Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File: _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier: IPAVzPNi6J6WSibweOb3PG+euKsDRyQfZPSmZZfgMcE=
Subject key identifier: 85:2D:BC:31:B5:12:17:B5:43:E3:56:F1:2B:71:31:2B:CD:EA:A1:F5
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial: 019A22F78AC98E21DA319EDF30175BFC18C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number: 153D
Signing time: Mon 27 Oct 2025 00:00:39 +0000
Manifest this update: Mon 27 Oct 2025 00:00:39 +0000
Manifest next update: Tue 28 Oct 2025 00:00:39 +0000
Files and hashes: 1: D477qKV-aPF2n8oBjSmgcuod2kE.roa (hash: pyW25bQPJKBFO/7F+t0bHE29cloxJ5T2+KSGVCTHaws=)
2: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: u6qYuyWjI57iejqhPJo9VMuhDAqDj7iv5LiAZ8VHWi4=)
3: f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa (hash: Gw3xzXZPKuGmrAR2PrIl2quzqApN9VDz3sjokAQjW1Y=)
4: pVTqCR0peatjWSp4Jxs9VZ9aHR0.roa (hash: yjFFs3Sic83blHCl+jWhjWUGXXoo+/pXsN4k7VdljkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:8a:c9:8e:21:da:31:9e:df:30:17:5b:fc:18:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Validity
Not Before: Oct 27 00:00:39 2025 GMT
Not After : Oct 28 00:00:39 2025 GMT
Subject: CN=852dbc31b51217b543e356f12b71312bcdeaa1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:2a:25:6e:5f:4f:8c:ff:d3:fc:16:e7:e1:
ed:cc:5a:68:fe:bd:74:00:2c:75:48:90:43:d0:6c:
39:a1:6b:02:96:d2:82:59:e4:55:5a:d0:d7:0a:2b:
cc:f1:2c:de:59:88:42:ff:d1:ef:44:9a:18:cc:86:
a8:30:10:10:ed:33:7c:06:b3:b1:bf:79:1f:d9:02:
a5:bf:19:fb:87:ee:7d:d6:d8:ca:d6:bf:a1:50:de:
84:f3:dc:5f:4a:e1:bd:29:a8:be:59:e1:ae:35:d3:
4f:3b:b5:ef:8b:5c:9b:ba:cf:7c:e8:73:6e:1d:d0:
9e:cd:c4:e9:da:84:c6:d1:c4:f6:ed:a5:be:a3:2a:
e5:5f:bd:e7:cf:37:97:b0:89:56:c5:35:16:be:7a:
8c:11:f5:01:38:63:84:57:76:6d:93:82:6d:c6:38:
82:99:02:b3:be:66:c6:15:b4:d7:5a:22:a4:54:7a:
90:08:5d:82:d5:d2:61:5d:ac:6a:1a:3e:ed:17:9b:
4e:87:93:ba:cc:09:4a:b2:36:32:a0:ad:5b:1a:f4:
8b:a9:7e:2e:09:4e:40:48:5b:23:73:e8:e7:5b:2b:
3b:97:63:da:27:80:b3:75:65:3f:e3:89:ea:cf:25:
b1:e4:f5:3d:d9:b2:aa:03:18:b3:de:7d:98:be:d3:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2D:BC:31:B5:12:17:B5:43:E3:56:F1:2B:71:31:2B:CD:EA:A1:F5
X509v3 Authority Key Identifier:
keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d9:9a:37:59:49:51:72:99:0d:16:1d:d3:f8:e3:8f:59:30:
7b:5e:2d:1f:e5:59:7c:ed:87:e8:4f:c0:98:d6:95:e1:d2:69:
69:b5:ab:eb:1c:34:5e:a3:1b:4d:7d:7c:d5:e3:5d:7c:d0:8f:
e2:8b:93:d5:1d:57:4c:46:48:0c:c7:8f:ad:6b:2f:80:49:f5:
1f:a3:53:d3:87:0c:54:59:49:76:08:53:85:26:a6:e6:43:54:
6a:1a:cb:f0:af:f5:12:98:8f:54:5f:0e:00:72:b5:c2:fd:93:
42:33:d2:08:a6:fb:aa:bd:48:5a:7b:8a:12:f4:a1:5f:e0:52:
2c:75:ed:e7:d9:d7:b8:80:3f:27:ab:ce:54:ee:d2:a4:0d:cd:
e9:88:3d:a1:72:2d:b6:9b:11:98:24:58:42:7f:5f:c2:78:d5:
84:d8:9a:5e:df:41:4b:7b:82:f6:c5:5c:91:c2:08:b3:76:72:
35:bb:6c:17:92:3d:36:d3:7c:be:c4:2d:e1:db:32:ae:df:6f:
bb:b7:eb:f1:86:dc:d1:7d:43:c2:00:d6:0a:c3:ff:8d:2d:d9:
19:32:a5:5a:74:79:38:84:97:92:83:cc:e8:00:f1:ce:42:7c:
a5:ae:0d:c4:1d:81:17:d7:a0:16:1a:07:b0:98:ef:7f:ec:df:
98:81:7c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:19:38 2025 by rpki-client