Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: OmQZGuwKKu0AtlJWlNsTqYUFfAhQxVdD8sojasCZ5D0=
Subject key identifier: 2B:4B:A5:61:A8:AB:07:EE:C6:57:25:70:EB:68:F6:DC:27:A8:9F:03
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 019A71B7D03D4A56E22F53A3098385C91ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 108A
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: coaKjMXCpa674bUJWIhb0obGLwTveH4KJM4CkAVMoiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d0:3d:4a:56:e2:2f:53:a3:09:83:85:c9:1a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=2b4ba561a8ab07eec6572570eb68f6dc27a89f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:52:9c:0c:ab:16:df:ca:9e:5b:03:d4:83:
79:e3:73:73:f9:8d:fb:0f:66:d4:dd:1a:97:e4:02:
aa:37:90:ab:12:ee:80:67:1e:ab:0b:60:5b:02:89:
34:df:93:41:51:9d:9b:6f:b9:54:0f:4a:c3:95:ae:
f5:9a:83:63:97:36:a2:7d:6e:51:92:d6:0f:80:e3:
30:a6:4c:a2:93:83:db:42:4d:bf:e3:21:4d:a8:98:
ec:53:41:2c:e5:dc:13:65:69:a1:30:eb:27:71:00:
c8:81:8a:5e:fa:48:e6:03:58:6f:59:73:2e:a5:7e:
20:e2:4e:b5:ef:d9:21:18:63:bc:10:2e:b8:f4:71:
71:17:5b:c1:5d:fe:3f:d5:e6:0e:e9:be:ba:6b:01:
68:d3:c0:54:34:7c:46:d5:9b:85:c5:bf:47:be:c1:
6f:82:c7:07:d2:2a:bb:fb:83:d7:e9:31:7a:ea:6c:
4a:22:4e:01:3a:30:36:1f:4b:65:8b:5b:bf:a5:cf:
e0:53:3a:af:cf:3b:d9:75:ea:94:2e:d6:b5:25:00:
62:50:fa:26:7b:37:40:2a:20:06:f8:60:a1:48:5f:
c5:b2:69:8f:89:25:2b:a6:ef:df:81:cf:7f:44:0c:
21:20:c5:43:ed:9f:74:18:cf:ef:c0:da:31:68:9f:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:A5:61:A8:AB:07:EE:C6:57:25:70:EB:68:F6:DC:27:A8:9F:03
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7a:bd:63:4d:b4:a6:86:13:f7:ce:e9:2a:ee:fa:b7:93:f3:
5c:09:39:c2:3e:21:0a:a0:43:3d:1f:51:46:c2:96:50:90:d9:
3d:d9:d3:74:20:f6:d8:25:40:3f:57:05:bb:9a:b0:1b:44:36:
92:ea:c2:99:e4:92:29:79:85:c2:95:28:85:89:d5:0d:06:06:
ba:21:49:a7:ae:19:be:0b:49:52:22:59:fc:fa:53:3f:75:c8:
9f:8f:b9:ce:41:e0:fc:da:21:81:e6:ac:e8:1e:4a:4a:2a:80:
d1:1f:97:3b:a5:7f:ed:62:6c:d9:97:bb:a1:c9:03:61:91:45:
43:af:36:c7:29:c8:8c:3c:f1:9b:84:5e:b7:4d:c5:0a:b4:9d:
55:7e:10:c2:8f:70:f9:fe:27:31:89:7e:2a:90:6b:e4:89:e2:
64:37:0c:1d:9b:0b:f2:c9:84:26:aa:b9:2b:3e:e3:da:60:48:
39:bd:6f:f4:5e:b2:c1:92:50:3c:62:98:e9:68:c4:f1:7c:af:
76:dd:d9:26:f8:eb:e4:9e:ce:b1:4b:ad:fc:03:91:fb:5d:7c:
e7:f6:c8:88:5f:50:86:84:91:04:48:d3:23:ad:81:6d:bd:27:
ee:6f:b3:37:79:18:6e:9e:75:63:6e:0c:98:4d:aa:52:c6:2a:
fc:13:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:11 2025 by rpki-client