Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier: IMYqF70f7FZgG0kukz5Hq7gzgakRgfGV4kUI8r81Bb4=
Subject key identifier: 26:BA:E7:EA:B8:D9:56:66:BF:BB:61:94:C8:06:C4:CB:9C:FF:22:D6
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 019A725C9A69B6FF9825B2CBD9CDD471C0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number: 102D
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: MOt2bIgFe5JlP4Ubdxs1KNHpmPrC0n6qiu0+cP7ftJQ=)
2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9a:69:b6:ff:98:25:b2:cb:d9:cd:d4:71:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=26bae7eab8d95666bfbb6194c806c4cb9cff22d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:a1:b3:11:65:cc:6e:1a:80:b8:ea:b2:e4:
5a:fb:e2:04:0b:b0:11:d4:39:83:b6:3b:49:8d:77:
05:27:92:4b:89:f0:9f:f7:8c:26:cf:cf:b9:06:45:
6b:46:11:f6:71:c5:57:39:a1:81:08:b3:73:0b:73:
ee:b4:13:08:19:1f:10:e6:91:7c:ab:c3:c3:03:1d:
c6:0c:ff:b2:1e:50:d9:97:db:96:e7:64:42:c6:0d:
07:e8:cd:4f:81:12:3a:b1:b4:b0:53:a0:ce:6a:13:
ac:a0:c1:56:00:4d:1c:18:e0:52:93:54:ba:83:f5:
a2:f8:25:68:b5:95:ee:54:4f:77:81:41:ca:74:e5:
92:4c:1b:ab:18:74:0b:fa:30:f3:25:2d:56:db:40:
d2:e6:f9:45:54:92:81:23:dc:c0:d7:c0:e2:f4:9c:
03:a0:d2:2a:36:1e:f4:27:22:14:9d:f5:b8:db:89:
02:68:8a:a4:e8:e5:df:7d:f9:75:04:dd:8c:e0:53:
9d:e1:38:84:c3:dc:f9:76:bf:9e:f9:53:2c:8e:d6:
55:62:c9:c5:63:74:69:18:34:c7:f5:69:d9:f1:c4:
61:6f:38:dc:12:b6:9e:3d:0e:e0:86:c4:c2:26:3a:
0f:c4:ca:25:c6:2c:da:0e:2e:83:d6:37:1c:eb:67:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BA:E7:EA:B8:D9:56:66:BF:BB:61:94:C8:06:C4:CB:9C:FF:22:D6
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:18:97:e1:55:00:03:54:90:db:92:9b:c0:23:bd:13:c6:42:
09:3c:9a:df:8e:d7:13:9e:24:ef:ac:23:13:32:c0:72:aa:c1:
e3:9d:96:3e:d3:39:c1:24:64:33:97:b9:2a:b4:70:cb:16:78:
fa:18:92:39:53:93:2c:60:e7:b5:fa:63:2c:1f:d2:f1:42:7f:
d7:90:ed:d3:6b:19:ab:2c:5b:48:1c:9d:3c:2e:72:ae:5c:f5:
bb:de:8e:39:6d:72:e8:14:83:b4:6d:cf:18:e5:fc:70:64:51:
c4:a1:7d:52:dc:34:5d:3f:e8:16:d1:74:af:c1:66:9d:99:a7:
3f:2d:d6:9d:72:40:2f:2e:db:28:73:c2:c5:24:10:eb:a2:d7:
c6:74:2a:71:e5:ec:be:25:ec:1c:34:0f:eb:52:97:e0:10:56:
8b:58:d1:29:f2:66:7b:c3:48:a9:2e:f3:7f:cc:16:3b:70:96:
34:f8:db:97:8d:4a:8a:a8:93:e8:ef:e9:17:9d:55:21:71:70:
f3:99:81:37:63:1b:f7:8b:42:5f:1f:5d:55:fe:44:f0:80:ee:
46:e5:de:43:a4:6a:31:1a:89:03:0c:04:7c:38:c4:69:29:2f:
9e:6b:be:e9:5e:8e:a5:34:4e:f1:7c:6c:39:96:33:4f:f5:9e:
ff:a5:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:25 2025 by rpki-client