Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
File: 43HOIIaAX5EvhRK3nF5mqcn01NI.mft (raw, json)
Hash identifier: l3gipi1JeAmCZL6Yyz2A8xN9IW8/iGm5yMUfHXABYOA=
Subject key identifier: F4:87:AA:9A:19:CE:B1:03:A0:86:6C:A7:84:E2:53:4A:D2:C7:82:FE
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 0199FC21AEA650EC2B46C4D2872A557B5BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
Manifest number: 0B3B
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: 43HOIIaAX5EvhRK3nF5mqcn01NI.crl (hash: R6fzh42tmjlpHH68+yDcVan4ujtkcHbr4CH9kKuIQYE=)
2: oNzr7e9N0_nB7NG8uVVH1YFW8SA.roa (hash: E5UVvjB7YIozDhZ03PLtgPckm/pTCCT/ml1aJ8kENsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ae:a6:50:ec:2b:46:c4:d2:87:2a:55:7b:5b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=f487aa9a19ceb103a0866ca784e2534ad2c782fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:20:fc:c3:57:f8:f0:17:28:05:51:c0:51:
31:3a:66:0d:f2:d9:4b:11:d5:30:ad:8a:4f:0e:7a:
e0:69:5b:8f:1d:a9:a3:aa:28:69:d2:88:47:1e:4e:
69:f7:e4:0d:39:1a:b6:d9:a7:04:a8:ec:2b:00:23:
b1:ac:fa:d8:78:4e:81:0d:92:f7:1f:eb:cf:97:31:
c8:89:91:83:38:23:88:47:58:48:12:20:1c:2c:ba:
b7:68:89:94:02:6d:38:83:cf:40:8b:7b:b0:de:f9:
b4:51:48:56:6a:93:ce:26:e2:90:c7:0b:b7:7c:7c:
98:5c:7f:53:c2:a7:24:0f:82:26:23:f0:03:5d:1a:
b9:04:60:31:fe:b1:d5:47:93:05:f1:2b:c8:f0:a7:
df:c1:ae:8c:ce:16:b1:c5:35:cb:4a:55:39:bb:36:
5f:20:2e:d5:a7:8d:e8:af:78:b8:83:f6:a5:9c:fc:
d9:9e:a4:c4:59:9b:b3:5d:ff:ff:17:86:09:cf:27:
db:7a:f3:ae:91:c5:b1:67:27:15:8e:7c:22:85:c7:
c8:73:f6:a1:0c:94:2e:61:32:0f:de:53:40:e8:8f:
70:01:37:16:23:20:f6:a1:10:43:6d:ad:fb:b1:dc:
f8:fe:10:47:37:63:93:a8:72:1d:98:e0:8a:f9:f5:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:87:AA:9A:19:CE:B1:03:A0:86:6C:A7:84:E2:53:4A:D2:C7:82:FE
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9b:ab:1b:85:c7:cb:50:b0:c9:dc:2b:7e:34:39:de:bf:26:
b7:81:9c:55:ea:67:4b:0e:c7:26:56:63:78:b2:d6:aa:57:c9:
07:35:7a:2a:25:2f:9b:f6:59:c5:49:0d:01:f2:f9:4c:d4:c1:
48:c6:63:8a:00:68:15:c4:5b:45:46:db:0b:61:b1:b1:f3:4b:
72:71:ce:ae:63:b9:07:3e:39:7d:98:23:ce:e4:00:e2:f5:69:
52:65:0b:b5:31:dc:80:6d:7e:6d:4c:50:8d:7d:a6:59:9c:ae:
5e:b4:40:64:6e:ea:57:8a:f8:40:3e:68:6e:41:8a:c2:b1:45:
a0:a5:60:76:31:8e:b2:61:52:47:0e:d7:55:8d:a7:5d:2b:10:
d0:b1:e7:dc:c0:58:c0:6b:b8:a1:c2:e7:9a:f3:e2:89:d4:14:
80:55:52:ff:dc:59:13:4f:c7:99:00:c7:08:60:d0:bb:c4:e0:
24:f7:74:d5:74:7d:e0:4e:0d:cc:ca:1a:d5:29:91:8d:de:f4:
df:5c:6b:26:f3:8a:70:39:6f:85:6a:69:bb:23:65:15:c2:47:
c6:9e:04:30:8b:07:c1:56:e4:50:0e:35:cf:9a:60:17:ea:dd:
a5:9b:97:fb:fd:6a:f8:85:5d:ac:73:21:1e:2a:40:76:b2:35:
47:0c:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:28 2025 by rpki-client