Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: QVjpEGvXvL3W/xEozK0r45Yfe7X40H4QyXjd/yodzpI=
Subject key identifier: 1A:B3:55:41:BD:CA:4A:5C:C6:0B:57:DF:29:95:A3:0D:35:82:C3:B4
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 0199FEB5325B6620981DF8D10626C86CF10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 23:01:51 +0000
Manifest this update: Sun 19 Oct 2025 23:01:51 +0000
Manifest next update: Mon 20 Oct 2025 23:01:51 +0000
Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: MulUPilX80VRSHiHIQlOP8rnZaJgMAFQMer4vn4bkK4=)
2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:32:5b:66:20:98:1d:f8:d1:06:26:c8:6c:f1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Oct 19 23:01:51 2025 GMT
Not After : Oct 20 23:01:51 2025 GMT
Subject: CN=1ab35541bdca4a5cc60b57df2995a30d3582c3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:61:7c:55:04:d2:c6:c6:76:53:dd:54:c2:
f6:29:af:2c:f0:26:ae:9d:36:26:63:62:e6:0b:a0:
cb:a6:42:eb:8a:4a:31:74:c9:06:ff:2d:35:8e:80:
36:51:f2:54:11:73:33:fd:94:3d:03:72:7e:e0:47:
70:3b:d9:95:94:26:c9:42:57:c3:fe:ca:cb:b4:43:
c7:f6:cf:5f:24:e2:f9:e1:52:5f:c9:f0:5e:92:5d:
94:5e:77:ab:60:21:10:5f:d6:d0:95:b6:7a:bb:72:
81:72:cf:fe:3b:c1:31:bb:e7:87:b5:63:e8:e8:c8:
28:96:3d:a1:77:d3:79:54:c5:77:43:66:b5:24:6a:
a9:f9:4b:87:f1:9e:2b:49:99:99:77:88:00:00:0d:
e9:e1:76:46:0c:0d:8f:3a:62:c8:41:ce:f6:f0:91:
d9:b6:a6:8d:8e:2a:d1:e3:57:ef:55:cc:d6:1f:60:
36:e6:92:eb:a5:ee:02:a5:9e:0e:22:8d:ed:0b:fc:
a4:75:10:df:7b:fc:e2:ea:10:1d:28:46:24:57:2b:
bd:b4:c1:27:0e:a4:7f:da:95:cf:fa:3c:49:b4:57:
4f:ff:94:41:2f:9c:47:c6:88:73:e9:12:36:9a:39:
21:b3:f2:ee:c0:a7:83:73:09:b9:d8:3f:c0:45:5f:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B3:55:41:BD:CA:4A:5C:C6:0B:57:DF:29:95:A3:0D:35:82:C3:B4
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cc:a2:06:af:db:6c:7d:4d:c3:40:85:72:59:82:08:29:28:
66:39:36:ed:bc:96:55:5a:f7:b1:ae:62:7d:df:ae:7e:b0:19:
34:11:f4:26:76:c7:0b:29:9d:a2:51:a7:cf:8c:82:59:8b:fa:
fa:48:cb:ea:d4:08:8f:5b:32:b8:14:92:6b:ad:cf:eb:92:15:
d0:cf:4c:0a:4a:d1:58:be:25:34:f6:8b:49:22:3b:42:59:4e:
5a:40:d2:01:ac:08:04:05:0e:3e:3e:40:72:c6:4a:d2:db:61:
e5:fc:fe:d0:bc:eb:d8:53:24:4d:07:47:16:9a:4a:e0:3b:b2:
d7:d4:39:e9:9d:5c:96:21:f1:26:de:ad:0a:ce:22:d4:5e:a1:
6f:b7:ed:03:55:0f:91:40:93:64:ba:00:51:e4:22:0f:12:c4:
87:42:84:fc:04:8c:ac:4f:ec:e0:2c:c3:04:6d:cc:09:a3:15:
a1:49:f5:b0:de:5a:c4:cf:84:28:85:77:3c:08:1c:a2:84:94:
61:88:76:3e:d2:7f:f7:03:20:1c:bb:ba:bb:26:b3:fc:38:50:
10:f0:ed:51:32:2d:ea:40:59:9d:d1:88:34:c9:e7:97:76:5a:
5b:74:93:d6:f8:94:68:63:48:b3:dd:a2:b4:6d:d8:6b:84:ca:
39:04:c2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:35 2025 by rpki-client