Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: N9efiMlXaQZ1Rw8RoBcxX3aw/TviOOYvZ/wab4N2Pck=
Subject key identifier: D2:24:FF:69:F6:DD:F3:3E:45:63:97:7B:E6:D3:FD:73:97:76:7D:43
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 019A72CA8BDBE0225DCCE73296504F478B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 0614
Signing time: Tue 11 Nov 2025 12:01:07 +0000
Manifest this update: Tue 11 Nov 2025 12:01:07 +0000
Manifest next update: Wed 12 Nov 2025 12:01:07 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: W3sm06A9M1ZpPpvxZlnnGuXvIZPlnXSIuv7ICLOzfAY=)
2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:8b:db:e0:22:5d:cc:e7:32:96:50:4f:47:8b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Nov 11 12:01:07 2025 GMT
Not After : Nov 12 12:01:07 2025 GMT
Subject: CN=d224ff69f6ddf33e4563977be6d3fd7397767d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:c8:37:a5:4d:87:f2:f1:6c:04:2d:2a:8b:
fd:89:0c:16:06:4f:9e:c3:48:18:4d:4d:0d:24:32:
8c:b8:67:c1:5b:5d:45:f6:84:67:94:2d:75:8f:38:
2c:7a:c9:14:77:2d:cf:e1:84:8a:d1:a8:a0:84:5e:
ee:e5:4c:85:40:eb:e3:fb:c1:1a:60:4f:34:9b:96:
be:ee:8d:6f:6a:17:35:40:eb:f7:42:9d:d2:ef:9e:
ad:3c:7d:54:f0:91:65:e0:67:59:aa:ee:1e:58:64:
7c:73:89:42:05:f3:21:45:f0:f5:5b:ed:ed:b0:25:
9d:f6:5b:87:cc:bc:96:76:0d:c9:52:17:3d:ba:1f:
b6:27:af:5b:cb:b0:ea:3d:b3:c2:7b:a2:3d:d2:66:
7d:1e:24:9d:6b:ab:ff:2a:a6:70:52:0f:cf:fb:0d:
bc:bd:0e:2e:62:8f:df:61:8f:72:e3:66:e4:54:45:
93:4b:34:e1:18:58:0c:ca:1c:75:b7:18:84:a3:3e:
66:81:d0:c0:de:3b:e5:ee:97:ff:e3:36:22:e8:49:
3b:4c:cb:ff:ae:e5:58:36:1e:02:55:62:9b:d6:0e:
34:cc:e1:0e:6a:7d:fa:fb:a9:a5:c3:5e:c0:32:d8:
29:df:d6:ee:dc:ea:17:07:75:5f:15:5a:7b:71:66:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:FF:69:F6:DD:F3:3E:45:63:97:7B:E6:D3:FD:73:97:76:7D:43
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ae:f1:73:2a:b9:9b:df:d6:10:9d:b5:4b:3b:e9:c7:ab:30:
0c:3f:dd:01:b0:a2:42:ff:48:1a:76:5f:97:f3:32:bd:f0:00:
82:96:96:68:cc:d2:7f:90:f0:7d:9f:64:95:34:68:5f:95:0c:
6f:9c:d2:55:10:7a:5c:d7:90:5c:16:af:38:da:f1:74:9f:99:
4a:84:fe:17:0b:ad:28:95:0a:eb:b9:63:f9:12:44:bd:cc:74:
38:15:93:21:e7:05:5e:be:39:e0:71:a5:22:0c:2e:4a:2d:c5:
ea:df:1e:60:33:ff:4e:70:30:e5:3c:5b:fa:57:3f:7f:6d:47:
b8:f7:ea:6a:9e:46:98:94:a3:0b:f1:84:8c:67:57:f5:d8:0f:
9a:80:7b:a8:c5:65:06:2f:1c:15:7a:b5:1c:7d:be:2b:3d:55:
7e:46:2c:4d:61:cd:23:e7:f9:3a:cd:36:59:fb:6b:bb:5d:ef:
ec:9d:2b:8c:ad:b4:de:ce:73:6b:04:f4:a2:8a:40:f7:a6:2d:
dc:e6:eb:36:22:ad:db:fd:df:c6:d1:2b:b6:b4:bf:b9:4e:14:
cd:ec:f7:0c:27:d8:a5:52:d0:1e:79:e2:b8:30:a5:17:14:31:
7b:5d:b1:2b:51:07:7f:15:ea:58:90:23:b8:d8:1a:3b:e6:62:
2e:ef:6f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:00:40 2025 by rpki-client