Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: sE8Oq00RufLbqYuiBJ2tEXTMHVllqLPprjRyg3ibslQ=
Subject key identifier: 1A:85:63:0F:FE:B3:9A:85:C7:59:76:6D:86:DB:EA:75:EB:B2:47:44
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 019A4EF5151AB3DF922B100C9ED5B476861F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 046E
Signing time: Tue 04 Nov 2025 13:01:15 +0000
Manifest this update: Tue 04 Nov 2025 13:01:15 +0000
Manifest next update: Wed 05 Nov 2025 13:01:15 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: swD/5+7/huUNBD7Uuc9UfPVezAK6AJqNxKMMrgWvYxU=)
2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=)
3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:15:1a:b3:df:92:2b:10:0c:9e:d5:b4:76:86:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Nov 4 13:01:15 2025 GMT
Not After : Nov 5 13:01:15 2025 GMT
Subject: CN=1a85630ffeb39a85c759766d86dbea75ebb24744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:f5:3d:e8:4b:95:7c:ab:cb:6b:2e:a0:61:
55:1e:af:32:5e:e8:63:0d:65:ba:33:43:3a:a2:f5:
c3:55:82:f6:03:72:c4:bc:01:2a:c7:55:7c:b2:90:
fd:87:61:11:61:a4:df:f4:6d:da:4d:22:22:bd:bf:
c0:98:00:89:61:1a:52:bb:86:95:76:8c:c4:38:cf:
5c:5e:6a:79:6d:7e:36:c1:68:bd:27:98:96:c7:9e:
8d:0d:7b:9b:cb:b3:1c:99:ff:85:2f:f5:3f:72:d7:
5d:21:f3:93:a3:76:fd:c6:32:01:d0:49:3e:d4:67:
cd:9b:9c:1a:71:f3:73:88:b8:b5:b7:ee:ac:d6:55:
91:81:30:16:59:87:b6:78:a3:3b:4d:b1:2e:6a:5b:
c9:62:9c:9f:7c:e5:91:e2:80:0e:53:53:85:da:1a:
95:ae:8d:61:b9:50:b6:40:df:f3:d9:4f:75:ce:df:
6d:83:5b:2b:b1:c0:96:a2:f5:1b:d1:8e:8c:23:ef:
35:98:52:32:6e:85:ef:77:4a:38:42:3a:2c:e5:88:
45:a0:7f:da:18:fa:12:a7:a7:1f:e9:bc:72:db:88:
2f:74:2e:36:1c:d5:14:69:d3:2a:81:02:5b:7b:16:
72:5b:67:47:49:bd:a8:19:44:a1:44:d3:20:ce:89:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:85:63:0F:FE:B3:9A:85:C7:59:76:6D:86:DB:EA:75:EB:B2:47:44
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:da:c5:d2:49:dc:f2:a1:a9:0c:cc:c3:d7:05:6b:3d:9c:7e:
6d:00:9a:3a:31:e6:65:0f:6e:8f:56:b9:f8:54:2f:43:a3:a1:
e6:15:3b:ee:a2:ce:4b:71:71:7f:23:f1:31:fe:d3:ec:ea:a0:
92:14:e6:4b:22:24:ec:90:df:16:a9:0b:f1:fe:8f:80:e7:84:
dc:47:b1:a0:67:77:b5:16:d3:a3:ca:1a:8b:e8:66:4d:20:4a:
f6:ec:77:22:b1:5c:c2:5f:17:a4:42:56:78:e5:6c:52:ff:b4:
ac:69:0c:50:b7:df:34:f0:f8:8b:72:ce:12:40:2d:63:24:cd:
c3:05:06:37:c6:3a:25:02:90:04:f2:cf:31:5d:2b:c4:7f:3e:
f0:25:53:3c:e3:bf:8f:e9:38:06:bc:cc:f2:e4:b0:88:77:1e:
5a:61:2c:60:33:7d:25:e5:b9:b6:5c:f5:0d:c0:14:6c:78:a0:
5e:82:a4:38:b9:47:a2:95:c8:b0:06:d0:73:58:65:fa:0e:93:
e4:de:43:07:36:ac:d7:05:48:72:e5:55:bf:4a:fe:ba:7b:d7:
a8:43:25:b4:2a:a8:16:01:c9:35:a6:4d:79:d3:3b:75:c5:31:
25:59:f9:aa:c3:aa:e0:a7:21:c9:35:37:63:97:b0:60:9a:dc:
a9:aa:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:23 2025 by rpki-client