Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: WjqNhUqv9H2bDWpc3eT7k+NNr7gSTjLXDLmyo2iQWuE=
Subject key identifier: 4C:03:44:8F:0C:EC:71:E5:34:B2:F1:B5:60:21:FA:4F:95:9C:8C:DE
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 019A71B8DAF49BECAC24F2587F94779A3FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 12A0
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: eVHrERHK3JaSNWTjU6do0lBxqkf/5z2JBWXFeuX4EWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:da:f4:9b:ec:ac:24:f2:58:7f:94:77:9a:3f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=4c03448f0cec71e534b2f1b56021fa4f959c8cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:50:93:e1:f1:62:18:e3:8c:f5:6d:8a:76:
51:bc:3f:00:fb:25:dd:db:24:74:18:af:d3:62:b0:
65:30:1a:ce:67:e5:73:09:d4:de:d3:fc:c2:e7:0a:
1a:3e:5b:44:e8:7b:d6:7f:52:40:55:8a:7f:05:3f:
e8:3c:db:bc:86:97:79:08:c5:bb:c0:ab:ee:16:28:
64:82:f9:36:d4:79:6a:70:12:6a:20:10:86:63:ed:
65:b6:4b:97:89:0b:b4:dd:48:51:01:c3:98:c6:46:
23:33:cc:e6:fe:d3:f1:69:8f:07:26:ad:e5:9b:fb:
96:99:52:92:a5:01:2f:97:aa:93:3d:65:92:da:5f:
18:d5:50:80:b0:62:b3:92:fc:bd:c2:ea:ae:10:3d:
01:79:92:73:6f:eb:f8:d2:70:b7:95:ca:71:1f:90:
ae:01:ea:4a:c6:f7:79:af:31:9d:58:8e:f1:e8:f1:
fc:b4:4d:7a:bd:2d:97:ba:98:8d:a4:53:f5:d9:33:
ad:cb:66:7a:08:e8:1b:14:83:b9:85:d6:50:df:12:
de:ae:b3:43:1c:e6:7a:e4:8d:85:74:08:a7:4a:a5:
15:66:73:80:22:db:6d:ab:3c:13:20:3f:9f:62:fb:
a3:7a:94:21:78:43:d0:ce:c4:5b:29:f7:d8:46:da:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:44:8F:0C:EC:71:E5:34:B2:F1:B5:60:21:FA:4F:95:9C:8C:DE
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8b:c2:ea:bf:bb:07:57:af:17:f5:7b:be:c2:a3:8d:99:41:
91:a0:c9:de:b0:59:e9:be:b8:dc:7e:42:c6:fa:7d:ee:86:5d:
cc:4e:a3:8e:4d:0b:db:68:e8:70:5f:cd:7f:8b:69:fc:d0:1f:
9a:57:97:88:d0:ca:f1:fa:50:e1:42:80:4b:81:20:ac:31:3c:
31:e9:ba:a9:37:14:9d:6d:bf:a6:35:58:33:6a:0d:b6:f2:9a:
d7:46:1f:35:fd:c9:51:27:9f:fb:52:c4:6f:f6:29:27:94:70:
87:4c:6f:8d:5e:6b:fe:a4:82:b1:01:eb:03:62:3a:46:47:2f:
85:52:56:f2:c4:a5:7a:69:03:c2:28:c9:7f:7c:4d:8c:85:dc:
02:47:3e:3d:cf:6c:14:c3:ce:ed:5f:a1:de:03:df:8b:18:03:
34:c9:e4:d5:f2:8b:33:4d:92:8b:1b:b0:66:95:ff:9c:15:c4:
45:06:31:91:06:cf:0b:ed:d7:cd:6b:94:07:70:87:10:6d:de:
67:77:9a:a5:aa:21:89:a2:ff:90:51:0f:5c:38:89:49:96:df:
fb:a0:6f:29:27:53:0a:dc:ea:ad:d3:c4:6a:ec:24:5c:6d:fb:
58:bb:a0:cb:7f:94:44:0f:d8:3e:45:0c:13:1e:c8:f9:b7:b9:
85:39:85:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:55 2025 by rpki-client