Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File: rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier: 2K7k5JDoubizyOh9EbWgngy6X769AHXBXtrfk1DU3W4=
Subject key identifier: 2A:2C:F7:3F:FE:92:FD:57:84:B5:33:7B:D6:DD:18:83:99:E7:F2:2B
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial: 019A50E2900D639C9563A182A260FB99AEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number: 0DF4
Signing time: Tue 04 Nov 2025 22:00:16 +0000
Manifest this update: Tue 04 Nov 2025 22:00:16 +0000
Manifest next update: Wed 05 Nov 2025 22:00:16 +0000
Files and hashes: 1: 1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa (hash: a5qc0h3BhqmeqSpAZh7GFmd10hjtqvPl4/lqfepgblo=)
2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: cwRcYwFXI4wcjXEs8B1MNUa8Ije94M+eTXFwPlm1gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:90:0d:63:9c:95:63:a1:82:a2:60:fb:99:ae:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Validity
Not Before: Nov 4 22:00:16 2025 GMT
Not After : Nov 5 22:00:16 2025 GMT
Subject: CN=2a2cf73ffe92fd5784b5337bd6dd188399e7f22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:bc:d7:68:fa:27:38:c5:74:e2:15:fd:43:
c2:0d:32:23:b1:fa:29:39:6e:07:a8:aa:20:e1:f3:
be:fe:d4:bf:94:2b:2f:b6:ac:79:98:d0:c1:4d:ad:
33:08:ce:bd:fa:11:ff:04:3e:ca:31:d2:d9:b0:7c:
0a:69:4c:5d:31:b5:3e:5b:8f:b5:3e:b8:df:13:6b:
6e:2f:5e:34:04:8c:e2:bd:b0:56:4a:f2:f9:b7:3a:
bb:57:fa:90:a9:15:7f:18:1f:db:3a:f2:35:1e:d1:
e9:d2:10:a7:b1:36:e4:12:7e:bb:5d:17:9e:2b:9c:
ba:ed:12:e1:3a:21:91:4f:4f:19:cc:81:47:5e:88:
c4:b3:8c:c1:4a:93:f5:26:71:40:39:14:47:ec:14:
54:4a:1c:47:fc:74:59:1e:ec:63:70:fd:fb:48:1b:
67:12:00:b0:cf:0a:75:4d:c5:58:17:11:ce:d4:75:
00:e9:90:5e:0d:bb:3b:17:38:79:9e:bc:a1:82:0a:
5f:38:28:5b:e3:2e:06:26:50:8b:70:2e:eb:b9:06:
e9:1e:00:97:18:65:b4:e1:da:8a:40:14:21:8e:16:
d5:a4:a3:c2:fa:7d:e3:ed:fa:21:e1:72:40:4f:c8:
90:76:86:f0:e1:d4:6b:ce:2e:4e:16:b4:50:2d:0a:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2C:F7:3F:FE:92:FD:57:84:B5:33:7B:D6:DD:18:83:99:E7:F2:2B
X509v3 Authority Key Identifier:
keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1b:b8:b1:87:f6:7c:70:5a:85:df:db:ef:3c:eb:43:65:4b:
ba:d3:91:a0:fd:53:38:81:fd:0c:a7:8e:ff:8d:98:10:64:4b:
55:a5:ae:a4:38:da:ee:d9:7e:da:96:93:76:a4:86:1a:d1:75:
7e:a1:07:88:fc:64:a6:f7:ab:35:d9:23:51:f1:6e:d8:ac:d3:
da:f0:43:1b:d1:37:62:16:02:40:59:c4:62:cd:f2:62:f5:f3:
b2:ef:59:3c:1f:af:14:6f:00:78:16:80:bb:e4:ea:ca:b7:03:
d4:b0:05:a8:13:32:c3:94:ef:b2:2b:17:cf:dc:c3:78:de:dc:
26:bd:35:98:d1:8e:3b:96:15:ff:5e:f1:24:a9:c2:92:61:50:
49:42:b6:41:33:98:a5:9c:a9:6b:e3:72:ff:b1:2c:68:e6:cb:
17:2a:49:0b:19:7b:28:a5:73:3a:81:67:c4:d6:7e:45:cc:c2:
91:eb:da:75:cf:d0:9b:6b:c8:26:16:5d:de:78:7c:29:44:ec:
96:07:ef:90:cf:94:01:b2:90:41:91:8d:be:fc:78:3e:38:45:
65:35:e9:c6:7a:0b:b9:b4:db:ce:71:5c:78:1d:6f:06:55:49:
84:c4:16:f0:cd:b6:46:26:e7:f5:66:c8:1e:51:1c:70:c0:e3:
3e:85:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:51:32 2025 by rpki-client