Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
File: 43hlh61HIFqBEo5XjJDK7h5Igos.mft (raw, json)
Hash identifier: qOC5RjrSLvsoRQ7vwYreWy72iJh8ATHA66tG6tmpRuQ=
Subject key identifier: 53:BA:0A:CE:1E:B4:ED:39:A2:7F:33:D4:61:4E:EC:C2:49:C6:CA:D6
Authority key identifier: E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
Certificate issuer: /CN=e3786587ad47205a81128e578c90caee1e48828b
Certificate serial: 019A4EF588404FD3F057FFD487B795DA7B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
Manifest number: 163C
Signing time: Tue 04 Nov 2025 13:01:45 +0000
Manifest this update: Tue 04 Nov 2025 13:01:45 +0000
Manifest next update: Wed 05 Nov 2025 13:01:45 +0000
Files and hashes: 1: 43hlh61HIFqBEo5XjJDK7h5Igos.crl (hash: qaYsO4ObwaAv+PSeFQ25HvfVzaUd0awERLxMW1gTLzU=)
2: LktO0B8qjGLInxw3N5jX_ouyGv4.roa (hash: 0acgVKGcL/QrYT0G9rMKO5SvHbTzsdzBy14zEKR/PS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:88:40:4f:d3:f0:57:ff:d4:87:b7:95:da:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3786587ad47205a81128e578c90caee1e48828b
Validity
Not Before: Nov 4 13:01:45 2025 GMT
Not After : Nov 5 13:01:45 2025 GMT
Subject: CN=53ba0ace1eb4ed39a27f33d4614eecc249c6cad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:85:72:03:07:1b:f1:2c:42:e2:2e:b7:3a:
33:59:ad:48:f4:c2:12:82:b5:aa:13:d2:8d:c4:c4:
77:06:81:4f:73:e1:57:7f:1e:06:50:7e:e6:8c:a1:
6e:92:5f:1b:78:de:84:60:91:78:6b:6b:b2:f1:bf:
5d:53:d9:9e:11:e3:35:c7:a1:97:31:e2:83:40:fb:
d6:87:55:b5:f6:93:13:fb:7b:bb:cd:d9:e6:fa:71:
b9:f2:fb:4f:28:da:4a:b9:ae:26:64:6d:ae:7d:1b:
cc:37:ab:25:bd:95:71:9e:4d:6a:eb:a4:ce:d1:0b:
e1:78:b7:2e:03:d8:6a:e8:b4:58:22:f1:a3:80:f7:
99:21:ee:44:66:7f:be:f8:ed:b0:51:34:83:87:75:
13:11:e3:03:ac:0e:09:6e:d0:ec:60:22:c6:8b:3e:
c0:85:57:fe:ba:05:2d:fc:11:c0:dc:b0:06:6f:d1:
3b:b5:2f:84:ff:4a:86:8a:d7:47:8c:27:11:fe:59:
85:2a:77:a7:17:8f:91:3e:a7:90:ba:95:85:9c:b2:
d1:ec:f5:6c:55:03:04:3f:84:98:be:ad:8f:c2:aa:
fd:83:14:8b:1a:c4:dd:09:9d:f9:a5:e3:5b:85:48:
71:69:d4:5a:03:98:1b:30:e7:53:c2:00:a4:ac:de:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BA:0A:CE:1E:B4:ED:39:A2:7F:33:D4:61:4E:EC:C2:49:C6:CA:D6
X509v3 Authority Key Identifier:
keyid:E3:78:65:87:AD:47:20:5A:81:12:8E:57:8C:90:CA:EE:1E:48:82:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43hlh61HIFqBEo5XjJDK7h5Igos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bb6a7c-31a4-4d33-a853-07cc46e63b50/1/43hlh61HIFqBEo5XjJDK7h5Igos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c9:48:22:53:2e:a0:97:8a:db:a6:65:63:09:67:5f:d7:40:
1e:93:ea:56:d1:8f:96:13:8f:0a:76:1a:ba:75:48:6a:0e:cb:
3f:f5:7b:79:fc:0e:bd:03:55:89:12:28:7d:6f:ba:97:70:a9:
7b:06:ce:b8:84:52:b4:c1:21:2b:c3:bc:05:83:47:ea:7b:a3:
77:d2:7d:a9:f6:02:3b:38:36:96:3f:6c:9a:b0:7f:e1:32:42:
c4:2f:55:f1:dc:64:f9:d0:81:2c:2a:e6:1d:fc:48:25:39:12:
85:86:15:47:fb:c1:42:a8:78:f0:3c:b7:7b:d6:7f:9c:bd:6c:
a5:4b:14:71:99:0f:aa:00:0d:12:40:36:5a:0b:ba:3a:e3:46:
12:4f:3f:c9:82:e7:cb:b4:ee:73:6d:88:7b:a4:98:bb:80:f8:
7f:20:61:89:fd:bc:da:b1:4b:ad:1f:a1:bd:c9:ec:fc:55:8b:
c4:e3:f0:e4:1e:71:64:31:a3:41:50:d5:45:b3:e5:8d:47:8e:
3c:07:6c:32:02:99:eb:6c:c2:a6:c2:29:6c:36:d3:36:f6:19:
ff:e6:0f:96:d3:f8:24:a5:08:38:bc:9f:2f:09:17:12:fd:63:
13:5f:b2:8f:68:2a:7a:bf:31:e8:89:f9:40:16:4a:8e:e3:b1:
ac:74:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:30 2025 by rpki-client