Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: +jtPrXdBOwQoPih3UnwNPNVjazyFULWXzzpiawDXQ7c=
Subject key identifier: FF:55:9F:1C:D9:24:E9:2B:18:1A:9B:02:DE:72:57:89:E5:05:89:8C
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 019A1B3D9ED8D9AB9F9B885EB0B76CBD53DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 12:00:14 +0000
Manifest this update: Sat 25 Oct 2025 12:00:14 +0000
Manifest next update: Sun 26 Oct 2025 12:00:14 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: nsVxqjNvi+Twk1P9dcIF6GzzYwOtLZX8+7kjWoWfMk0=)
2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:9e:d8:d9:ab:9f:9b:88:5e:b0:b7:6c:bd:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Oct 25 12:00:14 2025 GMT
Not After : Oct 26 12:00:14 2025 GMT
Subject: CN=ff559f1cd924e92b181a9b02de725789e505898c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:3f:7a:25:54:a9:ce:04:c6:85:61:ae:6d:
c1:68:d9:79:c2:27:a5:d7:30:f1:de:cc:99:67:b3:
d0:9d:82:25:20:42:03:fd:ff:b5:0e:82:d3:90:29:
c6:0d:b6:60:06:ca:23:da:62:12:87:8d:8d:b6:93:
02:e2:98:ab:06:34:26:e4:57:f3:ae:d8:1b:a8:04:
b7:46:7a:47:c3:1f:ff:e3:04:cd:bf:c2:24:88:30:
c1:2d:72:d7:86:2c:ef:f8:8c:a6:f2:d0:c5:a3:0d:
1c:f7:fe:a2:49:9c:f6:6b:57:4e:59:56:c3:f9:a2:
79:c9:34:c8:39:50:c0:fa:7c:87:3e:6e:9f:37:55:
e6:e7:0e:57:f7:55:e0:54:37:3e:95:4e:16:ce:10:
42:06:e7:2f:61:3d:53:a8:c9:47:57:c3:58:ac:dc:
9e:e1:8d:ea:f5:48:39:25:0c:67:93:3f:2f:68:70:
f0:af:ad:cc:a0:28:6f:da:99:fb:30:fa:3b:b6:68:
45:ab:4c:c2:ec:d6:1a:6e:f2:21:a9:f1:62:c0:6f:
34:3d:2d:06:63:9b:72:10:8b:ec:07:ea:05:a0:f9:
bc:c2:30:8b:ae:9e:cd:78:10:8b:8c:a3:70:41:01:
42:7a:b2:43:bd:cd:4b:33:57:c9:0a:17:26:3c:eb:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:55:9F:1C:D9:24:E9:2B:18:1A:9B:02:DE:72:57:89:E5:05:89:8C
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:de:05:4a:80:72:f0:aa:c8:09:54:59:6b:5d:09:af:9d:05:
68:76:d0:8e:0d:14:4d:14:f4:f4:24:a0:62:3c:67:5e:5a:48:
a2:dd:2f:69:e4:01:67:42:cb:05:90:26:ae:c3:0c:61:dc:90:
84:59:b8:37:6b:e4:31:7d:a3:e7:f5:c1:d0:7c:dc:a3:73:c2:
bd:19:13:3d:d1:39:3b:3f:c0:ca:da:82:0b:0f:99:8a:71:6d:
9c:36:36:59:69:3c:b8:01:e8:a3:cd:ed:b9:73:73:ad:e8:98:
ab:02:fd:a2:07:e2:bb:ab:66:63:b9:1d:de:3b:8d:e7:be:7f:
d5:fa:87:62:76:84:7f:e3:8a:a1:b3:ff:54:a1:6d:8d:b0:6d:
2a:eb:b3:cd:d3:e6:29:24:43:df:e1:55:af:aa:16:60:33:94:
71:c5:b5:f3:43:96:c3:1e:62:f3:29:b3:94:c1:16:88:ee:59:
b2:98:97:6d:10:63:15:0d:bd:df:c3:ad:ec:4e:36:5f:01:70:
1c:d5:62:ae:87:31:1b:b6:76:05:f1:60:40:82:b7:21:de:4b:
d2:f1:07:19:36:98:0d:5b:4e:78:54:16:14:b6:a1:c4:43:f4:
2f:6e:d2:5f:00:f9:d1:d5:6e:f6:02:5f:c1:e1:a3:59:61:a4:
21:77:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:12 2025 by rpki-client