Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File: 1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier: Myvt+LAvBxed+aG02ZzzDHXz/FZvGnObwdgb2Dq9MSc=
Subject key identifier: 50:CA:C4:31:00:34:A8:E3:CA:3B:97:52:5A:5E:83:A4:5A:C1:74:F1
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 019A060005C792A481314AD0A1233A4F9AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number: 12BA
Signing time: Tue 21 Oct 2025 09:00:55 +0000
Manifest this update: Tue 21 Oct 2025 09:00:55 +0000
Manifest next update: Wed 22 Oct 2025 09:00:55 +0000
Files and hashes: 1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=)
2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: uaHzOIbdVjtT/59zaI3qZ5ChcA+G6qW62migs4OiR0Q=)
3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=)
4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=)
5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:00:05:c7:92:a4:81:31:4a:d0:a1:23:3a:4f:9a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Oct 21 09:00:55 2025 GMT
Not After : Oct 22 09:00:55 2025 GMT
Subject: CN=50cac4310034a8e3ca3b97525a5e83a45ac174f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:ce:13:66:5d:5f:dc:0b:9b:28:35:e1:79:
54:e8:20:18:c8:43:02:a5:ff:4e:99:de:20:df:fa:
81:6b:53:4c:c7:de:34:16:36:d5:34:db:62:32:40:
b3:d0:ed:54:43:aa:e4:37:58:00:fd:97:5d:62:e2:
15:11:20:1d:46:c0:de:57:ae:b8:72:d3:0e:14:7f:
84:f1:72:5c:2e:b3:49:70:47:d6:ee:93:80:8a:48:
cd:3d:66:d2:df:e6:4c:ae:e8:56:57:72:50:d3:42:
8c:3d:3e:2a:8d:08:32:8c:30:67:ae:fa:9b:5a:31:
5a:5e:70:73:9b:bc:20:df:f0:9d:38:f1:1d:8c:21:
06:5a:26:d8:06:b0:2e:1d:55:3e:9d:03:08:bc:c7:
ad:19:14:13:28:08:18:4c:50:45:81:b2:34:7f:99:
08:83:88:a6:f6:b9:75:5d:b0:26:27:40:42:e3:44:
a4:e5:ac:be:61:d2:08:16:bb:a8:b1:20:7e:3f:59:
49:5c:f4:40:89:14:0a:c2:db:7e:9e:c4:ad:cc:f4:
98:e6:9f:77:57:86:f7:45:29:8b:2e:ca:c7:66:8c:
3e:60:25:8e:97:fc:09:7e:fe:2c:a7:cb:a8:7c:b3:
ca:bf:18:18:96:55:77:f9:ce:4e:ad:28:08:17:0c:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CA:C4:31:00:34:A8:E3:CA:3B:97:52:5A:5E:83:A4:5A:C1:74:F1
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ba:04:57:88:e7:3f:18:68:85:bf:0f:01:a3:a7:dc:44:24:
11:36:5f:f0:a1:57:21:4b:74:ae:43:42:07:d0:73:5a:9c:88:
4d:a0:bd:ed:2d:de:af:06:ea:51:2c:f8:f1:55:5b:1a:8c:8c:
7f:20:01:b8:5c:1d:a9:70:73:60:28:89:41:d8:f5:53:f0:ea:
98:4d:5e:28:ff:fd:32:07:4f:09:e2:28:82:02:26:dd:bf:e5:
35:4d:5e:57:ab:51:e0:bc:83:b1:d8:04:a1:bb:b7:33:54:c3:
2d:39:17:fc:13:c5:d0:04:91:75:51:dd:53:f9:e3:bd:3d:b6:
53:5b:92:3d:98:04:8c:e9:36:5b:16:ec:49:83:31:31:86:70:
e7:bf:08:d0:3e:66:ae:f8:20:b1:f0:27:73:4a:70:0d:fc:1f:
b2:77:fd:6d:66:5f:b5:b5:02:63:3e:de:f0:c6:bb:49:d1:40:
df:1e:ec:c1:ff:c8:dd:12:65:b5:64:ca:12:fa:ad:d6:4b:ea:
f1:52:53:16:d4:1e:05:99:42:8a:84:c7:2a:af:7e:30:ef:76:
44:ca:c3:fc:7e:44:a4:01:7e:2a:b1:68:dc:be:8c:f7:8d:b7:
ac:08:88:36:1e:9e:d1:8e:59:b9:af:d7:9f:cc:54:d2:57:aa:
71:b1:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:07:13 2025 by rpki-client