Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier: nCwpfHTD5TlcgYREluOpn/6G2eKOwAptCgyrczOdTQk=
Subject key identifier: 04:37:92:05:A1:14:2B:A9:C3:F4:71:60:88:60:69:15:67:1C:24:F1
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 019A52D0F8AE3132965A51189BCFE917FC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number: 01FB
Signing time: Wed 05 Nov 2025 07:00:18 +0000
Manifest this update: Wed 05 Nov 2025 07:00:18 +0000
Manifest next update: Thu 06 Nov 2025 07:00:18 +0000
Files and hashes: 1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=)
2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=)
3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: YcT3Yjf7P4iLw0m/4ZkLNJ5M7HaSo58b6EAwZiNkuX0=)
4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f8:ae:31:32:96:5a:51:18:9b:cf:e9:17:fc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Nov 5 07:00:18 2025 GMT
Not After : Nov 6 07:00:18 2025 GMT
Subject: CN=04379205a1142ba9c3f4716088606915671c24f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:3d:be:7a:d4:29:53:59:a3:c0:8f:9f:93:
dc:18:e8:5a:25:a3:94:29:0d:6b:15:5b:d4:ee:dc:
07:53:1f:dc:96:22:39:f0:d5:41:af:09:50:47:c0:
ae:25:49:55:6d:94:22:4d:2a:e2:0b:29:44:eb:fb:
d9:3a:0f:28:de:53:c7:86:4b:8c:b8:42:eb:4f:be:
5e:a6:be:39:9f:22:ea:1f:83:5c:3c:f0:37:f6:fe:
4a:3d:77:22:7f:e9:cf:34:f5:b9:a0:ba:9c:aa:24:
3c:34:5f:24:4d:bb:f9:e1:be:5e:83:76:32:d8:83:
57:b4:0b:c5:e6:fd:31:3b:0c:43:f4:cb:fe:47:9f:
b5:a2:7e:43:08:52:1b:a7:f9:f5:b2:07:59:b1:07:
57:e3:60:23:e4:7e:10:87:38:5f:f4:1b:7f:bf:a4:
4c:75:5c:26:fb:24:c7:da:bc:95:d4:a4:34:7e:00:
4a:3e:de:15:c2:8a:6c:d6:40:b5:fd:18:df:77:a4:
c8:ef:d9:6e:ca:97:cb:8f:ac:43:c6:8f:36:8f:d0:
8b:dc:2a:2c:b5:b5:e5:d9:66:2c:29:03:b2:42:a5:
5d:bd:34:60:5f:fb:49:20:94:83:5e:5d:34:19:c0:
82:5c:b3:2f:be:9e:2b:d1:aa:c4:2c:54:61:4e:47:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:92:05:A1:14:2B:A9:C3:F4:71:60:88:60:69:15:67:1C:24:F1
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b5:7f:9e:fd:0e:7e:6a:c5:e0:fd:42:ca:d7:7a:62:c4:50:
b7:97:8e:e1:e5:e9:64:df:61:c1:01:e8:47:63:d9:c0:a9:ed:
b6:87:a2:1f:9f:bc:5b:31:51:56:3d:7e:ac:0c:3f:ba:6a:a6:
53:b4:5b:a1:21:d6:2d:ff:e6:f3:06:ef:78:85:69:1c:93:7c:
c9:2b:e7:a7:00:c1:d7:8f:c4:98:e6:97:e3:b9:ff:51:44:5d:
2c:fb:8f:fc:31:f2:eb:1d:64:c9:46:61:9a:c9:cb:20:c3:59:
36:19:7a:c9:a0:64:f4:82:73:69:2f:58:c7:d3:02:68:2b:d7:
84:b6:a2:db:d9:4a:7e:d3:72:69:b1:e6:22:fe:fb:06:df:74:
0f:55:78:8d:0f:8f:52:55:8e:7a:e4:c9:06:02:c5:79:cd:b8:
b1:bc:76:e8:87:ca:2c:67:c4:69:3e:34:d3:77:f0:63:63:e9:
1a:67:8a:7c:59:7b:12:ee:e5:f4:20:ed:a8:8a:1e:43:de:3d:
61:5c:19:d6:0a:6a:5d:83:4b:74:ec:70:c2:1a:d6:b3:fc:36:
09:58:23:3a:67:46:c1:0a:ff:da:e4:38:da:bd:c0:54:ee:a1:
01:38:b7:68:46:5e:3e:1c:a9:70:06:13:1b:6c:8c:74:cd:50:
48:da:9c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:54:51 2025 by rpki-client