
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
File: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft (raw, json)
Hash identifier: XH2iY2xFipbTC/BfrgsIZ78dGiKWBCJwNxTcxVwXnbI=
Subject key identifier: 10:7D:73:42:05:A1:60:19:EA:79:4D:0D:44:81:C4:F2:F9:2E:E6:6D
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Certificate issuer: /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial: 019A4F62498C25B5EEBC58FF0A7AD6173D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
Manifest number: 0A4D
Signing time: Tue 04 Nov 2025 15:00:32 +0000
Manifest this update: Tue 04 Nov 2025 15:00:32 +0000
Manifest next update: Wed 05 Nov 2025 15:00:32 +0000
Files and hashes: 1: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl (hash: 1X506LnHWEoFdCteNFrfKkKGdC606lTODQ4nCgPYgNk=)
2: REskoa14BgJkhUCvWjHx9eaTd20.roa (hash: xil3JLcrx1++eWENxWi8v9S+saZS2Aj8jUHaFwQUcf4=)
3: UMf4KbahVEx8sqhbE5i5BsC3FsA.roa (hash: tXmMZLhWuik4iB1zgaI4TBIGH/BwZuH+iewbZQIYmmk=)
4: YxylaQOafZhI24pv2ROMkb6L8uQ.roa (hash: zhgD7wCyXnWilojWXPMdeWuf8dVD/porAHOT4NA/gWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:49:8c:25:b5:ee:bc:58:ff:0a:7a:d6:17:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Validity
Not Before: Nov 4 15:00:32 2025 GMT
Not After : Nov 5 15:00:32 2025 GMT
Subject: CN=107d734205a16019ea794d0d4481c4f2f92ee66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:a0:af:50:4d:58:f3:f7:40:39:9b:e6:24:
e2:c0:dc:8c:32:4f:84:5d:cc:fe:ea:7e:92:48:9a:
ce:07:c4:42:fe:6f:f1:94:f9:4a:f3:0d:64:6b:c5:
80:8d:c3:a7:22:63:de:e5:03:2a:f3:b5:14:02:63:
0b:f7:0d:64:f1:fe:14:82:58:63:c8:f7:6d:d2:4c:
e9:13:cc:08:dd:74:f3:1b:7e:67:5e:14:46:e4:88:
a9:62:ab:f7:b5:43:87:9b:4d:81:8d:c3:89:1f:65:
8c:c9:83:51:bd:0c:ed:94:fc:1f:a8:4d:05:67:5b:
2b:78:d4:0d:0b:52:66:85:52:cb:85:db:06:4e:48:
48:f5:98:5e:59:50:f9:e8:11:50:59:d0:c7:4a:fc:
38:3c:b1:23:37:1f:b0:45:b7:e3:d7:72:f3:2e:a6:
bb:b4:c8:fa:82:65:61:d6:05:86:9b:38:26:32:e9:
53:37:9c:e8:c5:26:3a:99:e3:76:34:f4:33:cd:60:
72:37:74:b9:32:33:00:f9:75:1e:1d:29:e0:b6:2f:
5b:6c:6b:1d:08:2a:5d:10:73:6c:9d:e6:69:b3:5a:
63:b7:5e:b7:c6:3d:69:13:a7:ea:74:21:90:03:39:
55:c7:79:c6:78:6c:77:3a:b2:65:61:e3:b0:d9:9b:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7D:73:42:05:A1:60:19:EA:79:4D:0D:44:81:C4:F2:F9:2E:E6:6D
X509v3 Authority Key Identifier:
keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ba:7f:81:df:05:1e:49:0d:2c:6e:6a:3c:e0:27:23:cb:8b:
bc:71:83:7b:65:e6:a0:b6:14:ff:bc:46:87:33:f0:53:f3:a6:
5b:d5:dc:93:f5:90:d5:2b:ad:78:d8:ce:ab:d3:27:f5:44:99:
0e:98:d4:44:26:d5:18:c9:57:fc:5e:86:fc:45:68:d9:bd:d2:
b1:67:0d:46:10:2f:75:ad:6d:5a:cb:13:8f:76:1f:aa:6a:19:
d9:fa:45:6b:bf:bf:3e:33:f3:5a:5f:28:b8:c4:69:ee:af:86:
54:2e:b8:de:d3:34:f3:b2:72:a6:ad:b1:e8:4e:70:0b:4c:93:
6c:e5:10:e5:e6:46:ee:93:8f:3a:4a:9f:6b:bd:da:a2:f3:fb:
80:59:65:0f:8c:fa:0a:75:af:56:cb:33:10:cf:6d:fb:9c:98:
57:d7:0c:c0:97:70:13:9a:f5:cf:f2:f6:e2:90:47:1d:4c:c5:
6f:2e:1f:d0:57:ba:2c:41:78:87:d4:a6:a0:b5:8f:fa:12:e2:
e2:28:1f:03:0c:a3:45:53:7f:5a:3e:70:01:e2:62:46:95:61:
b6:e9:63:70:3a:08:70:80:ad:4d:0f:bc:f1:54:cd:69:e5:39:
fc:49:a3:df:96:13:f1:83:71:12:74:de:74:cc:b1:ec:75:8c:
c5:cc:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:55 2025 by rpki-client