Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: yP8uq0u9sKHdZ0trd8iXBrwmJ40lnAcHdm1YlVDn6lo=
Subject key identifier: D9:9E:83:D1:94:F6:A8:27:7C:C9:20:30:3F:CD:7D:AE:99:82:87:20
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 019A71B8F386BC87E44247FCECE147063038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:17 +0000
Manifest this update: Tue 11 Nov 2025 07:02:17 +0000
Manifest next update: Wed 12 Nov 2025 07:02:17 +0000
Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: Jn/62Argbwt2QccrS2yuSrsgqnwdBcvGMUXnMQJvCyw=)
2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f3:86:bc:87:e4:42:47:fc:ec:e1:47:06:30:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Nov 11 07:02:17 2025 GMT
Not After : Nov 12 07:02:17 2025 GMT
Subject: CN=d99e83d194f6a8277cc920303fcd7dae99828720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:d1:9b:c6:63:87:d4:68:65:66:d8:e0:22:
ef:1a:9c:1f:6f:d1:5c:38:53:01:78:2b:03:c1:72:
e5:fb:d8:9b:79:c1:63:6d:a2:71:d7:71:ec:c2:28:
5c:1a:17:2c:a9:60:cd:69:ca:17:28:fb:25:83:0a:
fe:ad:6c:45:ef:98:90:77:7d:d9:6b:71:31:77:52:
b3:bc:17:1d:9c:8e:71:7b:f0:d4:4d:00:39:21:1b:
db:56:84:5d:bd:b2:02:26:eb:61:75:61:11:d3:94:
4e:97:f3:e3:44:7c:0e:90:9f:34:29:3c:c6:f2:19:
b2:9f:b0:c6:44:be:52:ee:4e:5c:c2:e5:d8:f9:0a:
61:56:df:de:20:f4:19:67:2d:4d:e3:17:87:7a:03:
22:c3:83:e1:b2:ea:64:44:77:8b:14:2b:74:2c:ef:
29:ba:d0:5f:83:48:38:91:0a:98:f3:c6:07:52:fd:
35:0f:c5:04:fe:a9:f3:55:88:1d:c6:5b:70:b9:b1:
5d:d5:23:8c:e7:7e:50:41:13:c2:4f:e9:ee:45:39:
6c:60:0d:36:c6:9b:bb:d2:7d:ca:55:bd:f4:72:ef:
4e:e1:de:a7:5b:74:13:05:6c:17:2b:08:9e:7c:99:
fe:1e:aa:04:fb:2c:de:b5:ab:72:4c:5b:31:4a:ff:
a9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:83:D1:94:F6:A8:27:7C:C9:20:30:3F:CD:7D:AE:99:82:87:20
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c1:6c:b8:a2:20:fd:d2:22:48:e2:f1:05:97:09:27:84:f3:
80:65:0b:8e:43:c5:21:f6:5a:cc:35:ed:0d:a3:cc:b8:96:4f:
44:44:fa:80:71:18:d4:51:d2:44:75:27:3d:99:ba:77:f4:10:
ec:a4:b9:56:60:b3:07:3d:28:cc:70:52:2e:5d:8d:e9:ff:11:
87:6a:9c:9d:e9:dd:e4:c9:ce:c4:5b:12:88:5e:53:0d:bb:61:
f8:6e:ba:7f:57:be:53:43:a4:88:45:b7:7a:af:7c:96:0e:4d:
d8:7f:0a:07:70:ce:71:6c:b7:ca:b3:eb:bc:e1:cd:79:5c:99:
17:a2:ce:fe:d9:16:34:0d:6b:59:d3:e8:bc:b0:ee:36:50:c0:
5b:de:09:32:2a:8d:d8:88:f7:a3:f5:b6:24:43:f1:38:31:cb:
ae:9c:21:49:bd:55:7c:93:60:32:f4:a6:0c:2f:54:34:fa:d2:
5e:b5:61:3d:9b:e8:9f:9f:28:60:eb:d8:ab:d6:3a:b6:4e:55:
df:46:fb:5e:7b:ff:fc:1b:20:d4:f1:43:ba:82:c0:41:91:c1:
62:07:96:d0:af:d0:cd:fe:65:3e:70:df:a4:31:0e:be:ae:3b:
5b:2d:0a:5f:8d:e7:e1:43:32:39:00:b4:ae:99:04:2e:cc:7c:
5f:1b:8a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client