Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File: RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier: YNN9c0W9UerdH/CM7SLZfzofW1KG+4otegNH8KdHSuo=
Subject key identifier: 7C:B7:BC:FA:A8:2B:3D:58:E3:ED:D9:B9:6B:B1:BD:98:00:98:DA:FC
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer: /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial: 019A71B92FF85642819C8D78BF34211D2EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number: 16F5
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=)
2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: Cc3VpVuEZyCMrUVW9rSn82FPQLOZDePitRKiYcg4bZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2f:f8:56:42:81:9c:8d:78:bf:34:21:1d:2e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=7cb7bcfaa82b3d58e3edd9b96bb1bd980098dafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:52:44:b0:29:5b:19:15:a8:6b:18:a4:32:
4a:d8:3f:18:52:95:cf:f8:64:ae:2a:89:a8:55:ff:
f4:99:f8:67:2d:6f:f3:17:25:db:4c:4f:bb:f8:f6:
a3:90:f4:07:5b:5d:93:77:9b:f2:76:3c:7b:0b:c0:
cb:c2:05:f6:b8:66:c2:cc:76:84:cf:6a:13:e3:8b:
4d:50:f9:fd:c3:ac:14:ad:e2:13:c6:68:55:fe:f7:
8f:6c:4a:41:92:71:db:57:19:8c:31:a2:21:53:e9:
d9:1e:24:70:f8:f4:bc:a7:71:09:f7:07:0c:2b:15:
73:ee:50:fb:39:11:7d:8f:41:1e:cb:6a:76:30:dc:
2c:7d:6c:8a:27:52:3e:97:2a:cc:a6:7a:89:c3:1e:
12:46:7d:a3:81:ee:79:f3:64:72:86:54:c2:ea:e4:
90:b4:e5:20:25:1a:87:1b:a6:00:cc:30:81:f2:54:
dd:8f:4d:d7:9d:61:8a:ce:00:4e:50:93:44:6b:c8:
c9:b2:3b:77:ed:d2:62:d7:f4:e8:5f:dd:d9:89:36:
a2:30:40:b6:f3:5c:91:39:90:2d:2c:6b:e8:27:c2:
6b:73:46:b5:84:6d:54:dd:db:f6:4f:04:33:3a:c3:
2b:92:a8:30:6f:fc:a9:22:d8:fc:38:a5:43:58:dc:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B7:BC:FA:A8:2B:3D:58:E3:ED:D9:B9:6B:B1:BD:98:00:98:DA:FC
X509v3 Authority Key Identifier:
keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9a:9a:9b:9c:a8:23:8a:bc:95:6e:9a:da:2e:aa:ec:55:25:
67:58:42:c3:1c:50:4d:8e:b1:99:c4:93:74:92:14:e9:d4:35:
e9:b5:c3:29:bc:90:ba:ee:ca:df:15:13:81:3f:60:5c:b2:b5:
a4:f8:74:7e:51:fc:f8:5c:4e:65:54:cc:ec:d8:70:87:e6:0a:
ce:e8:91:75:11:05:b8:5a:b1:45:05:46:9d:ee:f2:60:4f:07:
58:58:d1:b4:77:47:a2:36:5b:9d:88:12:7e:90:ac:2a:3a:0c:
48:04:0e:7d:9c:24:10:67:d1:3d:97:8c:71:ca:71:63:13:eb:
5b:95:10:84:8a:b9:69:d1:fd:cc:0a:0f:1e:c2:78:a3:b2:2e:
fe:08:eb:12:fa:86:ac:8f:18:7f:a4:b3:3a:5b:8b:e8:44:d5:
c5:fe:42:1b:a3:81:ea:f2:a9:78:da:0c:99:77:7c:af:17:06:
46:6f:eb:c5:a7:44:cd:4c:cc:2d:10:d4:dc:a4:a3:8e:ae:c5:
f5:71:71:69:fe:47:94:6c:dd:0b:7d:59:f4:17:81:67:1b:da:
a8:ff:6e:c7:37:37:6e:bb:2c:c9:10:a6:be:17:9b:15:52:de:
bc:b8:09:bb:90:0c:0d:ad:02:96:49:85:16:54:b9:76:f7:fa:
dd:3c:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:10:45 2025 by rpki-client