Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: 3nQ+CIZLvRXd4Vqdj+KvxQrXfO/8KsJaIZYqGoQ5gQE=
Subject key identifier: 2E:F8:49:D6:69:D8:42:1A:30:B3:99:38:70:A7:8B:B9:93:33:C1:60
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 019A22F73C0C384A438770709C46A36DC0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 00:00:19 +0000
Manifest this update: Mon 27 Oct 2025 00:00:19 +0000
Manifest next update: Tue 28 Oct 2025 00:00:19 +0000
Files and hashes: 1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=)
2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: INvssHtPpiTC/+LITGw9epTJARjNkVw5cRrPROQPN3Y=)
3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:3c:0c:38:4a:43:87:70:70:9c:46:a3:6d:c0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Oct 27 00:00:19 2025 GMT
Not After : Oct 28 00:00:19 2025 GMT
Subject: CN=2ef849d669d8421a30b3993870a78bb99333c160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:79:4e:ab:88:b0:9a:1e:38:2b:2d:05:97:
cd:1b:60:1e:f7:3a:ea:19:78:fa:b4:06:73:66:97:
0f:d4:02:42:d6:a4:cb:86:8d:6c:0e:75:6f:b6:ab:
0e:ce:e2:f1:27:aa:79:2b:c9:bb:ce:99:6d:1a:0c:
dc:76:e5:07:21:50:30:ba:ee:d2:ee:58:a5:2d:67:
35:42:77:91:61:4a:bc:e3:cb:d2:8e:09:0c:05:0c:
a4:bd:03:fd:22:da:74:29:74:7d:97:9a:ce:20:a8:
db:e0:d7:e9:34:f5:e2:94:8f:26:d4:d6:86:0e:dd:
55:ce:31:21:38:19:50:94:d3:ed:5a:46:39:bf:c9:
05:62:1f:a2:64:be:51:e3:c5:d7:8f:a4:e3:1c:90:
4a:5b:13:51:c1:1c:ff:ad:55:9f:a3:ae:97:45:70:
ce:c6:71:c5:6b:dc:00:71:33:93:6a:bd:4c:9f:95:
dd:50:46:cc:78:b8:f0:b9:24:1e:ea:00:a0:50:38:
31:42:f0:41:88:94:aa:87:8f:8c:25:61:e5:47:e2:
96:1a:a2:27:cc:8f:dc:d3:34:f0:2c:7a:62:69:45:
1a:20:26:4e:54:39:7b:9a:3a:b5:b8:94:83:eb:c5:
a0:03:ab:3e:08:37:da:75:85:65:df:6f:e0:7b:33:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F8:49:D6:69:D8:42:1A:30:B3:99:38:70:A7:8B:B9:93:33:C1:60
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7c:8f:36:35:62:ea:03:33:2e:55:fe:6d:5d:33:aa:35:9e:
8d:9a:93:97:ac:62:f8:b6:26:c7:1e:09:d3:ea:87:ec:fe:21:
06:81:e6:9d:00:55:e3:29:94:ed:f2:9c:36:e9:f1:67:bf:1f:
f1:06:8a:93:b2:ce:5b:f6:52:29:cf:17:2a:94:5f:05:9c:be:
8e:25:86:0d:ad:23:c5:01:3e:fc:24:56:2d:68:48:d3:53:1e:
c6:33:7f:06:3a:8e:73:59:1a:06:ad:fd:ee:9a:3f:d9:08:eb:
4e:d5:10:97:ba:b3:94:0a:36:c5:a6:4c:98:19:f5:30:26:17:
cc:cb:93:58:85:8d:9c:b7:c4:e2:ee:0d:51:01:5a:b4:55:93:
08:a5:99:69:9e:d4:11:00:f0:71:47:26:34:1c:3e:69:b6:b5:
dd:a8:96:e9:c0:ba:ec:4e:f0:28:f5:ca:86:4c:6e:8d:fa:73:
fc:3c:c3:77:1c:9b:24:35:a4:1f:59:f4:60:97:c3:c1:36:1c:
60:1f:0a:59:4b:e2:84:1a:2d:c9:16:29:41:59:59:22:3c:fb:
e4:70:c6:36:31:f4:b7:23:19:23:7e:3a:d7:9e:bd:84:f8:99:
dd:68:a4:43:55:5e:41:79:31:c0:d3:8a:62:b0:88:3b:f7:19:
82:c7:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:31:12 2025 by rpki-client