Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File: ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier: PkZLAsa/wThi4e8PWYhoujcMkZXmMjvS1Wqly8zVZOs=
Subject key identifier: 41:F8:12:47:99:0F:6E:64:2D:01:74:37:FD:20:45:1F:42:E5:22:22
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial: 019A51506CD5C341FD689099DF8AEEFE8CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number: 0FE6
Signing time: Wed 05 Nov 2025 00:00:16 +0000
Manifest this update: Wed 05 Nov 2025 00:00:16 +0000
Manifest next update: Thu 06 Nov 2025 00:00:16 +0000
Files and hashes: 1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: 18IDk381S52pi15kom0x9SSWaydA4nGpLAPbv1eRkdY=)
2: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (hash: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=)
3: Qetcf0dQacmnDzzLj6Br0uoMaiI.roa (hash: kfWLgyOV8y1YMkD0xHciwqgNJz90NpBbtolieL+YMGs=)
4: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (hash: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:6c:d5:c3:41:fd:68:90:99:df:8a:ee:fe:8c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
Validity
Not Before: Nov 5 00:00:16 2025 GMT
Not After : Nov 6 00:00:16 2025 GMT
Subject: CN=41f81247990f6e642d017437fd20451f42e52222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:08:9b:cb:1f:3c:e9:f3:2a:83:26:31:cd:
0e:f6:2d:12:d1:ba:9c:f6:92:c2:e1:04:0d:25:e1:
d3:aa:d0:1c:a4:22:48:8b:03:5d:be:f3:0b:21:24:
15:43:c6:f5:71:e8:45:b4:1d:e2:8d:54:ae:9a:51:
02:73:93:6b:ac:13:f3:db:86:22:01:40:97:3f:ba:
0e:ed:76:d4:01:0a:22:aa:28:1f:47:bf:37:1f:73:
19:47:ce:74:05:3c:35:68:78:2e:fe:6d:0a:56:ca:
44:fb:52:e6:01:7d:f7:e5:7d:66:a6:81:fe:58:2e:
59:10:fe:04:eb:b9:2e:1c:da:dc:8c:b9:63:08:72:
40:3e:f3:60:4b:90:8c:32:8e:cc:e4:02:4b:15:54:
46:66:5e:c8:d8:df:dd:87:c0:96:d0:81:2f:e1:32:
c2:b1:34:13:49:4a:7e:d7:12:7d:a3:c1:a1:e5:ee:
b3:a8:a3:1f:79:83:83:30:eb:05:44:03:78:97:57:
21:85:f6:f1:e2:c9:1d:ee:ea:6a:c8:3c:e8:49:16:
22:37:59:72:f0:2d:b4:1d:99:10:bd:3f:94:31:97:
53:57:26:5d:80:3f:d9:f4:b2:d4:10:e9:21:af:64:
91:cd:a7:a8:9c:b0:04:0c:92:7f:23:66:cd:57:e6:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:12:47:99:0F:6E:64:2D:01:74:37:FD:20:45:1F:42:E5:22:22
X509v3 Authority Key Identifier:
keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e7:9c:fd:81:ab:26:af:11:12:a5:bd:c8:31:54:6c:cc:4a:
e0:5e:e7:f8:d7:da:fe:f1:00:7d:22:30:43:ca:06:c3:25:46:
7e:44:8f:4d:2b:f5:02:a1:53:d5:73:1d:49:3a:4f:d0:02:ef:
86:d4:3b:bd:73:4f:87:a5:03:39:02:59:a5:0f:66:9d:ee:17:
e1:9e:a2:a4:2e:bc:8f:2d:ed:8f:6f:57:e2:bf:df:6f:4e:6b:
69:ca:ba:67:ea:2b:83:9a:6e:3b:9e:ff:b1:7b:cd:20:33:41:
94:6a:2e:14:ec:14:4a:f8:4c:38:8d:d1:4f:a4:a1:9e:0e:f7:
e9:9a:b4:ce:4a:d3:38:23:08:31:e7:64:9c:af:77:f9:79:2f:
cc:5f:c2:37:39:b5:48:0d:7e:62:9e:2e:54:77:fe:e6:00:d1:
07:45:e8:c9:cf:6b:8a:eb:82:d3:4d:cb:94:7a:f5:b1:89:1c:
03:7e:c4:77:24:ca:9c:d4:ca:1d:a0:ad:06:0d:b2:af:de:d5:
4c:80:18:2a:97:c0:6e:bc:5b:68:44:70:27:54:e7:ae:87:e1:
26:13:be:26:3e:df:f1:39:ca:00:72:d5:f3:bf:4d:90:9c:3e:
b7:40:de:c7:c0:e0:7e:51:ed:cc:7a:56:f3:7d:68:d1:7b:74:
f8:ac:d9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:40 2025 by rpki-client