Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File: p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier: mS2WYipYq3PWsIUHvDcXFTiIJ9sxJ3/197T72hGRz3s=
Subject key identifier: FA:0C:89:06:66:BD:DA:AB:5D:CF:5C:33:2A:74:85:A5:78:1C:69:1B
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer: /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial: 019A255407B20EEE49DD332B2E210FC01927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number: 1449
Signing time: Mon 27 Oct 2025 11:00:55 +0000
Manifest this update: Mon 27 Oct 2025 11:00:55 +0000
Manifest next update: Tue 28 Oct 2025 11:00:55 +0000
Files and hashes: 1: 7FOJ9WC3T7pHyWWCuyPjcheMLEQ.roa (hash: nKrGLaOlKefy6/k/jC1QdJsWJ/jAJ+vYp4Lo3APL+Ec=)
2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: VR2HCZwZ8cwo6Xh52EIqFZCvsltNPns/yFg+XufOfZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:54:07:b2:0e:ee:49:dd:33:2b:2e:21:0f:c0:19:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Validity
Not Before: Oct 27 11:00:55 2025 GMT
Not After : Oct 28 11:00:55 2025 GMT
Subject: CN=fa0c890666bddaab5dcf5c332a7485a5781c691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:3a:dd:32:00:95:20:db:78:6f:dd:0c:3b:
15:f2:db:68:38:a8:3a:76:c5:8c:8a:a1:02:33:01:
84:38:fc:35:b6:5b:c9:ef:82:bb:61:1c:11:26:5a:
ee:b7:e2:00:cf:26:28:4a:6a:09:44:34:0a:30:82:
8c:e2:27:d2:50:ee:65:60:09:de:17:b6:8b:57:63:
ef:d8:aa:68:49:83:5a:84:32:62:fc:32:83:51:ee:
d2:7f:48:7f:81:be:c7:16:28:a8:20:29:02:46:fd:
08:54:4a:07:22:f5:95:6f:e3:ec:05:66:b5:ad:4b:
7f:aa:e7:af:01:b4:22:34:21:f1:40:ef:af:a5:fd:
fc:91:c9:70:61:f7:70:bf:71:11:d6:88:73:7f:21:
f1:27:5d:33:f4:1c:34:1c:86:3b:1b:96:6d:83:a4:
03:3e:42:28:95:b5:68:b3:fb:d1:ff:d4:b6:e9:e6:
ee:d3:6b:10:fb:8e:68:b7:dd:68:14:49:96:0c:39:
64:2d:c3:0c:2c:91:b7:15:83:ac:0a:0c:12:d5:cc:
94:ed:7f:4a:c3:39:95:a9:83:50:32:dd:6f:9a:7a:
7a:55:66:83:e8:c9:7e:6e:a3:99:78:c1:f2:87:2a:
22:87:46:ab:0f:64:78:1c:3e:db:d6:b6:67:b1:9f:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:89:06:66:BD:DA:AB:5D:CF:5C:33:2A:74:85:A5:78:1C:69:1B
X509v3 Authority Key Identifier:
keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:85:6b:ea:39:6b:f4:1f:ee:a7:fd:33:40:2e:dc:08:4b:4f:
46:1a:a4:26:e5:fb:bd:61:6a:76:4d:55:82:96:94:ba:7e:9b:
cf:d5:8f:9b:5d:40:15:77:75:18:dc:52:3f:c7:27:a9:ed:f4:
19:ac:bc:18:20:d0:60:17:b5:56:8c:1f:2b:d4:7b:b6:14:66:
aa:2c:3d:0b:2e:46:25:67:4e:d4:70:f0:32:8a:8a:87:7f:45:
14:b6:33:02:ae:87:c7:b0:78:7a:1b:17:61:c1:17:6b:34:cc:
98:2c:ed:f5:f3:e7:55:c5:d9:ec:19:fe:10:60:f0:27:48:9b:
7c:06:ca:35:6d:98:cc:6f:fa:5d:d6:15:0f:d5:2a:0d:0a:40:
a1:ba:d6:c0:56:07:a6:5f:aa:1f:8a:93:45:ee:5a:10:3c:41:
bf:85:a9:b7:aa:55:31:fd:ef:04:1b:35:db:8e:d8:ef:fa:fa:
3f:dd:49:72:79:dc:46:6c:bd:38:81:8b:83:95:d4:67:30:02:
00:65:ed:2b:de:8b:ce:e2:57:ea:48:9e:81:74:b1:2f:63:7a:
4d:dd:a2:d4:36:39:a5:1e:a9:d5:f2:bd:9c:06:84:da:95:50:
00:7f:db:58:36:f0:a2:10:ec:31:b5:7d:39:11:b0:55:01:35:
00:5d:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:08 2025 by rpki-client