Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier: GUQU/fgphOib6haauJGln5VTV33wP/1x1nGDLBVeJKU=
Subject key identifier: 93:7C:A0:9B:3B:53:B8:4B:52:A9:B4:C9:DC:85:D9:9F:F3:E8:38:E0
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 019A706E93526E1F9DEF7C4C6887CFF06F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 01:01:26 +0000
Manifest this update: Tue 11 Nov 2025 01:01:26 +0000
Manifest next update: Wed 12 Nov 2025 01:01:26 +0000
Files and hashes: 1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=)
2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: /D+mGupGHjqbZe2oL224/4Pm6v0iXqgGXGRQzEgwtLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:93:52:6e:1f:9d:ef:7c:4c:68:87:cf:f0:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Nov 11 01:01:26 2025 GMT
Not After : Nov 12 01:01:26 2025 GMT
Subject: CN=937ca09b3b53b84b52a9b4c9dc85d99ff3e838e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:80:fa:7b:6f:6e:29:24:c8:91:a0:de:bd:
9a:4e:16:fc:ce:d5:74:d6:e2:b2:81:d1:e3:46:80:
76:7f:5b:26:fb:eb:4e:7b:e2:b8:63:81:a6:3b:4a:
d7:31:3c:39:60:a9:f2:f8:ce:81:4f:3b:ae:90:42:
c7:f8:40:9a:af:79:95:b0:8a:3f:1b:44:9a:23:e4:
36:90:5d:f2:03:9f:26:7b:24:c7:24:40:ab:6d:16:
e2:ea:41:96:64:2a:10:5a:22:22:fe:25:6c:cb:26:
07:eb:65:98:c4:7d:da:81:b0:d2:fa:83:5b:2b:25:
76:12:67:86:79:09:83:5f:47:bf:1e:f8:97:c5:97:
2c:45:ec:6c:dd:2e:e0:69:79:1f:39:35:69:69:fd:
f3:82:02:1f:1b:3c:09:e0:16:20:a8:d7:49:2b:76:
60:dc:5c:ea:0b:f7:c5:f7:2d:bb:78:b3:fd:de:9a:
66:73:64:52:19:c7:5d:bb:79:cc:9e:80:d7:f5:9b:
ef:0d:72:b8:1e:60:0d:1b:98:4b:51:37:24:75:bb:
5b:31:26:c6:36:72:50:6c:ab:5c:87:67:8a:03:62:
65:ab:c2:a9:09:4f:bc:90:7e:69:e7:8d:a7:4c:a9:
a8:f7:8e:21:69:1f:ea:04:e6:31:99:7d:83:f8:3f:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7C:A0:9B:3B:53:B8:4B:52:A9:B4:C9:DC:85:D9:9F:F3:E8:38:E0
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f5:4a:e5:23:df:30:d5:e5:f9:8b:38:c8:34:98:b4:31:26:
59:bf:cd:92:b4:26:6e:55:ea:a1:3e:0a:6d:be:e6:13:3a:94:
9b:cf:19:79:a1:21:d0:d0:af:f4:26:7b:88:55:8f:a6:5f:67:
a5:be:85:49:bc:bd:65:34:7e:99:ad:01:fe:15:17:f1:31:fa:
fd:1b:10:bd:97:64:0d:24:c7:2b:74:98:3b:48:8b:7b:90:2f:
c0:ea:0d:5a:94:20:83:49:6d:d6:41:c2:5d:95:48:b6:7a:47:
d2:7c:76:60:8a:5d:2b:b2:47:c5:dc:75:01:96:41:3f:fa:ad:
e6:63:d0:79:38:16:b7:ee:dd:14:62:06:1d:e0:a1:b1:8d:ec:
b3:a6:13:f3:64:bb:f1:8e:31:ce:ac:88:a3:38:09:ed:0c:cb:
e2:de:a4:d2:3b:eb:59:e6:8f:53:cf:70:9d:e4:ba:6f:47:9c:
f6:60:1b:c9:f7:f4:fe:13:41:3d:26:5d:30:b0:8c:66:42:84:
35:ec:14:12:99:f9:11:e5:9b:4c:47:77:67:fe:d5:b4:12:cc:
7e:4f:0c:36:4e:3d:af:75:e1:ae:08:3f:d0:f3:26:8d:ec:3a:
76:c2:dd:fb:01:44:cd:b4:a9:56:43:b4:7a:c2:b4:bb:d5:4a:
b9:0a:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:06 2025 by rpki-client