Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json)
Hash identifier: igrgI0xn9FOxGy3ReKFQj9WsJJIGDrfSEFGiWxeuSLc=
Subject key identifier: 69:53:32:EB:F0:63:B7:59:95:68:B7:63:C2:06:73:84:48:C9:87:E3
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 019A232EAE89105B4F57AA1E1C19BBB03FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
Manifest number: 0F81
Signing time: Mon 27 Oct 2025 01:00:53 +0000
Manifest this update: Mon 27 Oct 2025 01:00:53 +0000
Manifest next update: Tue 28 Oct 2025 01:00:53 +0000
Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=)
2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: 4FenkmEtfDaQ7+3AuLl5GgKmSXdObF/M2ZHBcOV/bLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:ae:89:10:5b:4f:57:aa:1e:1c:19:bb:b0:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Oct 27 01:00:53 2025 GMT
Not After : Oct 28 01:00:53 2025 GMT
Subject: CN=695332ebf063b7599568b763c206738448c987e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:92:dc:ac:68:51:3a:c9:c5:b9:e0:56:cf:
13:ae:da:97:37:2a:b3:0f:a3:45:44:b4:80:8f:0d:
4a:13:da:fa:a0:1f:44:22:07:7f:a9:ad:29:69:5a:
64:03:39:95:e8:95:05:24:33:2d:80:e9:af:b0:e7:
7a:52:25:3a:d2:96:00:7c:55:ba:2f:0f:ca:47:f9:
db:a5:e0:83:80:85:82:0d:e3:28:be:e0:30:19:24:
52:a9:be:4e:54:75:12:16:aa:f8:4c:ed:11:de:5b:
7c:1c:9f:e5:c1:97:81:e7:c6:bd:0f:55:13:8f:56:
95:f5:50:80:a9:85:59:13:6f:1e:28:b3:3f:eb:7f:
be:d5:4d:63:41:cf:78:92:3b:75:23:2e:d6:43:1a:
4c:24:d8:60:65:3e:74:30:f1:93:d6:ab:59:cf:bd:
4a:08:18:ba:6c:6c:1d:87:2d:29:96:4e:6b:e4:43:
f0:17:55:a2:35:b9:2a:06:03:94:7c:90:b3:4b:45:
b1:67:c2:ec:68:64:1b:a7:de:fd:6a:1f:c8:95:a6:
07:0d:e0:50:3b:46:9f:f9:7d:a2:5c:f0:9e:3b:c5:
84:a6:66:e3:d4:17:63:5a:c7:42:5f:6d:54:15:18:
00:2e:8d:11:e8:b6:e2:35:cd:b5:d7:60:e5:7e:9d:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:32:EB:F0:63:B7:59:95:68:B7:63:C2:06:73:84:48:C9:87:E3
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:06:95:fa:e5:05:cd:d0:0a:59:e8:ab:84:f7:2a:07:e2:43:
4b:6b:86:e3:95:16:22:19:76:86:16:77:40:e9:c0:27:06:77:
1a:9f:9b:5a:38:5f:d1:2b:70:07:b9:ba:26:c4:8c:1d:21:32:
a6:6b:0d:5e:43:00:ff:ab:f7:66:10:61:06:75:51:6a:03:d6:
15:f6:55:31:7b:2c:27:62:c4:ec:d2:53:00:2d:48:b7:57:8b:
d7:18:e5:03:2a:17:e6:b5:cc:8b:c3:59:9d:66:d6:f3:f0:15:
e6:03:46:4b:0b:fc:32:17:46:e3:23:b5:b9:92:9a:37:45:a9:
f9:e1:28:6d:7f:bc:b1:1c:10:45:06:c3:25:67:a2:53:b9:07:
e4:a0:7d:74:08:7e:ca:80:d6:b8:1a:75:24:b6:50:f0:1b:e1:
eb:33:e7:6b:07:28:de:f9:f2:a4:1f:8f:7a:cd:8c:5b:61:60:
60:77:71:d6:81:e1:e5:d0:61:59:af:9a:21:e3:28:c9:0b:a1:
5a:41:4d:9b:ff:d8:41:5b:36:c6:64:7e:e6:a4:41:16:89:c8:
5f:56:a9:d2:79:a9:78:a7:64:1c:6b:0b:83:57:22:f1:b7:b2:
6b:27:bc:26:f0:d1:2b:ed:ab:c9:f9:9f:2c:90:6c:33:f0:e1:
cb:58:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:37 2025 by rpki-client