Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
File: Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json)
Hash identifier: TrixnwwDsiPWWpRfmjl1tWiTGgYQGaUX0zHYOkRC0OI=
Subject key identifier: 2B:B8:D7:DE:FC:70:40:64:77:BB:41:C5:69:D8:76:55:41:5B:AD:CA
Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
Certificate issuer: /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Certificate serial: 019A4EF586805D851400AC7EDB648B1B0A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
Manifest number: 0988
Signing time: Tue 04 Nov 2025 13:01:44 +0000
Manifest this update: Tue 04 Nov 2025 13:01:44 +0000
Manifest next update: Wed 05 Nov 2025 13:01:44 +0000
Files and hashes: 1: 8dRpFL3Tx6_eHYDV0GF9jVjNRKU.roa (hash: CYL1YeCCG8xFxfjQulVKl6xa2WJtFP2ORTHbcUggMA4=)
2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: MsWbqKnGbdGdxN8KEYC5Dr3qlp8yAy3yo9YabDpJ6nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:86:80:5d:85:14:00:ac:7e:db:64:8b:1b:0a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Validity
Not Before: Nov 4 13:01:44 2025 GMT
Not After : Nov 5 13:01:44 2025 GMT
Subject: CN=2bb8d7defc70406477bb41c569d87655415badca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:a4:b4:5e:fb:83:cd:de:1a:ac:48:be:c7:
f5:a3:65:9c:33:d0:39:0a:41:8f:a5:17:04:a3:62:
c6:0a:ee:9a:0b:34:9e:d7:c6:8f:2c:2d:fc:d5:87:
69:ca:66:98:b4:c9:25:c0:9f:83:18:3d:5c:f6:b7:
41:05:ac:6a:8b:9c:3d:18:2d:f6:86:43:f1:c0:4f:
a5:59:2a:32:e6:74:64:25:e7:1b:63:61:cb:52:96:
bf:79:a5:15:de:7b:f4:71:b3:dc:d2:43:ab:33:e0:
32:6b:79:4b:89:c5:28:f4:98:6d:41:5a:13:45:2b:
41:11:d3:1f:2b:a9:f4:90:68:68:e6:af:e5:5f:df:
b6:25:78:bb:b1:ee:b5:8d:35:5f:47:dd:16:d6:5f:
08:1d:89:e8:97:bb:9f:c3:e9:9d:25:d9:57:03:95:
f5:c9:15:f3:0a:5f:34:eb:8a:79:85:77:6a:70:ae:
f4:3d:fa:4f:78:28:43:36:6c:67:06:f2:f6:14:e0:
58:66:60:e2:e6:3f:02:56:de:7d:1a:6c:77:cf:4d:
9e:9f:d5:27:27:b2:34:47:17:0c:31:12:04:73:bb:
a1:29:76:b9:7c:03:6d:2c:38:4d:a2:1f:fe:9a:44:
45:f4:59:0e:23:f2:50:c2:32:a7:45:20:c7:cd:80:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:D7:DE:FC:70:40:64:77:BB:41:C5:69:D8:76:55:41:5B:AD:CA
X509v3 Authority Key Identifier:
keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:da:3e:71:2c:e6:68:55:88:73:c0:c4:d0:42:f4:21:68:34:
7a:27:bc:16:bf:5c:5b:87:2f:12:9a:bb:fc:dd:8f:47:21:b4:
0f:4a:9d:6c:4d:41:e4:ff:4f:c1:e1:57:2a:fe:05:dd:c5:e0:
eb:8c:be:b0:62:8f:49:e9:cb:01:63:da:0c:d4:75:70:86:fd:
a7:29:f9:a2:d1:ed:3c:d8:7f:4a:9a:31:13:2d:dc:e9:37:f2:
d4:07:de:92:8b:2e:56:5f:57:5c:f6:26:b9:94:50:71:42:93:
f6:dd:c4:a3:8b:45:e7:fb:90:76:2d:8b:77:50:8a:f5:a2:56:
4f:4f:96:f9:04:4e:83:58:78:8c:18:65:29:b1:2c:de:bd:13:
8c:98:6b:ed:a6:c5:37:ae:b4:76:2b:c6:55:af:94:e7:bd:c4:
b1:1a:35:d7:2c:a1:2a:49:b5:c4:1e:9c:a7:fd:01:19:65:d4:
c2:cf:36:bf:2b:ae:7a:a9:a1:bf:5d:5e:2d:25:3d:aa:61:c2:
b1:a9:1f:6c:f8:8d:ee:ff:9b:88:cc:e0:97:2b:7c:0d:b1:df:
97:22:bb:58:fb:f2:a6:a1:4c:41:e6:95:8f:9d:0b:74:0d:c2:
f5:27:e3:28:22:e3:38:0e:6d:9b:dd:cd:6a:f0:d5:4e:67:8d:
e3:8c:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:09 2025 by rpki-client