Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft
File: Ps7T04aszVVp_7F6tjE5um1Hteo.mft (raw, json)
Hash identifier: 6Kq6eFcXZRgSobHdOiU0yN50RS526U4nnunHRePwK6s=
Subject key identifier: 1F:78:EB:9A:41:C0:53:3D:B1:E0:53:15:75:D0:02:DB:70:47:B9:AF
Authority key identifier: 3E:CE:D3:D3:86:AC:CD:55:69:FF:B1:7A:B6:31:39:BA:6D:47:B5:EA
Certificate issuer: /CN=3eced3d386accd5569ffb17ab63139ba6d47b5ea
Certificate serial: 0199FA6A92FFE2BC6E006AB8AB03A72EDBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps7T04aszVVp_7F6tjE5um1Hteo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft
Manifest number: 44
Signing time: Sun 19 Oct 2025 03:01:52 +0000
Manifest this update: Sun 19 Oct 2025 03:01:52 +0000
Manifest next update: Mon 20 Oct 2025 03:01:52 +0000
Files and hashes: 1: PpWQe7F60cQV0dh2AIuIGDWQfQM.roa (hash: TyQK8tYggX3AsMsFVzO7P3WPFl/RmPxqQqZ+a02rkMQ=)
2: Ps7T04aszVVp_7F6tjE5um1Hteo.crl (hash: W3QF5t7MiMH/atkkeT/w0lEuup8jIAF1RxvsnXq2q50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps7T04aszVVp_7F6tjE5um1Hteo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:92:ff:e2:bc:6e:00:6a:b8:ab:03:a7:2e:db:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eced3d386accd5569ffb17ab63139ba6d47b5ea
Validity
Not Before: Oct 19 03:01:52 2025 GMT
Not After : Oct 20 03:01:52 2025 GMT
Subject: CN=1f78eb9a41c0533db1e0531575d002db7047b9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:cf:40:cd:a8:c4:e4:de:25:60:d1:d3:cb:
a2:4e:61:5e:51:84:5e:fe:41:ec:da:77:fa:e6:6a:
58:6a:fb:cb:34:7b:33:65:7c:67:03:20:56:45:ca:
d0:b0:9b:71:f1:2b:88:3b:2f:06:03:82:5f:9b:68:
86:d2:81:03:44:f1:ac:1c:9e:2f:21:53:2a:3e:e4:
8e:10:24:97:25:33:93:e5:46:10:fe:52:92:c5:2f:
be:df:16:27:d5:ad:bc:cc:ac:fb:1d:3d:7f:dc:e1:
65:06:e3:4a:62:75:63:55:c4:f5:e2:6b:51:04:c3:
15:7a:d5:e1:bb:97:06:42:ae:63:c5:de:29:19:27:
01:0a:5d:b6:b8:2b:c7:24:d2:fb:8f:0a:4b:63:ad:
87:43:f6:a9:08:2d:1e:09:e1:07:21:9e:1b:33:c8:
d7:bc:82:48:44:00:16:eb:20:00:dc:2c:cc:1f:65:
62:6c:b0:a3:d3:72:bc:e2:c4:09:5a:21:5c:4a:11:
72:09:1c:2f:e5:c9:d0:43:d5:71:cd:87:6a:40:49:
6b:f3:4e:62:03:0e:6c:06:12:81:c7:e0:4c:bb:3a:
b8:23:a6:ca:55:96:95:68:c6:e4:09:21:2e:6b:51:
9c:76:40:f1:cc:b7:d0:c4:a8:45:dd:ed:40:c3:e8:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:78:EB:9A:41:C0:53:3D:B1:E0:53:15:75:D0:02:DB:70:47:B9:AF
X509v3 Authority Key Identifier:
keyid:3E:CE:D3:D3:86:AC:CD:55:69:FF:B1:7A:B6:31:39:BA:6D:47:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps7T04aszVVp_7F6tjE5um1Hteo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/42e19a-e13a-4998-99ae-ea9619beb56e/1/Ps7T04aszVVp_7F6tjE5um1Hteo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a8:d1:23:83:64:4f:ca:99:66:bc:75:51:68:1c:8b:5a:20:
86:47:ac:7f:b6:14:ce:49:c5:60:2e:33:f2:19:b7:f7:35:5e:
a9:46:46:60:78:71:c2:f4:e9:35:76:13:12:77:d2:2b:b7:3a:
65:10:4c:79:8e:8d:08:4b:f8:bd:2f:2a:47:ca:3e:29:c7:3b:
af:d0:19:1e:66:1d:ba:43:7e:a9:cc:f0:26:b9:4a:11:f4:96:
2b:d8:13:1b:fa:49:e6:5e:9a:09:7d:5c:50:78:4c:74:c6:83:
9f:3d:7c:62:5d:5a:83:88:08:c5:12:5e:1d:ff:ec:0e:25:ab:
fc:b6:5e:54:8c:42:74:4b:ca:85:16:05:f5:a1:b3:01:72:6b:
25:e7:de:95:ab:06:c7:a4:50:72:4c:fc:ca:ed:bb:56:09:9c:
40:c2:72:a1:0f:74:bc:f9:18:10:96:e0:e2:ce:9c:24:ad:fa:
5d:9d:5a:16:a8:5c:ac:d9:fc:a3:80:36:96:25:27:62:af:5b:
d5:cf:8e:eb:24:1a:a8:ee:35:9f:37:0b:90:f7:90:13:77:01:
77:50:74:da:d3:38:72:1a:fc:eb:2f:32:58:72:62:99:53:46:
ce:18:fe:18:57:88:07:80:0e:66:d5:47:97:af:aa:6c:8d:97:
11:3c:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:20 2025 by rpki-client