Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
File: _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json)
Hash identifier: vETpSFwe/YQFmRj0BEsYYgDmdDzOuolDTvVC4jnEaHk=
Subject key identifier: BC:4A:2E:4D:BD:08:DB:72:65:85:16:1A:F2:BC:94:F7:45:BB:E1:A9
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial: 019A552D47FCBF2D453CD469B77B6A5E82FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
Manifest number: 01A5
Signing time: Wed 05 Nov 2025 18:00:22 +0000
Manifest this update: Wed 05 Nov 2025 18:00:22 +0000
Manifest next update: Thu 06 Nov 2025 18:00:22 +0000
Files and hashes: 1: KAVL6kTny8TDOYbmZPaPDwl2wXM.roa (hash: aJfitKEgdn0yPAeBVox/YEVRIDod3KCN4Iqb7ST2CSs=)
2: Z_12fyPWjJvCb6FBNMUkeSsk2Qk.roa (hash: a0cw7dhkqyFjfij3KupwibkS70jrF4XOR8zbXlfILTw=)
3: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: C4MbsbIx30CupNvASDCWBjRbaExoSMcu0ZHBJ2L/zNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:47:fc:bf:2d:45:3c:d4:69:b7:7b:6a:5e:82:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Validity
Not Before: Nov 5 18:00:22 2025 GMT
Not After : Nov 6 18:00:22 2025 GMT
Subject: CN=bc4a2e4dbd08db726585161af2bc94f745bbe1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:16:5d:b2:9b:43:7a:e0:55:2d:2f:05:c9:
ee:0a:c4:80:11:9f:b0:77:6d:90:a9:64:95:19:8d:
21:f6:bf:f6:c1:92:09:32:2e:00:ef:06:cf:a8:43:
bb:8d:a3:55:a4:b1:8a:60:4b:21:fd:4a:d6:f8:9d:
90:fe:33:29:c3:e7:14:ac:72:8d:f9:19:f0:56:cf:
ca:a1:5f:07:0e:97:c1:80:9f:4f:c4:57:33:48:4e:
fb:52:46:16:7b:a1:85:c3:a5:e7:fd:66:e1:5d:c9:
77:f1:20:d4:16:72:f0:d2:e5:6d:b5:65:0c:2e:2c:
1f:e6:8c:1f:51:d6:cc:eb:a7:fa:3e:3d:78:f4:e8:
e4:59:99:a3:17:0a:06:64:14:a0:fa:65:65:4b:7c:
34:59:04:a6:d7:62:36:08:49:ab:77:91:d7:eb:64:
b4:65:20:af:fa:06:88:fa:7c:e5:b8:9e:3a:3f:48:
65:22:b4:be:2e:a3:44:27:d3:6a:da:4e:df:3d:69:
18:d5:52:5b:8f:b0:5d:b9:29:63:a5:19:bd:71:1a:
4c:6c:86:39:4f:c5:46:16:f0:83:31:62:ae:25:80:
a9:4a:6a:cd:50:6a:db:2c:de:17:3b:a4:f9:cf:0d:
1f:f3:51:bd:2c:73:7a:bc:ed:07:7b:c1:54:44:f7:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4A:2E:4D:BD:08:DB:72:65:85:16:1A:F2:BC:94:F7:45:BB:E1:A9
X509v3 Authority Key Identifier:
keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:14:cf:30:c4:75:12:59:1d:4c:01:af:a0:84:17:39:80:b1:
3a:1c:9b:b0:13:ac:22:9e:54:f8:bc:dc:11:51:f8:63:32:c3:
8d:bb:3a:e5:1b:8e:af:72:a0:83:c2:37:eb:bb:f8:e8:60:8c:
fd:b7:af:29:6b:9e:0b:8f:21:55:0a:f2:9e:ac:7a:8e:a6:13:
17:0e:c6:66:6c:e6:ec:46:af:8a:88:a6:e4:76:d2:e7:ae:5c:
45:49:2f:8e:87:9b:df:72:fa:e4:2e:c2:70:6c:88:ea:b4:cc:
2d:6f:3a:d5:23:de:cd:77:22:0c:37:e4:ff:f3:95:83:fd:0d:
7d:28:c5:11:1e:fa:f7:9f:36:35:65:eb:a7:0f:bb:5b:31:2a:
dc:85:45:f4:d6:f0:38:73:09:9e:a6:a5:4d:25:fa:13:a6:bd:
0a:95:99:21:2b:f7:f9:9f:04:45:94:87:ef:3b:dc:d1:9f:c6:
0a:e1:36:1b:c2:07:78:48:05:23:0e:e3:58:4d:8f:83:63:f3:
bb:e1:0f:a2:92:45:bc:1a:9c:1e:7a:18:b8:49:f0:44:e0:d9:
22:56:33:52:65:54:e9:35:40:5e:38:4f:8e:d2:79:af:82:79:
f1:66:19:91:ee:47:5c:39:bd:3f:f9:a9:8d:b3:96:0e:88:08:
09:53:b5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:29:45 2025 by rpki-client