Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: VRGYfQt6KWsjX5/y3pL+3pDqxqqxK08uH/fDFvzn0Gg=
Subject key identifier: C8:7A:64:36:06:20:8E:2E:39:E8:29:11:79:82:E7:85:93:BD:34:16
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 0199FC58D1F3F134B691F56D7D1D784A8E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: o4cVfDf8bFvtT51LYEjkQXk2xQ9bxy9Kd0BxiM6oVgM=)
2: cbASN3fk18Tj9McpzsqARVXR-pM.roa (hash: aAGlbD4TDLIdbw1wI2aN8qbwooD1yBpWxGj+IoRRzpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d1:f3:f1:34:b6:91:f5:6d:7d:1d:78:4a:8e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=c87a643606208e2e39e829117982e78593bd3416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:80:73:6f:50:4d:d1:11:26:06:cf:03:1a:af:
f0:3c:97:c2:c2:a9:f6:68:62:41:13:31:34:c7:8e:
3f:e2:a3:dd:b2:3a:a9:ba:c0:eb:fd:81:28:89:65:
8a:ad:ff:a8:f7:a0:de:0e:9c:57:78:25:ee:f0:91:
0f:98:e1:88:38:45:44:f9:24:0c:be:4e:78:fb:7f:
5a:23:86:21:c5:b2:63:93:05:a0:f6:af:d9:36:27:
9d:2a:b5:e1:18:2c:0c:4b:61:11:b7:76:f2:2a:f0:
a6:72:ea:ca:c2:84:0b:a3:a2:22:5e:63:51:12:d1:
e8:26:42:12:a9:af:64:15:7a:56:dd:0c:89:ac:d7:
3a:3b:b0:49:cc:f2:e6:0c:ea:d9:85:3f:6d:3d:0e:
6b:fd:c4:05:a4:6f:42:68:bc:42:ad:86:78:fb:c1:
b9:70:b1:9b:bc:dd:e2:28:f3:9f:6f:8e:bf:0b:92:
a0:47:3b:9b:53:78:e5:3c:56:a1:d0:32:4b:ee:92:
ef:df:c1:ac:4b:65:24:a7:01:3b:25:c5:f3:12:5d:
bf:66:1d:c3:94:1d:a4:54:23:92:f3:0a:03:7a:0e:
d9:66:37:04:68:6a:d3:df:93:78:78:f0:a2:b8:c3:
e8:82:a5:e8:ab:4e:ab:22:ea:ec:c0:79:f8:3b:e6:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:64:36:06:20:8E:2E:39:E8:29:11:79:82:E7:85:93:BD:34:16
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:81:04:87:1e:c9:96:68:ac:e0:5d:fb:ea:9e:69:24:1d:cd:
7a:8b:67:b0:41:e6:91:88:57:3d:29:ef:15:50:e1:74:32:ee:
60:56:89:7f:84:c3:c9:7b:29:ba:b8:83:4d:e7:c3:02:e4:c0:
98:02:f4:a4:b8:e3:97:b4:41:a4:f9:75:98:26:25:4d:29:b7:
a9:31:40:0c:3f:0b:50:38:1b:c2:9e:9e:1a:70:70:d7:f7:1e:
56:c3:8d:45:71:72:90:21:ce:23:b0:53:fd:82:26:b5:81:f6:
67:75:f5:6a:e2:b2:6c:e4:64:af:a2:8c:ec:98:0c:e9:68:10:
dc:38:44:cb:b0:33:a8:2d:aa:4d:45:1d:20:ab:2d:a8:a2:bc:
2e:b0:b4:fa:ee:37:cb:ed:02:ff:38:8b:1f:77:a6:32:2e:ba:
bd:4b:a4:26:98:20:a2:ea:cb:2e:4d:6a:0e:9a:e6:74:a6:31:
10:ec:76:16:d4:39:79:ac:6e:3f:1c:fc:71:1d:ee:ba:f1:f1:
97:0a:b4:8c:75:b0:f5:a0:77:80:94:5a:88:91:03:7c:64:92:
0f:ed:26:5e:e6:84:f6:36:12:78:ed:f5:a5:71:1f:9a:3c:98:
46:33:18:87:08:50:92:3e:33:92:c1:6b:0f:c3:e7:db:08:0f:
cf:89:ff:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:07 2025 by rpki-client