Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: pHVRVN5whxtq4aRgLK2hQB26SSAXe2n+ToIOUGCIPh4=
Subject key identifier: A6:8E:18:89:DB:A8:8A:BD:38:E9:DB:27:59:79:66:49:8C:4B:F1:5A
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 019A4EF4A60327CE17A3F97D6524E767E343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 0AB8
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: bAZgqtR+g09xjw/bQDdR2XGw1JQxZMS+8L86u/VuDng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a6:03:27:ce:17:a3:f9:7d:65:24:e7:67:e3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=a68e1889dba88abd38e9db27597966498c4bf15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:1d:77:be:9c:e2:96:0f:b6:cc:8d:a4:0c:
c2:7e:65:e1:05:4c:d5:21:c6:a3:04:1a:b5:e2:7c:
61:dc:79:ee:54:88:47:ae:7f:db:87:fc:40:cd:a6:
5e:4d:81:2b:55:f0:13:32:ee:aa:96:53:ca:5e:30:
05:72:85:89:04:fe:a1:98:24:cb:da:8b:07:86:f0:
03:80:2d:31:df:26:7b:28:75:d8:7c:11:d9:1b:e3:
9c:0d:df:d6:ee:cf:7a:21:c6:8d:c5:1b:49:69:d3:
6d:bf:62:cd:ef:ac:7a:8a:20:5f:4b:f1:b6:a9:00:
fe:22:5a:ce:c8:7e:90:40:af:76:b3:3d:ee:9a:22:
e0:9e:fb:9b:ec:d2:56:06:a8:8e:60:ae:98:2c:79:
f9:c4:89:ac:97:9b:5a:10:4c:45:b6:ef:9b:33:19:
b9:69:f3:56:51:3f:ec:4e:cf:36:af:ea:be:9a:f0:
54:cc:79:1e:ca:d4:9f:70:c0:17:ae:fc:81:e3:fc:
b9:e6:7e:d4:36:9d:22:0a:fb:58:f4:c5:ce:4f:88:
eb:8e:09:bc:ea:c8:f4:3f:0a:86:c0:df:3f:f9:05:
91:ca:bf:d7:db:29:2b:48:f1:68:f6:aa:d9:61:16:
ac:0a:a0:0e:2b:ec:e0:0c:6a:0e:04:7c:6b:89:bb:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8E:18:89:DB:A8:8A:BD:38:E9:DB:27:59:79:66:49:8C:4B:F1:5A
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fe:51:8e:8e:2f:30:74:c0:d7:54:df:68:f6:26:ee:63:3f:
43:c8:8f:9b:e5:3f:13:2d:e4:e4:26:b5:0b:6e:a0:7c:92:01:
21:e5:8a:96:40:d5:28:2b:6e:68:f8:8f:d1:58:3d:73:49:4c:
05:11:9d:3b:fb:97:03:65:ea:a6:3c:55:16:8f:7a:a0:e6:45:
7d:28:47:93:df:2d:57:7d:81:bb:25:d7:e4:7f:19:cb:a9:dc:
4d:7d:ca:05:8a:65:1e:b5:68:22:b1:e5:36:ad:1a:0e:3d:0e:
40:4a:b9:a4:43:0e:18:e7:43:0d:30:44:15:e0:8f:9f:cf:e8:
e2:7d:96:ef:07:48:b1:d4:9f:1e:29:d1:a4:07:58:b4:a5:e9:
3c:0c:3b:43:50:77:ca:b7:95:0c:14:43:a9:7b:3d:82:59:c1:
cc:28:e9:87:d0:0d:d4:68:0e:1e:e5:47:e8:32:ac:91:a9:4f:
3b:b8:54:5e:e1:80:73:fe:7a:d5:51:d5:e4:33:dc:65:41:da:
53:0f:e0:d9:37:eb:a4:67:d7:7c:76:1a:9d:74:78:3f:d9:49:
88:85:63:4a:7f:33:e1:b4:72:e5:d5:24:ca:f2:1e:36:75:7e:
24:22:29:68:d3:b1:7f:5c:2b:f4:65:19:7e:75:9f:27:60:44:
12:c2:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:27 2025 by rpki-client