Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: xLPpjUhZmInGsI22YNI171Xx17zT2eHiKxQalA2CZwE=
Subject key identifier: 8A:DE:FC:34:D0:2C:BE:E1:9F:7B:E7:FC:0D:C6:53:D4:72:82:39:C3
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 019A4D740D952F97CC6219D995FBC5F290AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 06:00:42 +0000
Manifest this update: Tue 04 Nov 2025 06:00:42 +0000
Manifest next update: Wed 05 Nov 2025 06:00:42 +0000
Files and hashes: 1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: Ex2ggeRnhhKKL/Wee6R1nvOvlZyEDHHu4cBQf5UDKyg=)
3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:0d:95:2f:97:cc:62:19:d9:95:fb:c5:f2:90:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Nov 4 06:00:42 2025 GMT
Not After : Nov 5 06:00:42 2025 GMT
Subject: CN=8adefc34d02cbee19f7be7fc0dc653d4728239c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:3e:e6:8c:a7:0e:38:43:1a:47:d8:97:90:
e8:23:4e:12:5f:27:1a:2e:2b:81:e5:ca:77:eb:b2:
83:f5:1b:a4:cc:2a:f2:d4:ab:6b:82:4e:d2:41:11:
42:06:c4:f2:77:7c:9c:5a:ec:07:80:16:b9:26:80:
06:55:eb:e4:fc:e3:dc:0a:95:cc:7d:9b:74:b2:80:
ee:8e:a1:f9:4e:4e:cb:29:3a:7d:b5:ba:1b:32:04:
46:75:cf:ce:92:4b:9c:c0:0c:f9:b9:94:b1:10:3b:
e1:7e:71:8d:2e:87:70:b0:70:d3:19:75:ee:8c:86:
bd:55:bf:86:90:fa:ae:4e:cb:dc:00:e6:7f:50:fe:
ca:29:98:63:9b:9f:e3:b5:10:fb:47:58:96:b4:b1:
1d:1f:e1:42:b6:6d:93:2f:81:03:73:82:23:54:d7:
1c:58:b8:35:8c:6a:73:f6:fb:a1:ef:f0:d4:e1:64:
93:a8:e2:a8:ac:76:66:24:45:16:84:45:ae:3f:87:
a6:75:d7:60:6e:98:a4:3a:b5:37:b9:54:89:2d:80:
1b:5b:d3:dd:74:44:ac:f7:15:c4:64:1a:1a:8a:ed:
69:9e:32:50:0e:b1:ca:80:a3:86:64:f6:33:00:70:
6e:3c:11:11:1d:f8:0f:9b:1f:11:92:98:b7:4f:11:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DE:FC:34:D0:2C:BE:E1:9F:7B:E7:FC:0D:C6:53:D4:72:82:39:C3
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:98:fd:46:6c:0c:41:75:c4:20:d5:88:06:4d:4a:14:9a:e3:
3e:0c:46:f1:70:20:f8:e3:94:c8:c1:9c:69:9b:c4:78:6b:e3:
44:7e:4b:5f:4b:ec:bf:a8:6b:a5:ea:79:9c:9f:fc:9e:4e:3b:
ee:d0:16:30:b8:fe:29:82:b7:15:6a:5d:cc:90:7a:b7:0c:e9:
9c:b7:94:61:9f:45:48:42:03:ee:d8:3a:c8:19:68:82:36:1f:
b5:2b:a4:42:fa:04:f8:f9:cf:65:15:8a:de:08:cc:5c:92:2a:
14:d7:38:ff:9b:99:62:ab:a7:74:3b:41:f9:bc:5b:d5:74:81:
1f:9f:fb:66:61:cc:bb:d9:84:54:56:3d:8f:23:f9:94:23:ca:
ce:57:4f:43:1f:5c:96:a6:7c:c3:d9:10:c4:79:40:12:a1:a3:
7c:cc:c0:6b:db:6a:be:01:02:19:92:00:e6:35:2a:1e:33:e1:
ce:cd:09:64:e3:a2:14:12:34:a2:cd:0f:ca:c3:fe:d3:0b:91:
aa:11:69:e7:a4:21:26:18:41:90:08:5b:6f:d3:d6:6d:ff:53:
06:3d:da:3c:cf:f1:1e:7d:10:ef:ef:0c:f5:62:37:5a:9d:b8:
97:43:58:51:64:5c:93:b8:0e:37:b0:c2:62:f3:e3:28:8f:83:
78:37:20:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdA2VL5fMYhnZlfvF8pCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjUxMTA0MDYwMDQyWhcNMjUxMTA1MDYwMDQyWjAzMTEwLwYDVQQD
Eyg4YWRlZmMzNGQwMmNiZWUxOWY3YmU3ZmMwZGM2NTNkNDcyODIzOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0og+5oynDjhDGkfYl5DoI04SXyca
LiuB5cp367KD9RukzCry1Ktrgk7SQRFCBsTyd3ycWuwHgBa5JoAGVevk/OPcCpXM
fZt0soDujqH5Tk7LKTp9tbobMgRGdc/OkkucwAz5uZSxEDvhfnGNLodwsHDTGXXu
jIa9Vb+GkPquTsvcAOZ/UP7KKZhjm5/jtRD7R1iWtLEdH+FCtm2TL4EDc4IjVNcc
WLg1jGpz9vuh7/DU4WSTqOKorHZmJEUWhEWuP4emdddgbpikOrU3uVSJLYAbW9Pd
dESs9xXEZBoaiu1pnjJQDrHKgKOGZPYzAHBuPBERHfgPmx8Rkpi3TxFB9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIre/DTQLL7hn3vn/A3GU9RygjnDMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpj9RmwM
QXXEINWIBk1KFJrjPgxG8XAg+OOUyMGcaZvEeGvjRH5LX0vsv6hrpep5nJ/8nk47
7tAWMLj+KYK3FWpdzJB6twzpnLeUYZ9FSEID7tg6yBlogjYftSukQvoE+PnPZRWK
3gjMXJIqFNc4/5uZYqundDtB+bxb1XSBH5/7ZmHMu9mEVFY9jyP5lCPKzldPQx9c
lqZ8w9kQxHlAEqGjfMzAa9tqvgECGZIA5jUqHjPhzs0JZOOiFBI0os0PysP+0wuR
qhFp56QhJhhBkAhbb9PWbf9TBj3aPM/xHn0Q7+8M9WI3Wp24l0NYUWRck7gON7DC
YvPjKI+DeDcg0g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:43 2025 by rpki-client