Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: AAnhhd1YtZh3cdufqhJ3HK4dUCxNoplcMsc1vfe2peM=
Subject key identifier: 42:53:AB:64:02:01:0B:6A:8E:DE:75:C2:48:D6:5A:DF:12:7A:85:97
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 0199FBEBE9DEED1A3CDED9214E20C29C7328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 1612
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: 9QU3qOY0rjNU8i1stOj292A2c4Fz8tu8JTxqU0qpxso=)
2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e9:de:ed:1a:3c:de:d9:21:4e:20:c2:9c:73:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=4253ab6402010b6a8ede75c248d65adf127a8597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:5b:94:97:05:43:93:d4:be:10:2b:de:aa:
ef:e0:e7:8a:92:72:46:d1:85:47:a2:9a:b2:ec:47:
10:98:5a:c8:a1:99:e1:de:78:b7:f7:41:4d:31:d8:
c6:49:e3:fa:84:6f:8c:60:71:a7:8b:47:39:91:5c:
28:db:bd:11:e9:c2:88:5c:64:f4:1f:7e:9b:f2:74:
e5:5f:8a:bc:e8:4c:92:04:9a:c6:bb:c9:c5:d1:df:
ac:e4:fc:47:b1:37:b1:c5:13:cb:35:3e:cc:df:01:
14:3a:ea:30:76:aa:a3:69:63:2e:5d:55:c9:8c:83:
3b:2c:b9:46:23:07:bf:8a:4a:12:5e:88:9c:5e:84:
f8:ea:44:21:8a:d5:09:cc:6e:e4:11:c1:b6:ae:ae:
b2:7c:f5:e5:75:5a:fd:fa:5f:c4:7c:d7:cd:c1:26:
52:c0:bb:f3:9b:06:ae:d4:cd:39:62:d2:d0:12:74:
72:7e:40:c2:67:91:17:f5:5e:10:f0:0a:9a:64:32:
84:d6:dd:ce:04:7c:b7:46:46:89:2c:2e:38:5e:c0:
01:f0:6e:89:bd:27:cb:fd:54:e5:2a:a0:f9:d3:48:
3d:26:af:04:17:49:45:d7:be:3b:a4:c1:84:96:bc:
cb:75:41:30:bf:98:79:a8:66:5e:91:36:13:cb:11:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:AB:64:02:01:0B:6A:8E:DE:75:C2:48:D6:5A:DF:12:7A:85:97
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ce:f3:8d:8d:47:6c:c4:ff:45:a8:8d:4e:20:0e:6b:e8:35:
c4:a1:c0:e5:5f:bf:12:ff:03:2e:b5:12:6e:50:5b:50:c9:9c:
c1:31:b4:b8:a2:8b:cd:96:3d:1c:35:f0:87:46:73:47:83:34:
dc:dd:b1:86:ca:63:3b:1a:49:df:4b:78:10:b4:18:9e:2f:38:
6a:0c:67:81:10:8e:4f:5e:62:cc:dd:76:93:05:fe:ce:bf:d8:
3e:16:0b:2b:9e:9a:ee:c6:af:04:97:f8:8a:45:23:83:f2:ca:
b1:73:39:e2:e0:44:52:4b:7d:45:9b:96:ab:5d:bf:4c:fd:b1:
f8:0f:56:ea:51:4d:0f:0f:c1:eb:ea:52:95:a2:10:70:25:72:
7e:69:da:fd:fc:49:73:9a:66:2f:6a:79:67:77:64:e3:a3:50:
9c:a6:09:71:61:df:72:1e:7e:00:8a:ba:03:0d:82:11:d5:20:
66:d2:84:58:23:ea:80:92:61:eb:e1:2e:14:2b:96:4a:a0:bf:
51:4d:ed:39:50:81:d4:0a:aa:f0:5f:d0:1c:96:02:9b:70:41:
33:62:5c:e6:34:1a:90:4c:1a:11:0b:3d:ca:6f:e9:01:f2:59:
24:53:c8:42:0f:83:f3:75:dc:51:a6:2e:29:c9:c1:6f:cf:c9:
3d:03:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:16 2025 by rpki-client