Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
File: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft (raw, json)
Hash identifier: urC0vSfMLlOuvzjk6TOmeLNRbBHb5TfOzH/qzMnsDZU=
Subject key identifier: 1F:03:3A:B3:0D:FC:42:CB:D5:31:47:DE:BA:84:C1:0A:21:18:B5:1B
Authority key identifier: 77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
Certificate issuer: /CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Certificate serial: 019A71B879EE7C84359DEB6428C68807AE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: KfVGrrJYfyAf1ioL1wUbST77ZGc.roa (hash: 6wDGYAdbjHeb0jIyTRUSvJfvhrmfOqr3R3ir+lFRzkY=)
2: d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl (hash: vFWAem0MZ8HKYgWIJyj+C5vgG1WIwoqBZfxfX2sGV50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:79:ee:7c:84:35:9d:eb:64:28:c6:88:07:ae:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77402ff815eebc61a93cf1b0d0bcdcec7a29f19f
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=1f033ab30dfc42cbd53147deba84c10a2118b51b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:5f:e2:4e:35:85:d8:c7:aa:47:46:2b:de:
2b:ea:fa:7e:c8:40:5c:08:0b:97:5b:81:03:45:88:
f8:6a:af:23:e3:89:d6:a9:b6:8c:c4:df:bc:ec:3a:
ef:25:96:9f:07:14:c2:8e:42:23:ab:7b:ad:79:4e:
7f:72:d1:46:5f:06:52:9a:f0:07:c2:e3:38:15:41:
99:35:29:d5:4d:84:37:72:32:11:25:db:2c:f6:09:
63:7f:f8:97:0e:33:bf:68:b0:32:d6:76:34:e8:8d:
6f:09:8a:e9:b3:5c:3e:cf:6a:b0:3e:5e:c5:8e:86:
5c:dc:ac:d3:9d:6f:e2:98:a6:5e:07:58:91:34:79:
be:51:df:0b:6f:ba:08:ab:ee:cc:19:09:11:c5:2b:
ee:11:73:a3:39:1d:3d:07:42:53:a7:cb:7c:d3:cd:
06:2a:61:d0:57:fd:3e:b1:b6:8e:5a:57:bd:e4:08:
c3:86:37:a2:ef:a0:4a:81:e0:4e:ab:d7:2c:b2:81:
a1:b8:a0:ed:4a:49:ad:02:01:53:42:a0:c7:e0:95:
b8:ba:dc:ca:d0:70:5d:32:60:b6:66:ee:08:3c:0d:
89:df:c5:07:df:32:44:4d:70:6d:1b:05:53:a3:e7:
18:9a:52:16:ff:43:c3:13:f8:a4:b6:9e:21:fb:a0:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:03:3A:B3:0D:FC:42:CB:D5:31:47:DE:BA:84:C1:0A:21:18:B5:1B
X509v3 Authority Key Identifier:
keyid:77:40:2F:F8:15:EE:BC:61:A9:3C:F1:B0:D0:BC:DC:EC:7A:29:F1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/adfbf0-0c07-4a07-8954-9d8a18e7b252/1/d0Av-BXuvGGpPPGw0Lzc7Hop8Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8d:b5:60:82:ff:a4:27:b0:6c:bf:a2:3a:19:bf:06:7c:c6:
6a:fe:42:ed:b3:b4:c5:04:a7:f7:a3:03:74:2b:a1:a8:d8:b2:
68:36:9b:f3:9e:eb:7e:34:d3:ec:c0:02:4b:06:af:d2:e4:4e:
32:1d:ce:2a:d3:ad:6b:df:f6:98:2c:6f:21:e9:08:b7:af:81:
c4:f1:3d:6c:7c:79:fc:ec:79:fc:b1:0d:9d:33:ee:7b:8b:1c:
cc:5a:d9:ff:6c:6d:e0:36:b6:83:fe:88:7b:4c:67:cb:08:4d:
a5:28:1a:06:5e:0a:a4:7b:0b:ba:b7:12:d4:45:24:d7:8a:93:
94:22:0d:2f:d6:fa:e5:ac:31:a4:cb:1b:a5:8b:19:a1:cc:a3:
10:96:c9:c2:ea:9b:f1:28:f2:e7:f5:92:80:e6:f7:9f:0f:99:
24:ca:dd:97:e0:0c:2a:50:3d:79:4c:06:72:b7:ee:e7:a0:3f:
fc:e1:b5:87:f7:4c:62:cf:6a:7d:c1:63:31:65:aa:fb:99:af:
37:83:8d:1f:ae:6c:34:ce:d2:fa:bc:eb:6d:d6:fd:ab:62:58:
bc:69:a2:35:71:9b:6a:56:79:ee:93:24:9d:2f:14:66:14:e9:
f7:39:4b:ee:31:72:8d:e7:d1:8f:06:e1:f4:7d:18:19:b9:b6:
9c:49:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:24 2025 by rpki-client