Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: BMTSmzB/x+0xSGS/mgtF/b3AS4/u1AJe944Kk3DVZBg=
Subject key identifier: E5:5A:B4:A2:1C:39:51:D2:E4:7A:F9:7E:07:0F:6B:35:E4:6F:64:D9
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0199FB7CCCA01D3560323CF24375F8C49BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 033D
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: kIgDZb1mJNxoy-31G2UkNHRwWx0.roa (hash: zPGGaXstMh703tXkFi/JyzFhGqACNCTHmmN1tjIc6M0=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: kEVQ6hgGrCcObmu3SMwQp5E2Ln7AmmMlwq0Hh4u137M=)
4: yDLDs_9-xCJNS7Lq59X6rTIHpaM.roa (hash: mZAephRDHWr1NJfSrOQS8hE88/V7vwaKpzI1ny1rx80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cc:a0:1d:35:60:32:3c:f2:43:75:f8:c4:9b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=e55ab4a21c3951d2e47af97e070f6b35e46f64d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:90:50:4f:ec:b5:08:bb:a4:39:82:70:25:
d5:54:9a:5d:7b:75:ad:63:38:e5:f7:bb:d8:06:a5:
ff:52:03:49:8f:d9:0f:f1:6e:14:fc:77:63:2e:38:
37:29:df:47:79:06:6e:92:65:07:0f:d6:e9:f1:86:
18:c5:89:cb:61:e3:5d:9b:0e:f9:a3:58:2e:d6:c0:
ba:d8:0f:bc:eb:66:c9:47:62:d3:f0:52:e5:15:6d:
a1:d6:b1:f5:6c:85:95:65:cb:86:53:65:3b:fe:c9:
7b:70:ed:80:19:80:a8:d5:9c:ad:6d:43:9a:22:9b:
f6:4b:1e:f5:24:62:86:b5:d2:2e:17:8f:48:70:e9:
b9:56:c4:85:b6:63:e4:f4:92:d5:63:14:ec:e2:a2:
b5:82:85:da:f1:76:54:8e:cc:90:8e:96:5e:19:01:
c8:67:82:9f:1f:9e:92:91:9d:bd:64:57:77:9a:ee:
7a:39:62:36:94:c5:7b:9d:a3:44:45:06:2a:e4:71:
65:e1:15:5c:9b:6e:6b:cf:00:11:a2:e1:85:95:52:
f7:6f:69:0c:8d:72:55:32:9e:3b:3f:ab:e2:f3:a5:
2d:f3:c1:e0:37:dd:aa:95:58:68:5e:99:0c:a3:3a:
be:71:6b:58:9e:0d:45:80:f9:7c:ba:04:76:08:ac:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5A:B4:A2:1C:39:51:D2:E4:7A:F9:7E:07:0F:6B:35:E4:6F:64:D9
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1c:cd:d4:b8:06:46:fd:2d:7d:55:17:ac:ad:7a:d1:17:78:
8e:d5:98:d2:05:d3:4e:72:41:54:e9:b3:94:94:ac:0d:da:ba:
a9:91:b4:8a:ff:2c:98:77:18:34:78:6d:aa:9a:2c:bb:9f:8b:
74:80:9a:25:44:9f:4f:96:8d:2d:37:cd:d4:0c:fc:83:3c:04:
b2:48:47:b1:a7:e2:bb:44:6f:a7:e2:5f:09:08:e8:e4:d4:90:
a5:52:ad:7e:e6:22:e4:17:fa:8f:0e:61:f4:0f:e9:3f:4d:28:
10:4d:56:e8:ea:30:27:48:55:b3:ec:bb:90:25:03:fc:ce:9b:
c5:c8:95:7a:6f:a5:7a:c9:af:7f:7a:90:56:7a:d7:f0:3a:f9:
a4:6e:b6:70:69:d6:23:15:4f:cd:b6:54:9c:be:56:53:ac:61:
2a:67:96:e6:0e:a5:b8:e7:00:aa:75:47:c2:b6:35:af:3c:74:
9f:0b:90:d9:bd:6c:72:c1:fd:c0:54:a9:45:5b:b4:81:aa:31:
43:2d:13:1f:68:59:05:22:ea:d6:ab:40:44:4c:46:79:36:54:
2f:ec:b0:ab:fa:10:9e:9f:4f:47:0c:12:b1:f0:bd:39:a1:4e:
80:26:cf:3c:fe:a3:f8:5b:c1:fd:32:2a:2f:ad:72:bb:df:ec:
49:ba:32:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:46 2025 by rpki-client