Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier: BIX0EtHTWU+kbg8R0w0Vl5bRkqbB/78iQ7vsnX5c3YE=
Subject key identifier: 5D:FD:B5:42:5B:11:C2:DB:C7:F6:3D:F8:D8:A0:EF:A8:0E:C2:98:34
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer: /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial: 0199FC8FBA63ACC428F77BC1D15879F2F473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number: 03E2
Signing time: Sun 19 Oct 2025 13:01:41 +0000
Manifest this update: Sun 19 Oct 2025 13:01:41 +0000
Manifest next update: Mon 20 Oct 2025 13:01:41 +0000
Files and hashes: 1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: JhogntyRE0li2IIHNeC1UXyWJHXuK7ymAdm+VX+OO7Y=)
2: 0k42oFwK9zeHh7UudZGNANSBYXM.roa (hash: 5Ao6mH3fPzWjkBEDJZN7zRWdA8LcUFLpcoEHQj83IGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ba:63:ac:c4:28:f7:7b:c1:d1:58:79:f2:f4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Validity
Not Before: Oct 19 13:01:41 2025 GMT
Not After : Oct 20 13:01:41 2025 GMT
Subject: CN=5dfdb5425b11c2dbc7f63df8d8a0efa80ec29834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:ea:15:c4:34:66:f0:91:c6:ed:56:7e:f7:
7c:59:12:d5:fc:bb:27:8c:ef:41:38:6f:a0:e8:c9:
29:9d:cd:13:a7:03:e1:81:bd:f5:d2:e8:9b:7a:fc:
a1:e6:c4:ce:e3:fa:ec:d4:51:a6:03:7f:0a:ba:21:
55:3c:49:56:80:c7:05:3d:c2:ed:70:bf:a0:9a:f4:
94:0d:5d:9a:2d:cc:38:6b:a3:fb:06:98:22:f4:ae:
af:d9:d4:75:f0:c7:e9:7d:c7:4d:ea:34:60:c3:cd:
20:07:fb:dc:44:26:60:a0:7b:ce:76:7f:f6:f0:a5:
4e:c3:32:a1:25:d9:23:e2:78:3a:f3:cc:67:30:80:
f1:f1:62:1f:a3:47:ba:a1:a6:8f:00:ce:34:09:c7:
73:b3:be:42:44:32:bd:01:44:29:6b:36:38:b1:2a:
f7:50:b0:80:b0:72:e6:4f:1b:ab:84:7d:7b:aa:a3:
f0:70:d4:19:3e:1c:6f:8e:98:38:6e:32:95:ff:30:
65:d9:9c:31:4d:f6:20:d4:dc:df:7a:c0:75:58:1f:
51:25:0e:fd:72:a3:2a:4e:72:03:62:71:33:21:71:
a3:8a:7c:b9:b8:7e:2b:ba:a0:e1:65:dd:10:70:c4:
50:21:e9:cb:28:77:d9:7f:20:41:f3:2d:bd:74:3c:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:B5:42:5B:11:C2:DB:C7:F6:3D:F8:D8:A0:EF:A8:0E:C2:98:34
X509v3 Authority Key Identifier:
keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:2d:1b:40:cf:ff:b8:7e:e3:49:24:4a:62:2e:4b:6b:49:
1f:e2:29:05:fc:19:16:70:e1:58:bf:b8:28:98:3c:c2:5a:42:
e8:22:eb:f7:7e:6e:39:0d:76:41:20:bd:91:ee:75:18:89:63:
ea:ee:3e:ec:ac:cd:80:aa:5b:a0:92:39:01:e0:e4:d9:36:a4:
ff:71:f4:48:ce:86:19:04:21:bb:6c:15:81:5d:8a:bf:2a:63:
81:b7:50:ea:18:47:3b:f0:fb:45:8f:0e:1d:93:ad:9a:8c:d9:
ab:e4:26:72:48:fe:9a:49:71:78:36:09:43:cf:54:64:1b:57:
4b:c7:90:07:19:ed:80:c9:88:b6:fc:d2:10:df:ca:93:4e:f6:
f2:83:f5:eb:08:bd:69:1c:06:14:5c:17:41:96:18:64:fc:68:
65:03:00:d6:57:56:1b:cf:da:a1:74:fe:c0:97:f3:aa:d3:da:
d1:0e:b4:06:05:eb:a5:e6:2b:f4:c9:73:3a:b7:f8:dd:43:cc:
80:3b:90:20:13:16:d5:64:3d:c4:b1:1e:72:51:ed:c4:8b:71:
1c:0c:02:30:e3:20:f9:1a:a2:db:1e:51:af:64:40:16:46:36:
cc:20:0a:a4:c8:b8:44:57:14:80:b7:87:15:20:2c:b0:3c:d0:
a1:38:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:58 2025 by rpki-client