Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier: 56LxX8W9RWLc64wVFcfj+NTNCTgFSeuiDjIWJ1NE7zA=
Subject key identifier: C2:EE:C4:71:41:9C:83:28:9B:60:31:3A:D1:7C:13:5D:40:A0:1A:50
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial: 019A7225CEFBFD6AFD0EE53985BEEFFDDAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: RYw6RTdRxPr2wcay7NHn+tDSJSN+bRSH0sZew9jSx6U=)
2: sndMGN9hrwytu8M86g8e17_E-wk.roa (hash: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ce:fb:fd:6a:fd:0e:e5:39:85:be:ef:fd:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=c2eec471419c83289b60313ad17c135d40a01a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:0e:a3:8a:42:e2:f5:72:d3:b2:3e:a6:fc:
36:d2:56:9c:0f:b5:9f:41:3d:84:4a:3d:2f:7d:9a:
3f:6b:04:1a:4c:6b:f7:c2:b1:e5:63:68:f2:b1:32:
bd:24:b6:98:01:6c:fc:e7:aa:53:03:17:49:9b:24:
bb:b7:1c:89:b7:8c:b4:e1:e6:de:9d:bb:4a:d7:a2:
45:aa:df:25:07:56:3d:59:b9:81:34:79:68:24:0c:
1a:98:aa:be:cd:8f:53:da:62:d7:bc:6e:46:b0:2f:
29:bb:c7:ed:69:62:5a:82:98:5c:0b:0a:88:a3:88:
ac:2f:e6:bc:81:66:75:4a:53:52:24:5f:79:0c:2e:
20:30:f0:b6:72:b9:bb:48:75:e1:c3:81:e6:fc:28:
08:74:95:30:2b:6a:e8:44:34:00:d5:f7:55:b3:28:
57:65:99:f9:f7:e2:3f:be:51:c0:1c:af:a1:aa:90:
47:80:d9:2f:ff:b9:55:14:c7:18:97:63:4e:c7:2a:
1a:2b:dd:fc:59:1a:d2:73:b5:ab:b7:b4:d9:ac:f6:
2d:01:35:30:29:a3:cf:1d:58:68:e8:b0:9b:a1:3b:
40:a4:64:e4:6c:1b:f9:ba:b8:6a:97:19:43:8d:e4:
55:b7:8f:a1:82:a0:ca:79:0b:81:cf:d9:db:3c:3f:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EE:C4:71:41:9C:83:28:9B:60:31:3A:D1:7C:13:5D:40:A0:1A:50
X509v3 Authority Key Identifier:
keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e7:c5:73:87:e5:79:da:46:7f:44:c8:6f:1a:18:51:70:c2:
5f:e9:8e:39:da:17:06:a2:ae:84:16:1f:ab:9f:af:da:52:78:
51:42:d0:10:2d:74:76:0f:55:d3:bc:fc:89:fc:33:f0:2d:69:
d9:8b:5a:25:c8:53:36:a1:8a:bc:1e:cd:d7:fd:b0:3b:ca:b3:
9e:24:ac:fa:0f:9d:35:22:a8:4d:45:74:03:5a:11:ac:de:94:
d3:89:29:5a:bd:d4:6e:c2:26:64:14:21:9f:0d:d0:d3:9a:fc:
14:4c:7a:93:b8:84:a4:43:6d:bb:34:1e:e6:e2:8d:0a:16:e9:
54:65:2f:f1:0e:65:a9:e2:92:fa:6a:28:5c:24:1e:ac:d5:8e:
17:3a:f6:0e:28:27:81:a8:f0:66:66:68:fa:77:6d:e6:87:5a:
90:e1:8a:69:b5:60:7b:ce:cf:45:97:e5:c7:38:25:2a:1d:d4:
84:63:d2:65:d5:fc:92:7d:de:71:3d:ee:7d:f1:a7:a8:74:5a:
a5:74:2e:2c:87:1d:2a:34:0c:03:83:cb:72:b3:f5:61:0a:a2:
8d:ba:b4:e0:65:97:90:12:33:bd:95:c6:b4:d3:25:ba:66:a2:
c4:21:f2:b7:1a:3e:cc:a4:cf:61:06:3c:ad:4b:04:84:70:91:
fc:9b:92:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:41 2025 by rpki-client