Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: aGEbRj+whHnm0ERN2hPgx02U7NstlVUMX8UCgQzBNlA=
Subject key identifier: 84:1D:A4:6D:8C:CB:B7:27:48:5C:31:A6:FE:5A:C5:63:ED:40:C0:2B
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 0199E0734BBBDDB7E1110804C7DA8C767926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0D71
Signing time: Tue 14 Oct 2025 02:01:16 +0000
Manifest this update: Tue 14 Oct 2025 02:01:16 +0000
Manifest next update: Wed 15 Oct 2025 02:01:16 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: FlCS1JJoN9KaZg956tJiwgHljN5WZH3HJdLWABLobsE=)
2: AThGgouxKv8fc_GjPfk1KTqcYJ8.roa (hash: pBwVTlstihKQTv02WIHNb7H+18sdn98VZXnJD5bJ+rM=)
3: znDGyTFXHxgds03YiKxu855yeHM.roa (hash: PokYry9XBN7Hw+cBZPUeLE2rCoMZAI1GoWKG5QQBoBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e0:73:4b:bb:dd:b7:e1:11:08:04:c7:da:8c:76:79:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Oct 14 02:01:16 2025 GMT
Not After : Oct 15 02:01:16 2025 GMT
Subject: CN=841da46d8ccbb727485c31a6fe5ac563ed40c02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c8:98:b3:35:9c:b8:d9:e2:35:3b:fb:f1:a2:
36:a9:48:11:88:62:5f:ec:2c:a2:fc:de:82:f7:6b:
0a:81:77:3a:6b:23:ce:27:cd:d1:1b:c6:5f:7b:5e:
4b:68:b3:53:64:9f:dd:ba:72:82:26:ca:42:db:f6:
fd:23:5f:f3:ff:66:16:f6:6a:05:8f:f3:c8:4c:74:
00:63:d4:bf:81:00:e4:e9:45:23:16:c6:10:b4:50:
92:64:00:65:89:64:70:94:d0:61:0a:31:7d:60:49:
b6:2e:22:f5:37:af:6b:93:39:92:a8:14:54:cf:de:
c1:8d:da:56:14:6c:8d:04:76:53:d3:b6:8b:5b:26:
ea:18:04:5c:8e:83:3d:60:b8:ff:92:1a:25:54:eb:
ea:a1:c9:fa:ce:37:da:a3:c5:64:89:55:d3:7d:4d:
75:17:76:67:2a:68:d8:48:5f:4f:2c:f5:5a:1f:dd:
1f:42:6e:c1:02:4d:47:ab:1a:5c:0a:ab:5e:e4:11:
c7:3e:2a:96:02:5e:07:1e:96:3a:c9:e2:a0:02:7c:
6f:08:4f:49:fd:f2:03:5c:c8:76:98:96:77:15:47:
ea:b9:03:5d:8e:1d:00:5b:4e:f4:ff:29:79:a8:a3:
aa:ed:ac:ce:5d:53:c9:f2:a8:13:7f:b0:a5:d8:9b:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1D:A4:6D:8C:CB:B7:27:48:5C:31:A6:FE:5A:C5:63:ED:40:C0:2B
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:02:fc:4d:c4:e0:40:9d:3d:08:64:5e:6d:c6:cc:ed:34:d1:
a8:17:c2:5e:12:6b:d6:f4:6a:ae:cb:75:72:44:6b:87:72:ed:
63:d6:8e:81:2c:e9:8d:f0:24:75:5c:c5:4a:f4:ce:f4:f8:23:
c6:46:39:ff:99:39:93:3f:df:d7:72:7d:55:5d:ea:c7:1c:4e:
95:56:b3:8c:5a:15:1f:4b:c3:8a:99:27:5a:af:89:e7:ed:39:
32:15:d1:23:3d:87:ce:53:a7:07:c6:31:58:cb:c1:c2:c7:cc:
14:1d:02:e0:53:e8:4d:59:e4:c1:bd:74:14:93:2b:31:c9:bb:
9e:02:0e:f9:43:3b:3d:41:32:f5:5f:f5:4e:14:2f:91:79:ed:
1e:a2:5a:14:7c:a7:61:ae:a3:09:80:db:e5:b3:e1:8c:c1:a5:
be:d2:61:11:99:01:2c:74:30:2f:0c:a3:4f:1a:e4:20:71:a8:
7a:fc:0a:00:92:b1:97:c2:66:63:bc:9c:2e:26:82:86:e0:a0:
21:05:ba:70:17:9d:62:13:9e:da:b4:7e:39:c7:4c:3f:33:af:
5f:a6:70:1b:f1:8a:dd:1e:c4:15:fa:89:3b:9c:d6:91:44:6b:
c6:72:47:8a:91:d5:c2:30:1d:69:e9:65:aa:9e:e7:7f:7d:4f:
f6:59:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:24:22 2025 by rpki-client