Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
File: _ASHoE9apEK-UZoXyyuyLXg98js.mft (raw, json)
Hash identifier: szlquj9/KvfZwTX0Bdssxla6Q0O2TVisgw3vhKl6J08=
Subject key identifier: F9:31:55:2C:E7:D3:45:46:C1:ED:75:4E:7A:45:CD:52:1C:60:B6:0B
Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Certificate serial: 019A50E2E2A9D095B1399A1521FC32848A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
Manifest number: 128F
Signing time: Tue 04 Nov 2025 22:00:37 +0000
Manifest this update: Tue 04 Nov 2025 22:00:37 +0000
Manifest next update: Wed 05 Nov 2025 22:00:37 +0000
Files and hashes: 1: TWYnB52Oavk9789kFBH_TtsFA20.roa (hash: Lo6TIcgKkzIrKcc1K5udX1XvguvwpolYTItBn5Pxknw=)
2: _ASHoE9apEK-UZoXyyuyLXg98js.crl (hash: btC5aKXV7RXW2Kd3G8EmFcKdOevcBYOOkhjs4w32F9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:e2:a9:d0:95:b1:39:9a:15:21:fc:32:84:8a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b
Validity
Not Before: Nov 4 22:00:37 2025 GMT
Not After : Nov 5 22:00:37 2025 GMT
Subject: CN=f931552ce7d34546c1ed754e7a45cd521c60b60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:5b:7b:6b:77:e3:03:3b:67:e3:60:a9:41:
81:54:78:3a:7c:e7:f8:29:66:30:ff:fd:b2:ac:7c:
ec:cd:db:75:e5:8b:41:f8:6c:89:e4:5b:ca:e6:df:
23:ef:e4:de:0f:ea:fb:3a:92:8f:77:2d:f3:da:40:
96:7a:b5:a6:e8:1e:78:09:5e:69:b8:f2:90:e0:08:
4d:20:2c:64:ce:fa:24:a1:1b:78:d5:42:2e:22:36:
c2:c1:cf:f5:a5:31:eb:2b:18:2f:e5:05:b7:d5:84:
60:a7:a1:98:25:58:1b:83:47:c5:09:7d:09:e3:cb:
48:cd:28:04:ea:e3:f0:6b:fc:86:23:9e:f0:aa:11:
b7:6a:76:7f:46:49:58:7c:26:9b:35:6c:bb:37:ce:
0e:f3:f7:48:31:b9:b9:ee:c2:12:be:b8:e6:86:5b:
97:51:d5:0b:1e:70:7d:51:d6:cb:7d:ff:b7:59:cd:
4a:9f:32:88:0b:6f:83:1d:13:8b:ab:88:e5:ff:c9:
d6:0f:91:19:3c:9b:68:49:46:4b:83:78:5e:2f:99:
7c:17:53:33:31:b7:cf:22:d4:29:2c:5f:77:ce:ff:
4e:b9:3c:1c:77:3e:10:84:18:25:9f:16:26:3f:75:
59:a8:61:ba:b3:56:7b:80:03:69:4c:0c:74:01:ab:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:55:2C:E7:D3:45:46:C1:ED:75:4E:7A:45:CD:52:1C:60:B6:0B
X509v3 Authority Key Identifier:
keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e6:36:20:77:03:1d:a3:7c:40:cf:57:ee:73:42:77:02:e2:
6a:b9:b0:a5:1a:19:97:ad:1b:92:27:15:6f:34:4d:66:87:b2:
44:b8:3e:c7:a8:db:90:3e:52:84:ce:b4:4c:ad:a4:95:fe:cb:
68:ae:83:44:11:7a:65:53:50:ba:54:23:e4:57:63:93:ec:17:
ab:27:c8:dc:ce:ad:4a:2f:86:4a:87:9e:e8:55:1a:70:10:f9:
f2:47:f1:51:80:64:7e:5b:53:01:e4:3d:2f:41:86:10:7b:28:
4a:ec:44:d7:a3:27:ec:13:e6:4c:52:80:af:68:af:14:ee:60:
c2:3c:30:31:0d:27:d3:0a:fb:c4:72:40:03:6b:59:c0:9a:4a:
3f:bf:68:78:78:b2:b9:a1:ab:bf:02:27:be:f1:6b:ff:3d:1a:
fc:dc:0e:2f:52:e9:80:12:21:c1:39:70:76:80:80:32:c7:ab:
8b:fa:db:17:ec:44:cc:8c:e1:a8:24:ed:fc:d1:77:f9:04:cf:
09:a2:71:a7:8a:91:b0:04:03:5d:25:26:e4:d0:fd:4b:2c:87:
b3:5f:72:7d:50:af:38:18:23:74:f3:d6:7b:9a:ad:a9:89:16:
7b:f8:79:18:61:1d:7a:ed:62:9e:76:52:2a:a8:3f:a2:01:6b:
53:28:0b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:56 2025 by rpki-client