Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: LwqmRflCcM4CH1bkuHPJ+bB9j/8yf7ohnP7XeWoT9lM=
Subject key identifier: 32:49:33:06:8C:2F:11:2D:04:E2:E0:F5:BF:2F:4A:23:9B:D0:AD:3B
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 0199FBEBB5403B36727F8C4FFCC3741CA25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 1611
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: Ob884S3fRZFimp3gG4iJtWnFFqMn5xn5BOvN6pxj8Hs=)
2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b5:40:3b:36:72:7f:8c:4f:fc:c3:74:1c:a2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=324933068c2f112d04e2e0f5bf2f4a239bd0ad3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:9b:d3:d8:4f:90:3b:bf:7e:f7:3e:ac:29:
c4:fc:3a:c9:1a:c3:77:c0:07:40:bf:7f:59:40:e8:
1c:67:af:6b:71:72:60:04:be:b0:da:37:28:aa:cc:
bc:1e:dc:7c:e9:d3:e2:86:cf:fe:82:aa:67:88:54:
a9:45:14:48:e6:b9:4d:22:de:37:b5:43:dc:36:eb:
4f:c8:4e:fe:f3:17:50:fa:10:a2:55:34:19:f0:32:
d9:e2:b6:e9:0a:be:a6:6b:98:aa:88:be:f2:ba:a8:
1d:f4:7c:bf:e4:ae:07:7c:31:0d:86:6c:1c:e9:d7:
72:f1:c3:79:d3:f6:1c:66:08:4a:81:da:0a:3f:de:
4b:04:60:d2:2d:a1:fd:4f:af:ca:68:88:b9:63:98:
98:76:9e:73:f8:56:19:58:dc:db:6a:db:e8:46:07:
fb:1e:8b:0e:67:9f:e6:c7:66:51:c9:89:d6:52:5e:
fa:eb:73:fc:c6:d8:b0:08:54:fa:2e:ab:33:77:71:
9c:b8:f4:69:01:4c:94:af:ab:15:8a:7f:ec:55:b4:
de:2c:c3:4b:9b:be:62:0c:49:dd:48:71:9b:1f:e7:
99:a4:36:5f:15:80:fd:a9:db:ad:a2:53:7e:fc:9a:
df:4e:f7:55:7c:59:a6:85:fd:59:2d:42:27:ec:c7:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:49:33:06:8C:2F:11:2D:04:E2:E0:F5:BF:2F:4A:23:9B:D0:AD:3B
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:dd:d4:97:fb:77:28:7b:9e:34:48:61:59:b0:97:46:46:47:
09:9c:07:fb:2f:5e:c4:2d:9d:b5:12:61:ea:03:ad:a1:ee:84:
ca:c2:fe:55:d9:c2:3b:51:e2:e2:16:c6:58:6f:f7:0a:c7:b8:
00:95:52:9c:dc:d3:97:b0:b4:42:a7:d0:1f:b7:8f:92:1b:87:
1c:1e:3c:9a:5b:af:75:a6:bc:90:a4:89:4e:26:ce:77:46:36:
38:69:67:47:0e:cb:13:0c:a6:9b:dd:99:8e:06:13:cb:8a:05:
fe:48:93:9d:8d:62:7f:f8:2a:02:42:af:be:5a:6e:3b:4d:84:
2b:f0:d0:2a:65:fb:31:61:bd:ed:9e:1b:ee:47:88:46:51:27:
8f:f6:02:88:e2:d8:a7:eb:6c:89:f0:0f:a9:bd:fb:b6:35:c3:
2c:9a:76:96:25:e0:f1:49:a1:1f:8f:91:9a:72:8c:1b:29:03:
9a:8f:31:b5:2e:70:c2:e6:f0:79:26:2a:b1:53:94:13:a9:2a:
21:a2:c6:b8:77:85:60:ed:05:1d:3d:22:21:bb:bf:f2:91:85:
4c:da:69:da:d3:82:c3:e9:41:90:4e:9b:1b:57:3e:6f:ac:3f:
64:c6:39:78:c0:23:28:89:4b:05:f0:a6:f4:5e:f8:bc:f9:a9:
e5:87:94:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767VAOzZyf4xP/MN0HKJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNzg2NTg3YWQ0NzIwNWE4MTEyOGU1NzhjOTBjYWVlMWU0
ODgyOGIwHhcNMjUxMDE5MTAwMjMyWhcNMjUxMDIwMTAwMjMyWjAzMTEwLwYDVQQD
EygzMjQ5MzMwNjhjMmYxMTJkMDRlMmUwZjViZjJmNGEyMzliZDBhZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15ib09hPkDu/fvc+rCnE/DrJGsN3
wAdAv39ZQOgcZ69rcXJgBL6w2jcoqsy8Htx86dPihs/+gqpniFSpRRRI5rlNIt43
tUPcNutPyE7+8xdQ+hCiVTQZ8DLZ4rbpCr6ma5iqiL7yuqgd9Hy/5K4HfDENhmwc
6ddy8cN50/YcZghKgdoKP95LBGDSLaH9T6/KaIi5Y5iYdp5z+FYZWNzbatvoRgf7
HosOZ5/mx2ZRyYnWUl7663P8xtiwCFT6Lqszd3GcuPRpAUyUr6sVin/sVbTeLMNL
m75iDEndSHGbH+eZpDZfFYD9qdutolN+/JrfTvdVfFmmhf1ZLUIn7MevVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJJMwaMLxEtBOLg9b8vSiOb0K07MB8GA1UdIwQY
MBaAFON4ZYetRyBagRKOV4yQyu4eSIKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMt
MDdjYzQ2ZTYzYjUwLzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iYjZhN2MtMzFhNC00ZDMzLWE4NTMtMDdjYzQ2ZTYzYjUw
LzEvNDNobGg2MUhJRnFCRW81WGpKREs3aDVJZ29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACN3Ul/t3
KHueNEhhWbCXRkZHCZwH+y9exC2dtRJh6gOtoe6EysL+VdnCO1Hi4hbGWG/3Cse4
AJVSnNzTl7C0QqfQH7ePkhuHHB48mluvdaa8kKSJTibOd0Y2OGlnRw7LEwymm92Z
jgYTy4oF/kiTnY1if/gqAkKvvlpuO02EK/DQKmX7MWG97Z4b7keIRlEnj/YCiOLY
p+tsifAPqb37tjXDLJp2liXg8UmhH4+RmnKMGykDmo8xtS5wwubweSYqsVOUE6kq
IaLGuHeFYO0FHT0iIbu/8pGFTNpp2tOCw+lBkE6bG1c+b6w/ZMY5eMAjKIlLBfCm
9F74vPmp5YeUhg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:52 2025 by rpki-client