Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: FuNJ//8O260JS77fSJjwqOZA5KUUQhUeYDyF8Q/5j/I=
Subject key identifier: 1D:8F:84:BD:35:C1:8F:9F:4A:A1:99:FF:39:C2:76:9C:3D:A4:82:1C
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019A72261F98A7B16BEEFEB423351921D1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 058B
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: XUrTa9gQ8BbbG91kaEmk62CGVQ45L30DtyF/kGHN3OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1f:98:a7:b1:6b:ee:fe:b4:23:35:19:21:d1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=1d8f84bd35c18f9f4aa199ff39c2769c3da4821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:87:2b:2d:ee:93:d7:6f:ee:0e:df:8b:7f:
ad:5e:1a:96:f0:82:ba:7c:02:29:11:ac:bf:59:51:
99:d6:52:4b:fe:b3:28:ab:9c:f0:83:62:bb:f0:56:
53:e3:f7:da:18:17:f4:8f:17:21:72:8e:e1:fb:b0:
d2:04:82:7e:d7:73:9e:51:a9:2f:6d:86:08:d8:8c:
66:4a:dd:db:6f:84:71:13:e1:36:f5:5f:83:67:ec:
9a:80:af:8a:59:c0:e9:4b:a5:c3:60:c4:87:1b:43:
dc:a7:8b:5d:01:61:d7:c8:13:72:df:45:6a:1b:ff:
3f:f3:ce:e0:2d:67:be:45:31:c3:b9:54:77:19:74:
3e:0e:cf:a7:0e:46:22:a2:14:1b:af:ba:cd:d9:cd:
a2:35:f8:ea:a3:2d:78:f8:2d:cf:47:6c:c4:08:ff:
19:d5:91:cf:a6:2d:46:d7:b0:c7:79:1b:b9:07:5b:
bd:da:1f:b8:20:a9:8c:93:39:fb:43:aa:04:44:ee:
28:ca:a4:41:13:b1:20:ca:46:bf:ac:72:5a:cf:25:
33:d7:92:4d:72:fc:7c:f4:90:fb:29:9f:e4:a9:ab:
9e:2d:ba:92:de:10:3a:d0:91:4b:a1:13:10:14:b2:
78:74:73:2a:01:1d:1b:eb:39:e8:2f:5e:9f:f5:89:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8F:84:BD:35:C1:8F:9F:4A:A1:99:FF:39:C2:76:9C:3D:A4:82:1C
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3e:5c:60:66:ba:17:dc:a4:b2:57:d5:20:ba:6f:90:42:bb:
5a:99:f5:28:e9:3b:ef:63:07:84:75:0e:a1:52:46:6a:68:34:
e4:f4:f4:60:2f:8b:07:5b:8b:c3:e1:43:4c:0f:cf:01:b5:d9:
ab:10:af:6e:e3:f6:71:ba:16:7e:29:fd:8b:c8:48:0c:8a:86:
b7:29:52:38:69:d6:d1:9c:06:a2:37:69:de:ce:2b:22:79:12:
ff:81:68:0f:1f:1e:88:fd:4b:27:f9:32:3d:fd:70:79:0c:fa:
52:9a:20:e8:9e:47:b1:00:0a:de:17:e3:a0:ca:ce:5b:4b:d6:
c5:17:b5:7d:a7:c4:c4:7e:e3:aa:13:4b:3c:a0:7c:29:33:78:
67:07:3d:b6:57:04:fa:0f:e7:77:3c:ae:15:47:e7:c4:ac:da:
63:c3:51:71:44:ee:70:6a:0c:6f:7f:32:54:e0:55:e0:2d:b0:
e6:d9:5a:98:28:ef:f0:82:d3:ec:9d:a7:c7:5c:bd:e7:ac:62:
f6:c8:8d:50:96:30:87:d7:b8:87:b1:c5:c6:03:88:e5:44:35:
4b:23:5c:25:51:52:29:e3:b4:7a:38:0a:5c:b8:d2:32:0a:c8:
fd:38:ee:e1:f9:0f:19:f7:52:9a:1e:76:c6:46:6e:51:95:a7:
20:85:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:58 2025 by rpki-client