Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
File: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft (raw, json)
Hash identifier: YKgYaclLe1L3f+/sds7rNmnYBHBHtNcKBHWBogLQbz0=
Subject key identifier: E8:01:C7:31:E4:24:F7:A5:89:C8:84:00:DB:DA:D1:30:F8:99:DB:4A
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 019A435EA96BCB57DA5A13DBBB42A53DECD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
Manifest number: 0A53
Signing time: Sun 02 Nov 2025 07:01:08 +0000
Manifest this update: Sun 02 Nov 2025 07:01:08 +0000
Manifest next update: Mon 03 Nov 2025 07:01:08 +0000
Files and hashes: 1: RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl (hash: VQY2pa+E4qtlPialtRFybViwB/qB5EJOj6KEod6iv+Q=)
2: Zg1oQlfTlRGn4mPizarntNQVifQ.roa (hash: VCNyDIITF1vB0XbRmzjr12dFWbtUbWzSK0fvTI9GVWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 01:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:43:5e:a9:6b:cb:57:da:5a:13:db:bb:42:a5:3d:ec:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Nov 2 07:01:08 2025 GMT
Not After : Nov 3 07:01:08 2025 GMT
Subject: CN=e801c731e424f7a589c88400dbdad130f899db4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:30:82:63:93:7d:a9:fb:84:12:11:ad:5f:
17:a8:4d:af:2f:c1:24:d4:d0:c2:cd:77:eb:db:ed:
1b:b6:a1:1e:54:54:9c:5c:47:8b:76:90:7a:48:b5:
41:91:d8:e5:3a:4d:8a:4c:c3:98:98:61:8b:00:2c:
74:f6:e6:41:91:59:f0:24:98:28:0f:b0:14:67:e2:
47:1e:e7:f9:30:9e:ee:58:2f:5b:56:49:59:52:f1:
84:73:10:61:c8:05:74:0a:a6:ca:0e:08:af:72:1d:
c5:61:e3:1e:46:52:4a:fd:87:d4:ed:af:bd:86:c9:
6d:e1:af:88:5f:fc:54:80:12:31:7a:f3:75:ce:df:
6a:a4:f9:f3:be:9d:38:41:d5:a3:4d:08:bf:bd:26:
61:ad:b6:c3:19:43:6f:f5:df:e1:b7:9a:85:6c:99:
8b:28:65:70:25:5a:db:cc:55:ba:ee:e2:fc:29:ce:
74:e2:6f:50:8c:bc:e7:ac:1c:84:59:aa:14:b4:79:
04:d9:d2:55:2f:40:40:28:6f:08:c9:ba:81:39:64:
d0:88:f7:2d:b8:07:94:65:63:91:67:39:1f:59:84:
69:e6:cd:81:0d:67:4a:25:fe:65:53:92:99:58:56:
92:a8:fc:af:8e:20:71:4a:1e:31:9f:eb:64:d3:cf:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:01:C7:31:E4:24:F7:A5:89:C8:84:00:DB:DA:D1:30:F8:99:DB:4A
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b2:12:27:cd:f3:84:ac:b6:e0:67:f4:31:02:c6:69:c2:f6:
c4:3c:59:e0:8d:15:33:25:c6:be:13:0f:40:ab:25:36:7d:8e:
a3:85:f4:70:39:41:94:5e:99:a5:d0:80:ca:1b:fe:e5:2a:36:
03:25:ba:99:4b:49:b1:e3:ac:34:9c:24:68:11:f0:11:83:e2:
2f:8d:ec:53:3e:20:91:33:f2:69:60:35:03:42:ce:19:db:73:
d4:53:84:eb:53:76:d9:53:4e:92:f7:f6:a5:cd:3c:1a:a1:bf:
a6:bc:6b:22:ba:6d:46:88:44:7e:e9:aa:3a:e6:cc:fc:4b:66:
4f:8f:24:70:23:8f:e8:cf:a7:73:03:62:14:c8:3d:ad:57:24:
ac:0e:31:0b:52:4d:d2:08:00:e2:f4:ba:6a:ca:2e:57:5a:e4:
3c:17:bf:20:65:6a:d6:f0:ef:df:8e:05:e5:aa:7e:ba:d3:7a:
31:46:c1:36:3f:8a:47:b2:d4:b6:2c:eb:d8:e5:7d:73:c0:de:
1a:86:79:c9:7a:64:55:33:f4:b6:99:73:5e:67:d2:44:8f:8d:
29:fd:ed:b6:10:88:39:73:74:3c:98:8e:e9:ed:20:70:66:79:
27:af:1d:4e:b6:49:f8:13:13:3c:25:2f:7f:e2:10:8f:4e:03:
3f:28:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 09:19:23 2025 by rpki-client