Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
File: 43ipS5lk6l6fiwWThwK6WDFrUA8.mft (raw, json)
Hash identifier: URTL+DbioADGk+D3KdK3fkniCZxlSkH1quy30dctWzE=
Subject key identifier: E1:E3:B8:45:BD:76:BC:8F:B8:17:31:DD:8A:F9:8B:92:98:00:22:5A
Authority key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
Certificate issuer: /CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Certificate serial: 0199ED8A2051E24FF0F2DA3A8B2AE976BE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
Manifest number: 166A
Signing time: Thu 16 Oct 2025 15:01:16 +0000
Manifest this update: Thu 16 Oct 2025 15:01:16 +0000
Manifest next update: Fri 17 Oct 2025 15:01:16 +0000
Files and hashes: 1: 43ipS5lk6l6fiwWThwK6WDFrUA8.crl (hash: snl1UPA6KT+Plz6A6f89xTrUBSjQtl7oWxF//PaRzuI=)
2: vvNRTPRqU8Pnch_p0B0gqgkil_Q.roa (hash: nLSnGecWyvHzo3G0jRopUHVVK/4X1Sw9XUMyVphgWSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Oct 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:8a:20:51:e2:4f:f0:f2:da:3a:8b:2a:e9:76:be:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e378a94b9964ea5e9f8b05938702ba58316b500f
Validity
Not Before: Oct 16 15:01:16 2025 GMT
Not After : Oct 17 15:01:16 2025 GMT
Subject: CN=e1e3b845bd76bc8fb81731dd8af98b929800225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:2e:34:da:39:a8:29:20:3a:61:e8:4f:5a:
16:ba:db:dc:2a:2b:9c:16:63:33:61:33:55:f8:03:
83:78:64:27:71:55:14:19:fe:24:c6:d1:10:f4:86:
64:d3:73:d1:b0:93:fb:5e:fc:fd:c4:a6:18:d2:e8:
81:50:93:06:b7:f4:f8:8b:d5:80:3d:bd:e9:10:fe:
52:0b:43:7e:45:e8:90:01:84:31:9d:28:45:b7:84:
bc:db:a5:60:c3:40:71:1e:ac:4a:d2:ae:b4:28:76:
3d:59:0e:7d:41:e7:be:5a:b7:85:01:a3:1c:27:2c:
e7:32:f8:47:0b:a4:2f:12:43:da:80:9b:58:ff:d0:
6a:04:93:80:11:72:bd:d2:1b:a1:db:5c:20:4f:eb:
27:77:3f:c9:b9:93:93:8b:89:a1:33:14:89:c7:7a:
b7:19:5f:2d:35:57:91:9d:ae:03:fe:83:80:d5:e5:
5e:d6:9e:e2:73:14:99:27:a7:af:7b:4d:d6:5d:91:
ea:80:d4:ef:22:e0:55:4b:f1:33:5e:9b:86:54:7c:
59:9f:14:d6:b1:8b:d4:1d:22:dd:79:09:42:0a:90:
77:30:45:34:89:a7:b5:c6:79:70:d4:74:72:2d:c9:
1f:76:bb:83:49:e8:db:38:d9:73:68:66:64:fa:85:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E3:B8:45:BD:76:BC:8F:B8:17:31:DD:8A:F9:8B:92:98:00:22:5A
X509v3 Authority Key Identifier:
keyid:E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cf:3a:1e:52:39:a7:48:01:e9:26:f0:2b:9c:05:b8:f6:9d:
0e:fc:4a:df:af:30:01:eb:50:3e:58:51:2c:69:f2:9b:64:cb:
18:68:87:64:7a:9e:ac:af:50:16:73:56:08:86:99:43:0f:e0:
c4:f4:69:e4:e8:4c:39:9d:06:f4:35:64:bf:de:5b:51:63:88:
3d:79:e8:a7:ed:70:f9:37:ea:8c:27:1f:97:45:d1:95:be:03:
8f:30:21:8b:4b:cd:22:e4:7f:0d:e8:9d:99:13:95:02:ce:12:
60:d8:79:24:28:cc:47:6c:16:ef:05:05:d4:5d:5e:c4:ac:ea:
a7:05:1a:ca:cf:19:11:f3:81:3a:de:e9:ec:f8:63:fa:25:07:
22:c7:ec:6d:92:5f:bd:09:38:e1:9c:78:f4:29:51:91:0c:3b:
b1:07:e7:56:49:1c:89:30:a5:95:ae:dd:54:5b:07:8e:f3:da:
3e:26:3d:08:28:85:0d:92:cd:ec:dc:91:eb:14:37:3c:0a:bc:
39:82:c7:3c:ca:4a:5f:ca:1f:47:c4:12:98:12:45:ca:11:47:
69:bb:17:71:76:42:75:6c:ba:cb:76:7c:01:a0:7e:bc:a7:f8:
5a:0e:b9:5c:49:ae:f7:88:4c:d7:01:45:4a:99:0d:72:55:db:
f4:7a:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 17:37:25 2025 by rpki-client