Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: SFaRLv+X8iECAMQZeAS47eEBIlFryboyDbrL7EvZYEA=
Subject key identifier: 5D:A0:EF:61:7C:96:53:56:C4:65:91:79:AB:69:22:B1:6F:0D:E5:D5
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 019A0E952BFEBC50B65775258CEA2D1443A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 0345
Signing time: Thu 23 Oct 2025 01:00:48 +0000
Manifest this update: Thu 23 Oct 2025 01:00:48 +0000
Manifest next update: Fri 24 Oct 2025 01:00:48 +0000
Files and hashes: 1: mah4AWfXC0pa7vVaoRQiMo894vo.roa (hash: FRBDBjNrcarz6+cgNnWqdZSbwkqTq4d1ETUAtkcAHtM=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: HdRDU97wfttTjcwbt0MxfL6Dpy3P+verfWOTe3CHzAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:95:2b:fe:bc:50:b6:57:75:25:8c:ea:2d:14:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Oct 23 01:00:48 2025 GMT
Not After : Oct 24 01:00:48 2025 GMT
Subject: CN=5da0ef617c965356c4659179ab6922b16f0de5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:f5:ea:3d:b7:a5:ed:93:d7:70:89:3f:4c:
e6:fc:cb:15:cf:00:ab:5a:18:b0:4a:f9:d5:39:a0:
06:7e:9a:b3:d7:54:1d:e0:f0:4e:9e:18:bf:71:5e:
67:f5:25:c5:5b:9f:06:56:fc:73:e4:f5:8a:20:b6:
c4:18:45:56:4d:9e:12:59:e2:86:2f:6c:41:f1:52:
d8:c6:e0:8c:99:50:f7:53:32:e1:9f:75:5a:96:cd:
7c:5b:5e:b4:0d:a5:34:ef:16:ff:5f:58:83:d3:f2:
6e:e9:0e:dd:b5:8b:2b:0e:5c:6e:a3:36:c8:d7:3c:
5d:a3:b5:1f:28:21:f8:88:9d:31:52:1d:7e:81:ef:
c5:9d:33:37:1c:e5:17:49:ce:65:d1:a7:5e:a1:30:
c1:ae:38:2c:0a:d3:20:66:8a:a6:32:cc:b4:7c:db:
a9:fc:ae:46:c1:7c:38:d9:c5:9c:f8:c8:2a:8c:f3:
11:61:6f:28:32:d9:14:f5:10:37:da:e1:48:8a:39:
16:9c:7c:c2:b2:cc:f6:56:51:85:b4:e7:83:ae:30:
41:e8:b6:86:4c:f9:36:22:e3:5f:0a:ff:fa:99:e4:
3a:21:f3:be:32:73:51:44:5f:ce:13:9d:54:e2:62:
33:b1:c0:5d:24:9b:bd:c1:b7:73:68:7c:4f:37:a3:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:EF:61:7C:96:53:56:C4:65:91:79:AB:69:22:B1:6F:0D:E5:D5
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:e7:34:05:28:18:ac:37:2e:79:f1:ad:7c:98:8f:cb:73:
f8:e2:f3:65:62:d1:31:df:98:47:aa:a0:ef:01:40:46:b2:77:
de:7e:fa:78:ef:29:53:f4:0a:5e:b2:5c:83:94:9d:2d:19:41:
e8:88:bd:f5:23:19:7f:3d:73:e3:39:22:6c:2d:aa:5d:38:78:
9e:df:e1:01:b2:9d:0a:66:23:1e:1f:eb:b3:aa:e5:17:10:55:
5e:af:f1:33:bd:82:3d:05:19:9a:4a:e0:c7:ad:2a:38:b3:72:
f0:38:e6:a6:10:fa:34:42:e1:69:e3:1a:69:14:50:19:97:2f:
45:ae:bb:0f:03:93:c1:ea:37:a4:c7:07:c3:f2:0f:2f:a3:08:
4b:b6:18:9f:b4:5d:19:e5:d2:75:33:99:dd:aa:66:d7:a8:6b:
93:00:da:d8:fb:c6:ca:cf:01:32:7e:fe:24:cd:b8:c3:e1:44:
5c:40:6b:79:32:ab:db:f6:db:08:4f:ce:97:1b:8f:86:ad:1d:
45:84:90:25:24:52:6a:c2:eb:5d:3b:6f:af:20:82:1e:f6:85:
40:32:ef:66:ec:b8:bf:78:d4:67:6c:db:25:4b:fd:77:26:4c:
8a:b2:69:6c:61:8d:86:b6:a6:16:96:26:6b:91:b2:66:7e:8a:
f0:2e:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:02:22 2025 by rpki-client