Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: 0Oi5fF/fBaJuGQ78L+x/szj37WqUsb/SOGtyCjt7III=
Subject key identifier: 37:FD:4E:78:22:83:15:22:CC:DB:22:FF:88:8C:CB:BB:2A:78:C9:3A
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019A711368C5A77026213BAF55289B79E3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
2: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: 8YspVVbnswelaaFY/HEokboNB1cznaPnem2K9VmLIqg=)
3: xiLzP1pUVJ4HlLptpzl15fneHrg.roa (hash: Oybd2JrzjZp9Unasli0WI1/BduGFzHUQWKvicye2j54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:68:c5:a7:70:26:21:3b:af:55:28:9b:79:e3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=37fd4e7822831522ccdb22ff888ccbbb2a78c93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:05:26:65:bd:74:57:b5:96:60:42:ff:d4:
fb:09:c3:b6:24:89:d7:85:11:c9:7a:d6:42:4d:80:
2c:cb:85:38:ba:22:8e:c6:0f:e5:b0:1f:18:ac:71:
62:67:01:8b:0d:a6:70:1c:a6:3c:a3:ee:b0:57:f1:
ad:70:13:61:af:0f:69:e4:1a:b1:16:6d:2c:f2:b0:
6a:06:77:e9:08:87:b9:66:d9:24:c0:6e:5a:40:7b:
27:27:be:6e:d8:6f:bc:8b:80:15:60:7e:0c:82:29:
47:51:47:a5:94:f2:9c:eb:fe:99:ee:f5:4a:7a:ba:
c6:ba:06:8d:ca:7d:e3:9a:be:6d:f8:26:37:25:bc:
9e:a4:e9:04:74:9b:98:9e:60:bf:e9:bf:49:65:ca:
fd:ad:a5:95:e6:a5:01:83:fa:14:b0:81:72:29:ac:
43:fc:5e:1b:62:56:08:44:0d:a7:fc:87:b5:95:c9:
e3:25:b1:20:85:79:a9:6b:fa:fc:68:9e:71:8d:5c:
55:89:89:76:0b:d6:88:9c:3b:fd:05:88:f1:c7:cd:
92:de:05:21:cd:87:ce:2d:01:e3:f0:b6:11:76:88:
3f:51:20:ed:dd:4f:ba:f7:7f:4c:fd:6b:03:aa:ca:
3d:c3:8c:3f:a6:0a:e8:5f:fc:38:92:ce:d7:5b:d3:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FD:4E:78:22:83:15:22:CC:DB:22:FF:88:8C:CB:BB:2A:78:C9:3A
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:18:b9:59:67:60:ba:69:9f:ae:9f:5d:27:16:64:b4:36:aa:
bd:f4:41:16:34:b7:09:9b:b9:72:fc:12:ca:71:9d:7d:46:66:
fd:58:82:2d:15:32:71:fa:9b:ec:46:d9:d6:7b:ca:b1:cc:b2:
c5:67:9f:14:9e:30:f5:5e:05:d8:9d:91:ee:67:cc:97:5d:0d:
be:84:1e:e9:aa:fa:6c:94:8a:68:e1:b0:ca:d0:f2:27:86:5c:
0a:88:95:a3:0f:50:a5:cb:8e:f2:c2:b6:76:33:fb:bb:d9:45:
c7:a9:ef:28:1e:d7:dc:86:71:d9:80:92:04:84:52:29:55:04:
4c:79:a4:0d:d1:dd:d9:af:b7:9c:4a:25:86:fd:1d:38:10:77:
20:5f:83:f6:4e:1b:a2:2e:d6:a5:8c:a2:ef:a4:a8:7a:fe:1a:
74:17:41:72:7f:1d:7c:31:7b:bc:b7:e5:b1:77:b3:27:9f:5b:
4f:f7:2f:77:ac:c7:25:3e:6d:6b:8d:72:24:5b:a4:c8:01:d2:
c0:e7:bd:b6:ef:c5:c0:a7:ba:4b:0d:72:96:1f:b3:a9:f3:ed:
97:3d:a4:b2:a0:1c:70:c3:a3:c1:06:37:2b:84:1f:34:c8:1e:
d7:e3:4c:48:69:6e:af:46:23:85:cc:20:67:24:8b:6c:6e:f0:
97:3d:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:34 2025 by rpki-client