Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
File: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft (raw, json)
Hash identifier: wJhjF1caVcDztPq0LS+zgRsEZU+0rqdguPWSYxwjoTc=
Subject key identifier: 46:BA:A3:38:1F:7B:FA:EE:9D:8D:3E:21:C6:6F:09:F8:36:83:C5:55
Authority key identifier: 0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
Certificate issuer: /CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Certificate serial: 0199FC2182AF72F5780FDCCC6A882D25715F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
Manifest number: 064B
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: C34tazcwNVlNSOFrV60y2M-X8qQ.roa (hash: b9R8fiAJDWhh3NSy/h3YHxxWL9I8BBsmTu4q52FZ+Mo=)
2: Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl (hash: 9gzrJQdn5E9RLnX7Hy5H5pHZpv+20i5YVH6Ew+BxqQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:82:af:72:f5:78:0f:dc:cc:6a:88:2d:25:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d1edc0cc697742cf47364bb1d11b8ff808eae
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=46baa3381f7bfaee9d8d3e21c66f09f83683c555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:58:f7:cc:96:b8:90:b3:22:2e:86:95:57:
70:3f:36:2e:a7:bb:76:d3:39:cb:67:d4:79:d5:ca:
c6:59:13:93:a1:45:c5:54:3f:56:95:83:16:61:f6:
9d:ba:21:cf:94:bf:84:86:a5:86:3b:71:0c:56:b0:
f6:c9:48:f2:3e:10:de:0d:ed:fb:11:64:8d:e5:8c:
11:f6:98:d4:6a:da:ad:6c:43:66:b0:30:3e:da:d4:
61:01:76:b6:85:5d:fc:e0:f1:5d:78:75:f6:49:38:
e9:c1:1b:a0:7d:3e:78:87:9b:f7:68:c5:79:0a:96:
33:59:fe:7c:37:2f:10:a7:5a:c0:22:d8:83:39:a9:
c9:01:dc:26:09:3e:9e:c1:2f:a9:8b:2b:1c:93:d6:
9e:be:42:3a:6b:2f:5c:c6:b6:9b:38:13:70:36:07:
8c:7c:7b:10:0c:cc:58:55:e1:b9:50:7b:f9:1d:92:
fe:20:30:0e:3e:b0:f4:ae:e4:25:c2:c1:c1:1b:e0:
76:6b:bf:b2:c1:ff:6b:16:93:ab:5b:82:86:51:c5:
78:b3:dc:3b:0a:78:f2:6f:26:b4:cb:6a:10:25:41:
46:18:37:f2:90:3b:c0:4a:11:dd:a6:27:1b:04:d5:
e9:36:7b:7b:36:c4:43:f8:9c:6e:79:09:2e:d6:da:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BA:A3:38:1F:7B:FA:EE:9D:8D:3E:21:C6:6F:09:F8:36:83:C5:55
X509v3 Authority Key Identifier:
keyid:0E:2D:1E:DC:0C:C6:97:74:2C:F4:73:64:BB:1D:11:B8:FF:80:8E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f598b8-3a2f-4155-95fd-5f8167024968/1/Di0e3AzGl3Qs9HNkux0RuP-Ajq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:28:7c:ed:2d:ff:02:c2:cd:f8:9a:f3:1e:79:a6:03:16:32:
5c:59:e6:14:7b:28:bf:69:ec:78:b9:55:e2:3b:a4:74:c5:5d:
93:7a:45:40:9e:00:25:8c:b9:bd:57:05:c3:24:cd:e3:bf:14:
8a:3e:db:20:53:21:d0:12:5a:e6:d8:fd:35:15:8a:cd:06:10:
d2:86:a1:c3:f5:8c:6a:c3:b5:0e:10:91:f8:27:9e:83:c9:0b:
c7:60:57:0e:2a:ff:34:2b:43:3a:87:51:55:5e:89:fd:45:e1:
db:07:b2:2b:df:c5:4f:bc:49:5e:03:c5:04:de:e3:e8:2b:72:
82:e8:38:8a:b2:14:f6:64:83:79:bd:c2:21:0e:5f:6a:b6:5e:
e9:26:7b:f1:10:44:0e:fd:96:ff:5f:a4:39:b7:26:66:cc:47:
5c:4f:1e:d0:db:a7:da:f9:1d:ca:54:c6:10:9d:25:5c:dd:69:
40:ce:07:7c:60:44:1d:7a:f9:06:d9:2c:3e:cb:80:c5:99:c2:
e2:6d:37:8f:2d:96:23:31:cc:2f:58:01:31:78:8d:50:05:86:
f2:a4:4d:a5:03:a0:82:71:d2:51:55:80:72:73:82:7b:7a:26:
05:46:42:b9:f3:ce:6f:91:6b:34:b6:c3:d0:9c:88:0e:24:d8:
9a:e7:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:15 2025 by rpki-client