Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: udVwiphEaMcfaQQxCIfhKjytDaQ3vsiIwUtaKhGaGn8=
Subject key identifier: 76:29:58:A3:E1:35:CE:CA:97:C9:07:C1:45:72:0F:CD:6C:E4:88:6D
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 0199FD341A4C47F1D840EE78F5D232AAAF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0A44
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (hash: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=)
2: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (hash: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: G2GMcavXv6uujIgFiH+P1wFeCOpEvpkfsvJ7R0uTw6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1a:4c:47:f1:d8:40:ee:78:f5:d2:32:aa:af:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=762958a3e135ceca97c907c145720fcd6ce4886d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:4d:0b:3a:a6:bc:7c:7f:d9:ae:1c:6d:a3:
f6:bc:0d:9a:4e:4f:0c:91:87:eb:30:d4:d6:c8:64:
df:9f:68:2e:af:94:b7:f1:7a:a6:63:94:96:a4:38:
0c:ec:1e:a8:cd:fe:d2:1c:c9:8f:86:bf:89:e4:27:
8c:14:60:13:f4:d4:dc:7c:17:dc:81:60:bb:e9:67:
c5:99:64:e7:11:28:8c:9b:31:c7:1f:00:7f:c3:95:
72:ec:c1:2d:cf:af:71:0b:1a:59:41:d4:06:08:36:
81:0a:f1:4f:ed:52:91:9c:e8:45:5a:12:59:66:0a:
48:ab:dc:98:39:70:b1:ac:a2:7c:58:12:1c:a3:03:
12:02:c0:f1:2d:3c:e6:62:b8:bc:d9:c1:34:c2:58:
24:c6:76:1b:da:01:4b:c9:53:74:11:96:86:6f:c0:
d2:dd:41:c0:6d:c4:8f:d3:a9:aa:7a:44:1f:5b:ca:
1b:d4:d7:d7:7d:93:58:7c:7d:d7:8a:5c:bc:27:05:
fb:f4:b7:76:4b:e1:92:99:68:e2:8f:a6:3e:53:6c:
52:c6:2c:d8:7e:9f:be:bb:10:fc:d8:3f:2a:12:f8:
1c:5f:58:d0:b6:0a:8d:90:19:4e:1a:bd:bd:41:8e:
93:61:62:88:dc:ac:1f:c0:d1:e7:c9:65:4a:1c:01:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:58:A3:E1:35:CE:CA:97:C9:07:C1:45:72:0F:CD:6C:E4:88:6D
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f5:ca:5d:e6:3b:0b:4b:0f:d4:0b:83:b9:1d:c8:e5:f0:d8:
bb:b5:99:ad:c0:fb:dc:13:7f:23:53:7a:f0:5c:e1:19:74:97:
db:a1:59:84:d0:42:4e:79:e4:e8:6f:8e:7d:de:5f:9a:88:d4:
79:cc:2e:d2:0a:7b:87:76:c7:0d:1f:60:bf:84:0d:18:07:55:
2e:56:54:24:c9:05:5b:2f:f4:51:e1:40:f0:fd:28:c5:59:a4:
6b:d3:c3:76:f8:84:b6:f2:d5:5a:e6:f7:58:22:fe:25:e1:b6:
26:4f:10:fb:5a:b3:15:70:24:e3:e0:fa:63:0c:36:45:0d:36:
f0:66:f3:aa:4c:cf:54:26:4e:ac:2d:61:8a:8b:2e:fa:c0:07:
9f:a0:8c:7d:80:37:53:05:71:5b:3f:bb:45:f6:a9:52:df:0d:
40:0c:f4:e0:09:07:e1:62:49:cb:df:2d:17:67:ba:ee:38:c7:
ef:83:dc:c7:d0:00:d0:11:5e:d9:ba:3f:bc:81:5b:32:ba:d3:
d1:42:a7:22:a7:a6:0f:f1:6e:8f:eb:6c:e3:98:cc:b7:c7:6c:
b9:69:b3:24:b8:45:89:6c:8f:3c:f3:3c:a6:75:33:bc:ce:fd:
20:57:1a:00:5c:85:92:ee:64:b0:0d:f7:93:45:eb:89:64:f3:
db:a5:6d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:18 2025 by rpki-client