Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier: u+tQ6AiQpC38QIR/63CpYkFVsv1hA4yGuCOmS4X0b8g=
Subject key identifier: C5:B0:FE:D0:6F:76:21:C4:02:09:95:28:C5:86:24:B3:6A:4B:0E:8B
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 0199FBEAFDDAFDF720134936C38E90D186A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number: 10BD
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: 4fpK3rH7dDsLZcwC8fv__9MCBNk.roa (hash: H+mNwrXZUXB3OGGb/VrqoSQBBpWlzYIXILfgLQd6xuU=)
2: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (hash: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=)
3: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (hash: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=)
4: UNKbAcEAJHWJC-HG72D-vYqbVfQ.roa (hash: m35AjrcjrDzhORVJU0fjE54zFfVUjrq+cuZi9udA0+8=)
5: cLFAPtOqlcUfpbbbNNENVqdfu8I.roa (hash: fE/OxbEqrhzEaEBEiWo6VY8shfzEaI5zfx5000I8b5Q=)
6: hgq-3QFFzN187B-65tYpaJQwwz8.roa (hash: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=)
7: j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa (hash: bJ01HQANAS/OiptPUmVVckwNOFEFT58VNH/38hKXIpc=)
8: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: QBEOdxdlTdMr+X+17gulBGntnOunFmlVWfw8W9dMIj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fd:da:fd:f7:20:13:49:36:c3:8e:90:d1:86:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=c5b0fed06f7621c402099528c58624b36a4b0e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:65:51:e4:c6:6b:40:8b:93:6e:85:7b:1c:
e1:df:5c:13:a7:c0:6f:8c:17:64:f5:3c:a3:45:c4:
ef:1f:37:38:df:81:ca:a3:0d:11:7e:99:f8:e0:5d:
82:a4:e9:1e:6d:ee:e8:f1:76:f6:61:a8:12:1b:42:
e7:ff:5f:66:94:d3:84:b3:6b:bb:f3:ce:89:29:41:
4d:11:dc:f3:8c:7c:37:08:e8:f8:51:8a:70:f8:5c:
30:f3:dc:55:1b:5c:b6:93:1c:89:76:6d:0d:db:dd:
d1:30:3e:85:af:94:db:fe:37:04:8b:66:bf:ad:6b:
64:c8:b8:83:cd:28:31:bc:70:ed:5f:14:65:52:94:
56:e8:0b:ea:2c:54:fb:5b:38:56:83:fe:d2:00:f9:
34:91:a7:31:c9:11:8a:06:37:3e:29:82:4f:29:74:
bd:65:8e:00:d4:dc:27:58:fb:cb:86:5b:53:4a:98:
14:ce:db:5c:09:e9:94:65:37:b2:90:40:db:27:92:
2f:dc:57:65:9f:81:0b:eb:0c:93:29:8b:e2:f6:ba:
18:97:ce:df:65:c3:14:ef:07:af:0b:38:b2:21:69:
76:41:19:8e:f8:af:2b:8c:b6:79:72:d0:3e:f0:26:
2e:10:37:aa:bd:ac:33:d9:4c:76:55:40:0b:d2:10:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B0:FE:D0:6F:76:21:C4:02:09:95:28:C5:86:24:B3:6A:4B:0E:8B
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5d:be:bb:3d:d9:f3:1b:c3:0d:cc:46:4c:fc:12:24:74:0f:
63:85:d4:47:3a:8b:b3:ee:a1:93:09:c4:6f:9c:ae:b4:7b:c7:
f6:96:ef:99:9e:65:4f:b1:6b:1a:13:08:ee:fb:46:48:2e:6d:
ca:49:cf:96:3c:d1:9c:8b:2b:a3:36:f3:40:c0:6c:d3:dc:60:
13:76:80:bf:72:e5:75:16:76:48:f4:54:57:07:e5:d2:26:3d:
08:86:9d:d8:1a:fd:d4:b0:54:0f:a9:d4:73:fb:af:1b:f4:71:
95:03:1b:36:e5:b3:7b:57:50:1b:cf:05:2d:57:a1:aa:8d:7b:
a5:ee:03:5f:09:c9:d0:0a:c7:a2:7c:b1:d8:35:70:a0:ec:de:
83:f4:9b:23:2f:ba:55:b6:08:b6:3b:1f:fe:74:73:ca:ec:53:
98:3c:85:8c:28:07:e0:af:d2:cc:73:71:75:bc:b7:0e:fc:ee:
b8:b7:40:1f:bf:af:30:e9:4b:75:44:1b:cb:bf:29:2f:7e:57:
1b:ab:a5:55:ab:11:40:b6:26:9e:39:34:87:fd:d7:18:89:68:
30:0d:d2:21:6b:92:1f:5b:33:52:ab:06:fe:00:29:b1:44:d1:
82:69:ba:3d:fa:87:9d:11:c3:79:9b:53:28:76:81:7d:ab:3f:
b1:28:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:25 2025 by rpki-client