Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File: RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier: 3AbcgNjSWG2eholscXDen2nelI7Fo6iIzmMXI07LGos=
Subject key identifier: 85:A9:18:C9:05:01:3C:29:C0:87:1C:F5:C5:59:6D:8F:61:21:C2:27
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial: 019A4DAAF2AB15530B91C670D146E3B0EF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 07:00:40 +0000
Manifest this update: Tue 04 Nov 2025 07:00:40 +0000
Manifest next update: Wed 05 Nov 2025 07:00:40 +0000
Files and hashes: 1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: 3Fon2HFwY6NkrNqfpqRD9zBDYADN8BY8hoSBlIZEG5g=)
2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f2:ab:15:53:0b:91:c6:70:d1:46:e3:b0:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Validity
Not Before: Nov 4 07:00:40 2025 GMT
Not After : Nov 5 07:00:40 2025 GMT
Subject: CN=85a918c905013c29c0871cf5c5596d8f6121c227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:00:2a:a9:f2:b6:31:51:dd:10:6a:2e:d4:
ea:86:6a:99:e4:34:22:43:c2:4f:2e:42:5c:21:61:
4e:d2:d2:f3:90:2a:45:b4:5a:ee:1f:85:ec:8f:3c:
48:fb:f1:9d:fa:92:fa:7c:69:ee:28:58:f5:ab:9c:
80:ef:c5:06:d7:80:64:b0:51:a4:e8:43:9e:9c:c2:
81:c4:75:d3:a6:23:70:50:51:49:43:72:8a:b1:cc:
92:a0:3a:83:0d:67:3a:d7:b9:31:cc:0d:8e:77:3a:
14:dc:48:3d:a3:c4:e5:8f:00:58:c5:fa:a5:6e:d2:
44:c2:5c:62:c8:16:f5:86:06:ea:1c:f6:10:7d:f4:
47:5a:46:01:ce:5a:10:e6:1a:6c:eb:59:78:f3:a3:
40:88:bb:1c:53:e3:b7:ac:5f:09:dd:06:00:13:61:
96:b2:d6:83:fa:9e:95:79:8b:83:95:65:5c:e1:84:
55:12:3f:80:59:48:69:3e:73:00:ad:94:74:4d:6e:
34:5d:72:eb:c7:c6:6b:06:62:7a:3a:75:e9:55:3c:
f7:e2:d4:a4:ad:93:5c:78:a7:c1:b2:99:e0:68:d7:
ce:1d:11:86:0e:c2:30:6c:8f:4e:b1:06:4f:2f:b3:
97:57:33:92:86:0a:26:63:47:03:15:61:fe:75:bd:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A9:18:C9:05:01:3C:29:C0:87:1C:F5:C5:59:6D:8F:61:21:C2:27
X509v3 Authority Key Identifier:
keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5c:e0:3a:d3:aa:94:1d:37:5b:fd:c7:58:72:98:95:a4:65:
c4:94:76:a8:ba:7a:f2:82:00:91:ba:6f:6b:dc:f6:a2:d6:4f:
bf:66:ce:99:a6:b4:62:71:e3:4a:08:2a:bf:31:4f:65:a0:b2:
22:45:e7:50:d7:21:69:6d:99:ac:7a:18:32:81:b0:94:16:12:
99:77:24:af:64:54:4f:b6:94:8d:c1:16:f9:6e:f9:66:d3:3c:
a8:c2:fb:87:6c:58:2e:1d:eb:35:61:f0:92:75:f9:37:a5:30:
3d:a5:4c:84:26:40:e9:10:3d:e7:49:c6:15:8f:7c:be:9c:e9:
c5:d4:7e:20:7a:51:4e:55:9a:fc:f0:04:d6:61:a6:8f:80:f9:
eb:b9:cc:c7:1f:6d:ef:94:75:cc:48:bf:ef:c4:a8:6b:54:a0:
05:be:50:b4:6e:89:aa:87:f0:a0:24:f6:80:6e:27:99:bb:40:
e0:49:02:5e:3a:a5:48:bb:8d:ca:db:dd:4b:ac:54:6d:47:29:
da:d7:0a:66:a0:9a:2c:ec:d0:df:c2:21:c2:d5:b8:59:1d:7a:
76:d7:9c:b3:4d:e2:b5:ef:4f:2e:93:4f:80:29:2d:78:31:ff:
99:04:1d:e9:3d:ce:a0:64:09:31:3a:e6:78:25:71:52:69:71:
82:8d:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:09 2025 by rpki-client