Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: lrR2wt3wQUBzQ0qDNSdI457uwYJLi5E46WNc2AwF1hw=
Subject key identifier: 39:A9:F8:5A:22:3A:B1:7F:D4:04:9E:DA:13:89:D2:08:AF:0D:14:31
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 0199FEB48EA509E59F84F408BAC0193C809C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 03D1
Signing time: Sun 19 Oct 2025 23:01:09 +0000
Manifest this update: Sun 19 Oct 2025 23:01:09 +0000
Manifest next update: Mon 20 Oct 2025 23:01:09 +0000
Files and hashes: 1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: 0oUO3grD6ohusLIznPyrMBVd7NLYE8IyB89sMaMS/3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:8e:a5:09:e5:9f:84:f4:08:ba:c0:19:3c:80:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Oct 19 23:01:09 2025 GMT
Not After : Oct 20 23:01:09 2025 GMT
Subject: CN=39a9f85a223ab17fd4049eda1389d208af0d1431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:0b:4f:5e:2a:5b:27:83:5b:69:53:b0:40:
fb:3c:e3:3a:1c:61:e6:3a:a0:cb:1d:4b:4c:37:74:
d0:e9:b9:ea:22:fe:40:8c:cb:52:38:c5:43:ac:eb:
78:56:20:aa:03:36:41:05:1c:09:b6:92:8a:6b:5e:
86:d2:17:5f:10:81:98:b9:f2:b4:31:64:c2:30:95:
d6:4c:28:9d:07:b6:76:c3:39:d9:74:4a:5a:25:94:
da:8c:2d:85:45:35:e8:c7:81:6f:81:79:fa:45:7c:
fe:4b:5c:0d:fe:d0:b0:7d:8c:99:dd:48:9a:e2:62:
02:82:8b:f9:2f:78:93:e6:2b:58:62:35:5a:9a:38:
c3:0d:8e:c8:d4:fa:54:9a:e3:84:26:61:1d:61:99:
fc:e7:e5:ae:a3:48:02:b6:7a:b6:8e:45:81:dc:ef:
41:64:34:38:d5:0b:dc:eb:e9:3e:2d:83:ad:f0:7a:
73:f1:75:4b:03:70:f1:9d:55:e9:8a:b4:09:3d:63:
d1:c4:65:98:ac:b3:e7:c9:df:ba:6e:48:f9:64:f0:
ae:fc:6f:45:05:f3:2f:b3:a2:4f:fd:e9:e8:8a:2a:
38:8f:4f:ad:f4:e6:e7:fb:d8:98:f9:22:fa:ed:37:
71:8d:c3:a2:ab:a2:f0:4e:65:ac:f5:bf:aa:f2:f4:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A9:F8:5A:22:3A:B1:7F:D4:04:9E:DA:13:89:D2:08:AF:0D:14:31
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e7:ab:f1:d2:43:b3:79:89:dd:84:fe:c0:66:a0:c2:f6:67:
be:d5:3e:dc:43:9c:c6:36:4b:6a:32:37:79:f3:28:84:ac:2d:
cd:7f:b5:a8:a9:fb:2c:23:dd:c5:a4:54:78:8b:b8:db:7c:44:
0b:9d:ac:69:32:3b:00:b5:9e:83:a1:ab:83:20:b5:cc:97:e8:
f1:10:b9:12:df:b8:c3:a8:72:42:85:57:8b:53:9e:81:98:9b:
2b:2c:b4:c1:5b:ac:f2:45:bf:16:bb:56:05:e7:9a:d7:dd:3f:
67:20:e7:f7:3b:3a:09:6e:c3:7a:b2:70:2c:96:a0:c9:c4:3e:
6e:21:9e:e3:3f:08:38:88:ab:95:86:a1:56:5c:36:94:24:60:
60:7d:d6:2a:da:b9:bd:84:b4:e6:36:b7:89:29:6c:3a:5b:70:
e6:40:fd:f5:c3:f6:0c:44:5b:b3:df:af:a6:2c:34:b6:a5:ea:
53:4b:d5:57:ce:8f:ce:59:c5:c3:5e:96:37:d5:91:e8:40:b9:
9f:e7:87:f5:26:aa:94:f3:6e:d0:5e:7a:aa:ba:5d:9a:60:96:
c2:39:15:c4:bd:66:81:78:13:a7:41:5f:fb:a9:7e:a1:41:29:
71:30:90:3c:48:e5:ec:d1:13:e7:40:52:7d:de:99:63:ce:00:
92:e8:08:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:34 2025 by rpki-client