Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier: 7EZI0//UqflvRR7awGWCROzn2LtWciWJTN3cufJCxck=
Subject key identifier: 0F:93:2F:FC:58:C7:58:BE:C9:F2:0E:E2:A8:16:B2:4D:E6:8E:F8:F1
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 019A1496D229149459F5D883E7B19E9A576E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number: 07A9
Signing time: Fri 24 Oct 2025 05:00:19 +0000
Manifest this update: Fri 24 Oct 2025 05:00:19 +0000
Manifest next update: Sat 25 Oct 2025 05:00:19 +0000
Files and hashes: 1: K6Fu_XiBHvDsYhtG_--3fuPZg48.roa (hash: RNhrx5f19YH8DzgdDWPTLam4LAtgoJZsbS8JdFM0WN8=)
2: Ye2lhVqLlVViESIa1X_75ZD_K3Y.roa (hash: GkZd+LIfPke0Hk41OCtwwY1KwALgbjtXK8ppjf/on0I=)
3: ZTj2ZwJbmSTqqGkaHNeSOzaRucE.roa (hash: 5l3ZvQv6nxBKcaHiVSLVWyVMDLkrqNymK7dZBTsMLbU=)
4: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: RFwSxPQvaBmGCM6mJLgtR6Hml3YlF09De+965PLl9Bo=)
5: _Kr9E5MKxyuntA5czBSmI-XiWLk.roa (hash: yKCPcajH9aVqjBH/Z/+caEOZWjeFz70pUynCf4xQzl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:96:d2:29:14:94:59:f5:d8:83:e7:b1:9e:9a:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Oct 24 05:00:19 2025 GMT
Not After : Oct 25 05:00:19 2025 GMT
Subject: CN=0f932ffc58c758bec9f20ee2a816b24de68ef8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:b5:07:dc:e6:7f:d9:b7:99:3e:41:4c:90:
d6:54:3a:9c:c9:0b:33:47:f7:80:7e:8e:88:1a:c6:
66:28:9b:53:6f:35:4a:5c:b9:6d:5a:b7:35:22:34:
7a:b6:05:a0:f7:76:03:6d:f4:c9:4a:b6:13:62:26:
8f:c3:db:56:bb:3d:27:7b:3e:70:c5:91:1b:7d:4a:
5a:62:62:27:e4:95:16:92:b4:bb:30:ee:d0:2a:32:
0f:97:a5:f6:25:fa:65:9b:19:c3:94:3e:00:88:fe:
1c:26:a7:4f:c5:c3:9f:e8:92:4c:62:ba:af:0d:f9:
4a:87:bb:48:66:53:41:cd:5a:5c:00:2d:3f:3d:fe:
5c:f6:8f:8f:9f:55:26:be:c3:14:b4:bf:16:67:14:
72:c5:b7:e4:ca:6f:31:b7:0b:06:d0:50:7d:92:33:
43:81:10:da:cf:18:51:70:ea:87:f8:bf:f2:97:53:
28:75:24:ab:ac:73:d7:ee:a5:e4:cd:7c:9f:61:eb:
1b:ea:12:94:6f:49:fb:dc:af:77:ca:41:e5:e9:9a:
e8:db:58:57:4b:51:7d:a5:0d:ac:05:31:96:4d:f3:
8d:77:8c:eb:27:0b:37:bc:12:a6:b4:61:37:11:af:
fb:e5:23:66:1c:1e:2e:fc:83:44:ec:5a:ca:ce:d8:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:93:2F:FC:58:C7:58:BE:C9:F2:0E:E2:A8:16:B2:4D:E6:8E:F8:F1
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:e8:06:d4:d4:88:ce:74:a8:e6:39:8f:8c:f0:8c:f5:bb:
2b:94:13:18:93:d9:36:fe:6f:20:ca:f0:76:92:88:2c:5e:5c:
c7:42:7b:c8:2a:c9:52:7d:03:6b:7d:41:23:d9:d6:10:e6:1f:
ad:e0:84:22:60:57:99:b7:7b:42:f0:f3:5c:d5:62:c1:93:f6:
4d:05:27:5a:16:e4:2e:f5:1b:c5:be:61:21:e5:2c:21:2e:2e:
04:e0:00:2e:73:2c:78:c7:45:17:90:dd:2f:7a:65:1f:09:d3:
7b:4f:74:58:94:5b:14:eb:4b:d1:d4:52:ef:c2:35:2f:26:43:
3b:4e:1d:cc:22:a7:82:2c:72:ff:a6:33:c0:94:6a:d5:b1:0a:
5c:9b:44:71:59:ee:38:f7:d6:ed:7f:b5:f5:86:1b:bd:f5:70:
db:43:fe:22:6d:e6:17:eb:ae:d9:c1:cd:69:b3:5a:8b:22:a9:
e2:37:65:e6:85:0f:10:1f:42:87:d4:0d:b7:ed:d6:9a:3d:ee:
25:7d:0a:09:c6:32:76:01:89:83:86:68:9a:c4:08:e4:e7:8c:
07:06:90:f9:d2:85:b1:0f:6d:e4:e4:55:c1:56:86:da:e3:5c:
b8:e0:91:60:0c:82:ff:4a:c5:e1:08:d4:95:40:71:a6:b3:20:
47:f6:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:52:53 2025 by rpki-client