Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
File: rTn6fNFTPal1zzmbms_-v-0mqes.mft (raw, json)
Hash identifier: uVLFM/QVlXqG5RMnSrjpGBuu9z8Pcz2dCU+HNtCpESM=
Subject key identifier: 3A:5D:B2:28:0D:67:89:78:A3:B0:E7:8C:0E:5C:23:1E:9C:F3:AC:C6
Authority key identifier: AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
Certificate issuer: /CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Certificate serial: 0199FC21AE4820601B6E87F61A7C049CDA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
Manifest number: 0D9C
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: CMlrDDFsYjHx1MPg2lyXpQ3DpFs.roa (hash: MsLGIx/t++duqgpMvVk0jo/ApATi4rMLAAgAWe7j6rM=)
2: rTn6fNFTPal1zzmbms_-v-0mqes.crl (hash: xPl/adG4Pq6iJqlhFV+SkeErrxeOVWtmaHWJ+ekIwbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ae:48:20:60:1b:6e:87:f6:1a:7c:04:9c:da:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=3a5db2280d678978a3b0e78c0e5c231e9cf3acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:82:eb:8c:32:29:88:30:6e:08:a5:77:d3:
83:c0:96:94:ce:f3:7b:2a:ef:4e:95:27:59:6c:4f:
38:30:11:03:95:29:f3:61:41:c4:c8:27:0e:aa:11:
b1:44:bd:cd:f5:98:e4:fe:b3:d3:94:20:b3:78:56:
89:83:0f:4b:dc:ea:10:6c:af:75:81:fc:25:8b:b0:
b9:16:fe:3a:3c:06:ba:8d:05:04:84:50:13:a8:25:
bb:3f:2e:11:24:7c:01:28:77:b3:d0:17:44:92:c2:
b1:3e:3e:78:5c:4a:1f:51:53:3a:7f:ed:60:29:0a:
78:13:56:ee:8b:45:cc:33:b9:69:db:c2:62:73:e2:
1c:80:dc:bf:d1:aa:ce:56:0d:fd:aa:8c:a7:b1:f3:
8e:a2:31:1f:ee:88:c2:d8:98:b0:2a:eb:f9:ef:63:
0f:01:19:82:20:9b:13:ba:0d:cc:5d:44:5b:d7:67:
42:c3:65:f3:85:5f:8f:07:ea:5b:38:c1:19:ab:3e:
34:d5:72:08:a1:5a:f2:9a:90:2f:8b:9a:e6:a9:7d:
17:15:3d:23:38:7b:b7:56:35:39:88:a3:c8:97:64:
5b:31:6e:dc:44:90:3b:60:b5:b9:37:19:ba:96:1b:
62:e1:ea:db:46:58:08:03:9d:78:7b:42:f9:15:9e:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5D:B2:28:0D:67:89:78:A3:B0:E7:8C:0E:5C:23:1E:9C:F3:AC:C6
X509v3 Authority Key Identifier:
keyid:AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:15:4a:e9:57:ee:0e:1e:61:dd:e8:90:68:44:e9:66:5a:d0:
71:7b:86:85:80:81:fd:fb:bf:2e:8b:70:28:8b:d6:69:1e:4e:
2f:1e:d5:6a:68:65:20:0d:5e:e2:39:1d:47:c5:9b:a5:63:03:
0b:be:29:78:45:91:21:8b:d4:6b:53:7b:d8:96:d3:b2:fa:f7:
9c:0b:04:25:e3:c5:a6:17:ae:21:b5:71:3f:e9:55:e0:66:85:
c3:c1:74:20:15:e3:35:96:d9:99:98:1b:82:fb:15:70:0f:62:
41:e1:2c:1a:da:79:d1:46:07:29:4b:c1:a3:dd:e4:c7:8a:e7:
df:56:8a:9b:17:0c:8a:bc:f8:66:57:fa:15:da:f1:c6:ff:1f:
86:59:61:e5:a3:ff:ae:03:6c:d2:0f:5e:4f:70:a1:e3:9f:ef:
7c:e1:76:cb:17:e7:71:4f:ab:91:84:86:98:68:96:be:22:7e:
ba:80:21:d5:98:ff:fc:be:b1:d3:c2:92:1f:ef:2f:ff:40:05:
27:ba:34:7d:e5:33:5f:80:d2:58:86:60:c4:13:44:49:d6:5c:
a2:bf:66:a4:0a:2d:ee:ee:05:ca:a9:6b:e6:7e:56:ed:2b:92:
1f:fd:d2:15:94:9b:56:a5:70:f6:0d:d7:40:53:19:79:2a:b2:
05:20:cb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:05 2025 by rpki-client