:b1:f3:
8e:55:0e:82:d2:e8:db:4f:ab:6b:78:2a:ec:70:44:
ec:5e:ef:d3:7d:e9:f6:31:ca:78:c4:46:d0:22:10:
a6:56:7e:f5:fc:69:5f:1d:ec:84:da:12:c7:1b:b6:
23:d4:c8:e6:76:53:76:d3:a8:fd:9d:c9:d5:49:ab:
55:fb:9f:f7:c2:54:2a:d4:9c:d2:76:40:72:53:10:
5c:43:20:41:35:ed:a4:f0:2a:22:81:28:d0:9e:e9:
19:bb:c6:47:47:51:59:a1:f1:e4:e6:76:59:2d:ff:
5e:dd:ea:ca:33:44:61:82:0f:2e:de:4b:d8:8d:41:
92:69:df:d5:54:b1:0a:ba:45:c9:9c:30:f7:1a:b2:
33:ad:b4:88:b1:2a:35:21:7a:54:ff:73:28:19:90:
c0:fc:4d:62:44:34:0e:d3:67:ce:62:0a:c8:af:3f:
d5:f2:ef:61:be:96:c7:22:e6:2b:fc:72:bd:1c:d3:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:EA:F0:08:18:E2:78:0F:2A:94:98:09:73:7E:99:77:B8:95:C9
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:30:c5:a3:51:fd:e7:b9:0a:5d:c2:7f:7f:f2:ce:e6:06:9a:
43:c7:bb:e9:64:08:bc:07:be:86:12:fc:0f:fd:79:c0:0b:ec:
1d:bb:47:f6:0c:ed:27:26:8d:08:c2:3e:d0:58:1b:ee:e6:94:
95:2f:87:6f:1c:22:b3:c4:f5:ed:b4:be:db:2d:76:ec:12:1d:
3b:cf:3b:03:b7:c8:01:f0:f8:76:e2:6b:a3:f5:f6:ca:7b:98:
37:57:fd:fc:d0:73:36:dd:6d:e2:3a:6a:fa:ef:a6:d9:c3:1b:
ec:6b:25:41:9e:64:3e:3f:81:05:4b:69:64:e0:b8:f3:13:e5:
d8:4a:ac:b4:1c:6d:f2:7c:29:21:5b:42:56:78:37:d5:4f:74:
86:60:e2:0c:b6:00:34:40:dd:1d:51:e3:d0:ac:62:35:58:6b:
e1:52:53:8a:f9:25:73:29:a0:ef:7e:85:16:25:37:40:b6:76:
ee:ab:23:4a:5c:a9:66:8d:22:03:8f:12:45:61:e8:57:6b:09:
4b:55:14:d4:d9:54:65:d4:85:68:0a:6e:dc:f4:0b:5a:97:ba:
f4:16:7e:6d:cb:ce:3c:e6:92:ee:c9:fa:f5:de:1b:69:b0:88:
1d:4b:12:1a:47:46:78:30:71:38:fc:58:6d:f0:af:41:49:6a:
16:f7:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:02 2025 by rpki-client