Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
File: 40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json)
Hash identifier: XwhyEgazYkLieVBAzuqLNopUWldk7HKQmRoOz9oHLPg=
Subject key identifier: 29:3A:5A:F3:22:0E:0E:73:80:C0:A8:4F:9B:89:49:93:7A:53:33:82
Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Certificate serial: 019A526384583B5D2DCEA5572EA113053AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
Manifest number: 0553
Signing time: Wed 05 Nov 2025 05:00:44 +0000
Manifest this update: Wed 05 Nov 2025 05:00:44 +0000
Manifest next update: Thu 06 Nov 2025 05:00:44 +0000
Files and hashes: 1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: rVXKlNCGyApjF9/1XIWWZzZ/o3Rj0TKNCLrw2KmTWPc=)
2: nZAWWVMmtESroqhC0PS3Wx64m1g.roa (hash: qpLibwBGLw83uqsHA4XHZBFcLuSXya9DooLiBQa7gxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:84:58:3b:5d:2d:ce:a5:57:2e:a1:13:05:3a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b
Validity
Not Before: Nov 5 05:00:44 2025 GMT
Not After : Nov 6 05:00:44 2025 GMT
Subject: CN=293a5af3220e0e7380c0a84f9b8949937a533382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:b6:67:a8:39:bc:b6:bd:50:33:e9:8e:8d:
bd:46:7e:72:45:db:c9:c2:fb:02:3e:fe:1b:a4:e4:
77:92:08:84:37:bb:6c:2e:31:bd:b8:4e:b5:b8:17:
f7:72:af:e2:f9:fe:3d:3a:30:02:a5:40:5e:b3:38:
90:27:c0:91:7c:60:b4:b8:90:d8:15:87:20:42:75:
b4:49:16:b7:bd:a1:d5:fb:21:8a:a9:02:0d:33:2c:
f6:7d:75:ff:70:ec:34:ed:87:e9:e3:19:0a:9f:eb:
10:e6:15:c5:4b:d6:60:a5:4c:ff:2b:0f:b0:95:3c:
37:01:1c:e6:37:6c:7d:6f:6b:cc:54:99:14:b3:1a:
97:17:0d:19:27:79:fc:bc:72:60:c9:88:66:6b:f7:
91:78:da:ce:9f:80:43:c2:30:61:9a:3f:be:6b:01:
cd:18:91:df:33:5b:c7:9c:ab:77:35:f9:e2:58:48:
62:8e:1e:35:33:8b:f7:a1:bc:2b:58:39:aa:31:47:
cf:d1:a9:84:9e:9b:87:e6:2c:d6:3b:b0:c9:3b:82:
1d:26:fe:5c:d1:48:98:1f:26:a2:7a:78:7c:c6:30:
2b:52:14:89:d5:d6:73:d2:f9:51:7f:f9:03:11:05:
93:19:8d:14:06:8e:c3:72:81:e5:fb:78:13:b0:86:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3A:5A:F3:22:0E:0E:73:80:C0:A8:4F:9B:89:49:93:7A:53:33:82
X509v3 Authority Key Identifier:
keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5d:67:b4:b1:26:98:f2:5f:e1:59:26:b2:53:4c:db:64:e7:
98:48:2b:c8:05:e2:96:d0:aa:35:e8:9c:37:95:5d:ad:b6:da:
6b:d4:d8:33:5d:49:18:4a:2f:f7:5b:aa:ba:bc:e8:d9:62:21:
d2:ba:a0:47:d2:68:a1:01:58:68:59:5a:09:aa:d1:aa:8c:e8:
22:f7:d6:9b:81:bf:35:dc:e5:57:be:40:81:4c:3e:14:e4:d1:
22:33:ac:2b:50:3e:12:4e:4d:4f:3c:c0:70:4d:19:72:12:ca:
69:63:ad:b8:8c:67:37:88:68:4f:dd:ff:9b:13:6a:e2:86:e8:
5d:c5:fa:f3:4e:67:bc:cf:58:94:cb:f0:60:af:9a:aa:d0:9c:
aa:46:e1:d6:00:cd:52:2f:09:1b:01:a3:87:74:52:9e:e4:f6:
38:fb:2f:72:35:b0:e8:68:ae:c0:88:d8:bb:d5:45:f6:45:d8:
a0:8e:5e:aa:15:98:2a:94:dd:d6:29:be:ea:5e:f4:a2:17:65:
f4:61:25:db:0b:25:5a:ac:97:e7:2e:65:14:bd:50:d7:ee:72:
ea:c7:62:f8:b1:9c:45:3a:ec:3d:f3:ab:b0:33:11:09:1b:93:
78:4d:fd:c6:fc:9a:78:9a:cf:60:27:61:35:40:b2:65:8b:58:
0e:f6:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:29 2025 by rpki-client