Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: ni2Hh+HjGVlt5F5gD0a3K7OXImgeaI/Yt821Yn4Dh9U=
Subject key identifier: 08:8A:A1:7D:A1:40:7A:4B:68:50:40:CE:4B:04:8D:38:8C:D4:04:FC
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 0199FCFDB02D3DADEAC8B1207B4B89344468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 0946
Signing time: Sun 19 Oct 2025 15:01:48 +0000
Manifest this update: Sun 19 Oct 2025 15:01:48 +0000
Manifest next update: Mon 20 Oct 2025 15:01:48 +0000
Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: S9U8u7MVYSqvvyS48OaDbwXohEphA3ZiG2ur79hED5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b0:2d:3d:ad:ea:c8:b1:20:7b:4b:89:34:44:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Oct 19 15:01:48 2025 GMT
Not After : Oct 20 15:01:48 2025 GMT
Subject: CN=088aa17da1407a4b685040ce4b048d388cd404fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:f9:ab:a2:cf:68:53:df:ff:c7:10:c5:c0:
5f:06:3f:01:d5:ca:8a:1d:af:78:d6:d9:d0:9e:1a:
38:2d:d0:6e:26:61:d8:3b:b6:90:25:cf:88:08:5c:
de:9b:b9:c3:e4:e9:b7:eb:76:2e:e9:52:21:01:c1:
34:9d:2a:30:5a:a5:a3:29:8c:68:98:94:df:f7:5b:
57:6b:fc:d1:ac:c8:70:fe:4a:2b:83:29:d4:40:01:
d1:8e:14:86:9e:98:ce:90:28:4c:2e:66:2b:6d:0f:
2e:9d:b3:81:cf:8a:b3:4b:ff:3f:7f:b0:cc:4e:98:
c7:9a:8e:34:24:fb:25:f6:7e:f7:36:54:86:d8:b3:
21:54:53:14:35:97:11:33:f8:11:e0:1d:a4:3c:de:
ab:51:95:0a:f8:85:76:86:78:a3:fd:1e:12:ac:8b:
8f:5e:de:d2:a0:39:15:ca:9f:e8:c5:83:8d:d7:97:
0b:05:43:70:9b:bb:29:aa:2c:09:2b:0f:7c:a4:67:
d3:c3:fc:46:f6:64:66:7b:52:bf:15:da:da:a2:cb:
d3:47:4d:26:22:96:d4:65:7b:20:ac:72:51:8f:27:
df:36:c2:be:49:57:32:bf:32:54:dc:bd:b3:48:aa:
2c:9e:00:9e:f1:04:20:81:34:a5:27:a0:8b:c7:2e:
c0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:A1:7D:A1:40:7A:4B:68:50:40:CE:4B:04:8D:38:8C:D4:04:FC
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fc:2c:59:76:4f:ce:fe:f7:0e:2b:be:4a:5c:12:32:52:a2:
87:a3:33:b9:51:a2:90:d8:46:9c:9c:8e:3b:70:62:fc:d3:94:
b1:61:85:67:94:3e:72:3b:07:e1:38:a4:17:6b:f7:f0:de:2a:
0b:cd:bc:e5:4e:b9:bc:9a:39:8e:22:f9:db:e4:12:26:91:63:
f8:fe:e0:a9:a7:2a:ee:01:cf:40:17:29:4a:fc:5b:87:f1:28:
29:b1:87:21:22:9d:cb:ad:95:aa:79:9f:62:aa:66:ad:fc:54:
4c:e4:66:81:83:b8:12:1f:1a:55:3f:ab:1c:85:f2:09:41:6a:
c5:ee:30:46:91:c2:32:48:af:c3:22:97:94:a3:c3:e1:75:b6:
d9:a8:ff:19:ab:2b:cf:55:db:c6:82:e6:cc:fe:af:14:18:a6:
81:93:cb:7f:fd:3d:b4:3f:5d:b1:5a:d2:95:cd:b5:f5:ac:de:
72:db:a0:60:0d:1e:45:34:7f:26:6c:c3:da:a3:94:da:61:7f:
60:6a:ee:8e:0d:f7:90:db:bb:97:c9:ab:90:6e:81:fc:91:fb:
90:bb:e5:de:9d:ad:83:67:ae:9c:39:39:a0:8f:9d:0e:6a:65:
0f:d8:d5:09:2c:2d:86:e8:9c:a2:d1:d2:29:fc:6a:89:87:d1:
ab:45:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:31 2025 by rpki-client