Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
File: abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json)
Hash identifier: 8Rlib63eyfvoDRVjTSSPUhsN4JHGEl1BygkaZqKc328=
Subject key identifier: D2:25:61:17:58:0A:31:5B:C0:94:DA:0B:DC:46:99:D7:84:36:CC:D1
Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
Certificate issuer: /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Certificate serial: 019A552D1EA9C3AFF9B7B817FD00CAFFD512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
Manifest number: 3B
Signing time: Wed 05 Nov 2025 18:00:11 +0000
Manifest this update: Wed 05 Nov 2025 18:00:11 +0000
Manifest next update: Thu 06 Nov 2025 18:00:11 +0000
Files and hashes: 1: R7q2gktvFsNXXsx_b10S5ynAXaw.roa (hash: +bf2vfop1BjTPFaIwsRZHC/bhXQwlqn19Fh+mJR9npc=)
2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: b+vBH8QnwN0NkJZ19igoEAuWn9XrkfO8Bf1f1GJu5jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:1e:a9:c3:af:f9:b7:b8:17:fd:00:ca:ff:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Validity
Not Before: Nov 5 18:00:11 2025 GMT
Not After : Nov 6 18:00:11 2025 GMT
Subject: CN=d2256117580a315bc094da0bdc4699d78436ccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:ac:e3:46:30:ac:10:87:03:34:f3:0f:43:
ef:fe:a4:64:47:a6:07:02:8e:25:c3:22:58:13:46:
d8:4f:4a:99:b9:34:6f:f5:b6:62:ec:84:68:0a:44:
9e:0f:59:4b:5e:99:7f:84:e0:8a:7b:4b:f0:0e:c4:
bf:73:95:b6:6d:ef:fe:5e:2f:9b:14:02:7c:c1:f1:
bd:87:04:ec:b2:2a:19:c8:09:05:a5:1f:9a:41:91:
d2:ac:e3:ae:b9:90:d0:ee:24:9b:99:75:96:69:86:
93:8c:cc:2b:ff:b5:35:b2:b3:0b:b1:de:ce:cb:d7:
a8:9d:79:52:02:5f:eb:53:c6:3a:f0:ab:2c:b5:c5:
f4:54:d5:de:67:6a:e0:33:50:7c:de:12:bd:54:98:
9e:54:0a:8b:e3:97:89:29:4d:b0:2c:ee:e5:4a:1e:
62:1f:cd:70:38:07:e6:17:15:3e:23:cf:64:8f:22:
05:da:6e:29:68:38:31:7e:34:cb:a5:09:96:07:f4:
34:a1:9e:31:c2:dc:ad:25:24:41:7b:cc:94:81:00:
b6:b3:c2:24:8b:44:76:78:eb:f3:af:17:92:39:96:
77:5b:3c:4a:0c:11:43:4f:41:bc:b6:89:98:37:8c:
9a:27:04:58:17:a6:bc:a1:f4:de:ff:70:d5:80:8d:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:61:17:58:0A:31:5B:C0:94:DA:0B:DC:46:99:D7:84:36:CC:D1
X509v3 Authority Key Identifier:
keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ee:6d:bc:7f:da:fd:8c:27:5a:db:4e:5b:68:d8:db:f3:8c:
96:28:e2:bb:4c:7f:d9:9c:71:3b:7b:1e:ff:13:ca:cc:ea:15:
dd:12:5a:55:bd:1b:86:3b:61:3d:bb:24:67:e1:3a:a2:55:9b:
33:99:91:e8:7d:85:f8:c1:32:c8:27:b9:1e:33:fc:e1:6e:9c:
06:4b:f5:f1:b8:30:84:c6:b7:2a:d5:74:f9:00:3f:29:34:c4:
b4:5b:7f:30:8c:27:66:87:36:75:ef:9b:06:0c:67:07:88:f7:
6a:36:dc:cc:a0:b2:72:70:2a:1a:c5:0f:f2:4e:c3:64:1b:8c:
66:02:48:e5:e9:2f:da:bc:70:7e:0e:34:85:c9:13:83:86:af:
3d:05:1e:97:bf:3f:2e:e7:19:a1:2c:03:35:43:d4:3f:5d:df:
61:2b:38:eb:94:3f:06:49:43:14:7c:47:4a:1c:51:00:a5:e2:
59:52:b2:09:ce:18:02:48:b9:7e:4c:ae:93:bd:05:b5:b8:fe:
14:fb:c6:f9:da:b5:cf:d4:4a:2e:b8:bf:43:1b:4d:09:42:3d:
49:4b:af:74:5c:6d:17:26:df:de:b0:17:81:2c:d3:09:58:8b:
a4:9a:d6:f8:a5:6f:a0:c1:d7:71:7c:3f:17:06:37:a4:45:72:
b0:e6:be:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:21:09 2025 by rpki-client