Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier: Qm7s042aji0r0f4lpQRgx++nHK6Wyi7R7XvLlWJJCD0=
Subject key identifier: BA:39:37:AB:76:84:C4:34:B1:6C:0D:EA:24:01:4C:FC:D7:AD:CB:ED
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer: /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial: 0199FAA0FB24620EB1100F319E04D8CC4BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number: 41
Signing time: Sun 19 Oct 2025 04:01:17 +0000
Manifest this update: Sun 19 Oct 2025 04:01:17 +0000
Manifest next update: Mon 20 Oct 2025 04:01:17 +0000
Files and hashes: 1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: r7mpXFrqS2kqq6jasMiCbwkoafNbCDM+ITwGvreH/kU=)
2: Ito4OsKdOYk_0Vr5IgYqw7oQP_k.roa (hash: t2JFfBVsPDvYQ98nc/aNec9j3fYa1vwbxO3EDDVKTUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:fb:24:62:0e:b1:10:0f:31:9e:04:d8:cc:4b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Validity
Not Before: Oct 19 04:01:17 2025 GMT
Not After : Oct 20 04:01:17 2025 GMT
Subject: CN=ba3937ab7684c434b16c0dea24014cfcd7adcbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:3f:43:fe:c6:7f:f5:81:ce:3c:34:a2:41:
24:3c:b8:c7:f7:69:27:2d:41:2d:d4:e0:e7:43:c4:
50:5a:d9:c5:5c:d5:9c:b0:57:e4:70:90:62:2a:22:
9b:44:0c:7a:62:c5:09:40:dd:05:bd:00:08:21:07:
b7:ea:50:34:4f:8b:bc:48:4e:21:65:7f:e5:b9:a6:
96:45:94:a2:2e:4f:e9:25:3d:db:36:b0:ff:75:62:
04:bb:38:05:27:e2:56:69:9f:18:5a:7e:de:8a:6b:
89:de:20:e2:22:28:44:26:34:89:d1:c6:bb:6f:22:
0b:c7:d6:8c:4a:92:e1:db:a4:60:0e:42:53:ad:34:
7d:b6:ba:29:45:a0:b6:5c:f8:16:35:07:46:af:3c:
5e:56:37:6b:4f:f3:9d:5b:ca:4b:3b:a0:63:ba:ff:
3c:1a:08:49:64:a1:4c:a7:4b:66:10:13:c5:30:7b:
1d:83:50:a1:5d:d8:83:ef:da:c6:a7:81:79:19:a3:
4e:56:b9:7b:69:96:dc:c7:7b:10:08:cf:c1:05:a0:
ff:a6:c3:4c:01:f6:a8:63:ad:cb:fe:bc:ec:2a:71:
a0:94:fa:d4:03:12:9c:d0:f1:c9:0d:37:1b:80:43:
40:3d:fd:87:c1:e9:15:27:93:9f:e9:a0:e7:de:ac:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:39:37:AB:76:84:C4:34:B1:6C:0D:EA:24:01:4C:FC:D7:AD:CB:ED
X509v3 Authority Key Identifier:
keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:48:a8:62:3a:f3:51:6f:cd:f2:64:f1:ab:c8:78:20:06:e4:
02:50:27:d7:46:f6:8f:42:f6:78:f3:11:dd:36:1f:50:a4:92:
49:41:a4:88:59:aa:08:6e:ae:a9:01:10:5c:ee:4a:13:55:40:
00:45:52:7a:37:e1:c9:dd:a0:24:2f:27:62:f9:52:68:b6:e1:
f3:cc:9d:70:77:6a:75:99:d8:8c:10:be:be:3e:4e:e3:3c:a2:
1c:e5:f9:e0:f2:aa:c8:ab:e3:3f:43:44:88:ea:19:8d:24:5d:
c8:e7:0d:0a:a0:ed:53:26:d0:4e:73:fc:7d:bf:43:b2:bd:88:
2d:e5:12:c5:d4:c6:2f:f9:25:cd:1a:75:35:cb:0b:2f:80:2d:
96:58:79:90:78:38:ab:69:45:ba:3a:d5:ad:67:a6:f3:c6:71:
d8:d7:f9:cc:e2:09:15:78:9f:df:c8:05:aa:9b:3c:d4:75:0f:
4b:2f:fb:0c:38:70:85:7c:83:db:3f:ca:90:8d:f6:0c:13:e8:
a8:83:5b:87:bf:6c:56:8a:b6:fb:34:71:07:4b:ba:c0:49:a8:
21:40:cc:01:36:69:ff:78:2b:9e:15:84:10:cb:24:18:9b:75:
86:8e:91:f0:d9:5d:50:d4:16:89:de:1a:89:a4:1a:d0:a6:e0:
2e:ee:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:31 2025 by rpki-client