Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File: 40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier: jlYJRCGr8S2bkOgSm3zMooUcslpelHF8qiLAfyBjrVY=
Subject key identifier: 1D:64:F2:A8:DF:AC:0F:39:2A:4F:FB:C2:B4:A4:44:6A:4F:1E:2B:1E
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial: 019A73384F0225B7016D3DE16CD8DC5FCE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number: 0564
Signing time: Tue 11 Nov 2025 14:01:01 +0000
Manifest this update: Tue 11 Nov 2025 14:01:01 +0000
Manifest next update: Wed 12 Nov 2025 14:01:01 +0000
Files and hashes: 1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: 2ftJo+sYgzhpwACBosZ9Wt5Dsdt4RAJhY1dXHaJTrk8=)
2: nZAWWVMmtESroqhC0PS3Wx64m1g.roa (hash: qpLibwBGLw83uqsHA4XHZBFcLuSXya9DooLiBQa7gxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:4f:02:25:b7:01:6d:3d:e1:6c:d8:dc:5f:ce:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Validity
Not Before: Nov 11 14:01:01 2025 GMT
Not After : Nov 12 14:01:01 2025 GMT
Subject: CN=1d64f2a8dfac0f392a4ffbc2b4a4446a4f1e2b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:fa:9e:3a:4e:44:53:b8:5b:d8:d0:51:f9:
e4:32:0e:ff:28:49:e2:8f:20:43:0d:ae:f2:cf:85:
f7:d0:e1:41:8c:09:d5:88:98:8d:d1:58:fa:0f:e9:
6d:86:2f:71:02:a6:85:01:13:85:2b:c9:78:98:6e:
33:3a:3c:7c:1e:eb:78:be:c1:82:61:ba:da:c8:46:
18:04:89:f0:d2:07:90:45:51:ef:4c:4a:ad:01:72:
35:17:d6:83:4a:df:e2:cb:d8:44:be:21:33:cc:51:
0a:dc:c1:33:65:a6:29:78:d8:69:69:fa:e7:7e:ae:
9b:b9:80:fa:1e:8c:e6:10:a8:2e:9d:91:b9:fe:17:
df:83:f4:5f:09:b0:e0:7a:84:ad:02:74:4c:0f:93:
d4:8b:81:5b:5a:a7:e2:5f:25:34:87:15:6a:c7:a8:
1d:43:1b:fb:03:28:da:0b:81:15:6b:5d:bc:3c:36:
97:d5:6a:01:4c:ff:cf:c6:2b:b3:8b:32:97:41:05:
bd:63:6f:d1:bb:d0:9b:62:97:3e:82:5d:ca:09:05:
e6:50:e1:e3:94:e0:9e:40:0e:df:5e:fc:21:43:82:
5c:f3:18:ce:03:8e:d4:19:4a:7f:5a:91:77:c5:fd:
4a:de:a5:ab:eb:a7:f9:bb:71:68:4f:aa:ee:b2:15:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:64:F2:A8:DF:AC:0F:39:2A:4F:FB:C2:B4:A4:44:6A:4F:1E:2B:1E
X509v3 Authority Key Identifier:
keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:50:31:b9:b9:c1:32:dc:eb:fc:d0:5e:a7:e2:ef:f9:9f:7a:
bf:3f:bc:21:33:4a:7a:c2:d2:e3:b3:18:a4:56:83:95:b4:a6:
c4:cc:f5:e1:bc:bd:98:8c:9f:11:20:e1:54:8d:99:ce:1b:52:
27:5f:e9:83:db:98:63:43:a6:2c:69:ab:d5:96:11:45:11:25:
05:01:07:ab:21:bf:c2:d3:22:15:ee:d0:99:84:df:fa:eb:e1:
f4:d0:2a:b6:76:71:13:56:70:c5:ad:9b:cb:04:bc:ca:b9:45:
19:d1:ab:18:8b:d0:03:73:16:ad:ee:00:d3:57:6a:11:13:81:
d6:dd:b7:fb:31:86:a2:6e:ed:21:bd:bc:a0:93:38:d0:f3:72:
01:bd:13:a5:cc:d3:81:fc:2f:5b:03:b7:6f:6a:29:f7:83:37:
15:17:2c:57:eb:b2:c5:e1:4a:2c:af:6e:f5:e2:b7:f6:2e:8f:
19:0d:ee:af:f7:1a:a2:a6:6a:6c:ae:b6:01:61:05:93:11:1d:
e1:d7:e2:cf:1a:8a:73:ff:d2:70:6c:9e:83:d7:1f:5b:a2:ea:
55:d4:da:e8:ec:0b:a6:79:15:dc:97:c2:0b:d3:18:96:7e:37:
c4:79:20:e5:5d:40:2e:3a:d5:6f:be:a5:30:30:6d:2c:3a:ab:
f6:ab:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:09 2025 by rpki-client