Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File: 40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier: SVWVRyzCMju8K5TJfqPiGAytw0O9aTCULXwyr1TlirI=
Subject key identifier: 9F:A5:67:57:A0:96:01:FC:86:7A:C6:EE:A8:DC:58:67:30:E8:94:AA
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial: 0199FD6B5B1454390E7699D1D7E102700FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number: 0527
Signing time: Sun 19 Oct 2025 17:01:35 +0000
Manifest this update: Sun 19 Oct 2025 17:01:35 +0000
Manifest next update: Mon 20 Oct 2025 17:01:35 +0000
Files and hashes: 1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: jc+nsEhZ1JTPyHj1QosSqGAT8xy/jZnFc8W+s2JDcf0=)
2: nZAWWVMmtESroqhC0PS3Wx64m1g.roa (hash: qpLibwBGLw83uqsHA4XHZBFcLuSXya9DooLiBQa7gxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5b:14:54:39:0e:76:99:d1:d7:e1:02:70:0f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Validity
Not Before: Oct 19 17:01:35 2025 GMT
Not After : Oct 20 17:01:35 2025 GMT
Subject: CN=9fa56757a09601fc867ac6eea8dc586730e894aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:d7:de:2a:48:05:d1:f2:3a:19:b1:18:5f:
a0:c4:e2:c5:5b:2b:f6:36:5d:96:41:4d:4a:87:b8:
9c:2f:b3:64:b2:eb:2a:74:29:54:e1:db:fd:10:8b:
b7:6b:ad:01:a3:42:79:ce:7d:63:dd:45:ed:c2:03:
04:a2:05:75:19:32:6f:e5:ac:33:cb:f8:7d:3a:70:
5c:ef:55:af:18:e8:fe:6a:81:c7:c8:51:ea:87:d9:
3b:f4:30:95:77:3f:2b:d2:8b:53:c5:1f:25:17:16:
8c:f1:03:24:7a:1a:9c:f5:51:89:0e:e7:8d:e5:37:
92:c1:ab:e5:32:9f:6d:cf:61:8f:a7:fa:75:1c:53:
48:cf:a0:c3:7b:cd:d3:0d:a1:34:9c:71:fb:d9:22:
b5:49:66:51:73:01:d6:5e:54:10:94:0b:d9:c9:77:
06:0d:67:86:9e:cf:b6:d5:aa:c2:88:1e:97:af:f4:
15:6c:dc:7e:24:dc:2b:30:77:64:32:de:9c:98:37:
37:28:e8:ff:6e:3f:03:16:64:43:6b:5b:cf:40:6e:
8c:92:33:66:94:73:bb:5e:f5:ca:f8:c1:80:46:d7:
82:d5:17:39:80:69:6c:ee:c5:da:d3:2e:e8:22:e5:
8f:5c:7d:c5:66:c1:f3:3c:bd:3c:7d:56:71:97:b5:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A5:67:57:A0:96:01:FC:86:7A:C6:EE:A8:DC:58:67:30:E8:94:AA
X509v3 Authority Key Identifier:
keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a0:68:c5:57:89:fb:6f:0b:54:00:8e:0a:f5:6b:b6:f2:03:
3f:bf:c6:40:3b:ae:7b:ea:55:81:b4:1b:3a:f5:2f:ff:30:0a:
0e:f2:66:71:c3:0d:10:cd:3b:27:b6:39:86:01:87:8e:95:73:
56:a6:f0:cc:e0:3c:ee:63:4d:f9:48:15:8b:c1:4a:5d:bf:50:
07:0f:20:3d:26:38:8a:18:68:11:93:cc:95:1c:5f:51:51:d3:
90:5f:f6:1a:37:3c:0e:08:b2:80:4c:1b:b0:9f:0b:6e:27:de:
6a:48:58:ca:1c:9c:23:6c:28:b1:95:40:ff:e5:45:fb:0d:65:
12:21:c5:00:80:4d:0d:8f:bb:a9:a9:86:60:bf:3e:01:88:d0:
5d:b5:7f:e8:d5:3f:f3:7d:52:ae:2a:15:7c:b3:6e:31:e1:70:
c3:69:51:88:b2:a3:f5:8b:85:4b:54:d3:af:79:93:dd:ac:1a:
ea:a1:ab:79:1d:f9:c0:fb:77:9a:45:d7:0e:06:ef:67:f6:4c:
4d:bc:3b:9d:cc:f1:e7:1c:ab:45:c7:68:e9:1c:bf:47:40:84:
b5:7f:7b:b5:d5:29:3b:99:98:0c:d3:53:19:b2:eb:22:35:ee:
b8:56:b9:6d:24:61:8f:1c:74:5c:71:41:55:aa:7f:e7:15:75:
a0:e2:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:16 2025 by rpki-client