Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: wU0fMUPS9LTt7vx43k8tqI3JuYBqab0bxfskl00kHY8=
Subject key identifier: A8:CE:70:61:70:AD:F8:93:2C:7A:C4:49:BB:02:0E:6D:36:19:93:14
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 0199FC8FC27FEF77A6BCB4DCCE0A5E8202F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 0F6D
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=)
2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: yfxSMucpSMQnLN/cTbBOPveLSpV6iCsPNT+lU9bNPxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c2:7f:ef:77:a6:bc:b4:dc:ce:0a:5e:82:02:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=a8ce706170adf8932c7ac449bb020e6d36199314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:12:3c:8a:5d:19:8c:c0:4b:3b:1a:ca:92:
6d:be:a3:65:04:41:23:e7:60:23:9d:9f:9e:47:0c:
c8:52:8c:db:2a:dc:9f:5a:13:86:d0:c1:b3:7f:a8:
d6:02:33:b9:cf:9d:33:f6:a3:a4:c4:ac:46:da:fd:
f5:68:68:16:1e:5e:b2:d0:98:cd:9f:97:32:d1:00:
22:b4:d7:3e:bf:d9:61:2f:43:b1:3f:dd:42:fe:6d:
e1:b7:50:41:f1:c9:8f:7c:80:db:6f:a9:30:2c:5b:
1e:49:78:e6:a9:da:cc:3c:13:7f:57:e2:60:4c:ce:
af:25:9a:81:85:c3:ce:13:0a:83:64:9b:d7:cf:d1:
cb:25:6e:40:54:61:d5:fd:56:83:38:17:f2:d5:ec:
40:d0:42:0c:d3:b6:94:5c:8c:6b:32:a7:5b:21:f4:
9a:aa:ed:02:8c:93:32:a1:7b:4e:54:96:1f:4c:7b:
75:4d:c8:c4:58:44:d9:c4:83:6f:7c:7b:2a:f1:12:
fe:07:de:14:2c:60:df:7e:a9:78:17:e4:f3:23:8e:
f9:ec:37:ff:a9:77:67:b5:c8:21:6d:d5:a9:a4:31:
e6:81:4f:fd:9f:08:a9:c8:9b:d4:7d:d8:53:ba:92:
92:de:3f:b0:fc:3c:a5:44:be:2f:a8:c2:e0:bd:53:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CE:70:61:70:AD:F8:93:2C:7A:C4:49:BB:02:0E:6D:36:19:93:14
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f1:1a:8f:48:ef:37:75:2a:42:bb:14:fb:ca:b2:31:ba:aa:
be:a7:e0:ff:ac:fb:c1:cc:37:1e:42:3d:6b:5c:19:be:47:52:
66:e8:72:1d:a9:87:5b:d5:81:93:4f:48:84:2c:a4:a4:84:0d:
97:bd:7f:9c:80:52:05:f3:a6:d1:95:1f:d8:50:21:a6:48:49:
4a:6b:34:5f:31:34:cd:37:6d:4c:d1:b7:7b:79:c1:90:99:38:
79:a2:b9:a0:bb:48:a8:10:e4:2a:2d:03:2e:44:22:c3:85:23:
14:d9:34:a5:33:0e:74:0b:72:cc:8d:54:6f:57:fc:16:eb:d3:
7c:73:4f:35:7b:02:61:8b:55:ce:35:9f:5e:68:3f:07:d4:1f:
3f:54:96:8b:df:91:2e:d4:54:fb:ef:a7:97:7a:ce:1e:46:8b:
bf:9b:04:aa:02:61:db:e0:55:00:ab:60:21:39:13:69:86:13:
fb:f5:23:1c:ee:ff:d5:58:04:ac:03:a5:66:b3:33:42:c4:22:
45:93:9f:48:eb:b2:2d:fb:5a:91:60:a4:c4:b2:6b:c7:e8:fb:
f1:11:b5:3b:87:16:3c:ff:9c:a0:8d:b3:f4:4f:51:be:b7:af:
94:69:97:99:64:11:54:75:1d:d7:93:2f:a7:36:c7:d2:40:cc:
9a:8a:ab:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:34 2025 by rpki-client