Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: lqNaMlBuZbVfRCy1HU3WLcrtrv/p5/u4oRC7EeL2ZD0=
Subject key identifier: 0C:1B:17:EB:1A:52:1C:15:4C:0B:5D:28:36:D4:0C:74:C0:66:15:26
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019A706E96444DAD1557C08D882466D29A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 01:01:26 +0000
Manifest this update: Tue 11 Nov 2025 01:01:26 +0000
Manifest next update: Wed 12 Nov 2025 01:01:26 +0000
Files and hashes: 1: fq_1cNVhnRyKc2u6Tpi7nWrUD48.roa (hash: 03Y77SRPe3amrviIIQ+5UUog0n/DdIDUF4QQne3bPoA=)
2: joyVHpi7wMxjJ0s6ltsRCFgcXYU.roa (hash: OCQinmVLB46q3fla3T34H+fTxVsr8er+6b+WYrx3pLU=)
3: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: TmE/9JOagkRO2KA4MoP/yip9yLc2b03E/F7WSQ915nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:96:44:4d:ad:15:57:c0:8d:88:24:66:d2:9a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Nov 11 01:01:26 2025 GMT
Not After : Nov 12 01:01:26 2025 GMT
Subject: CN=0c1b17eb1a521c154c0b5d2836d40c74c0661526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:f2:84:4d:8d:3c:13:9b:58:b0:7b:e9:5c:
28:0a:de:f7:74:8d:b6:36:7e:dd:05:08:44:30:b2:
f1:40:7f:9b:4f:94:f2:63:fa:ef:4c:1a:35:fa:5f:
8c:53:99:71:16:00:00:56:57:14:cc:f7:14:a7:1f:
22:28:67:fc:7c:24:ad:fe:2b:a4:c8:54:8a:48:da:
4a:e7:54:67:2b:98:83:30:ec:63:c2:fa:c7:f5:f6:
7d:12:3f:3e:18:9a:c6:1d:54:99:e4:c1:a6:e8:2c:
4e:49:ef:a2:6b:75:ca:e1:8f:94:c3:7a:70:62:61:
30:13:f1:51:21:37:9c:a7:46:7d:df:b2:fb:d8:45:
31:ca:88:5c:38:18:20:e7:6d:fa:fc:ee:87:3e:14:
81:5e:b6:7e:b9:ad:67:d1:1e:8a:26:c5:c9:c7:bc:
f3:7d:c2:2e:dc:2b:d3:ea:d4:73:91:2b:4a:41:35:
94:2c:a8:cf:ed:96:73:6f:02:e0:4c:ef:b7:33:42:
dd:f4:0a:b7:86:41:28:2a:f9:b0:bc:74:85:23:20:
47:3c:2e:74:5b:1a:00:22:8f:bc:be:dd:de:0f:de:
ff:8d:a9:7e:9d:48:60:f3:2b:56:03:86:1e:74:1f:
c1:5d:60:16:92:d9:e9:87:dc:0b:f3:29:7f:ef:54:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1B:17:EB:1A:52:1C:15:4C:0B:5D:28:36:D4:0C:74:C0:66:15:26
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7c:c7:1e:7e:13:c0:53:97:de:82:fb:1d:b9:11:c0:37:76:
ee:4a:75:d9:a1:ee:74:0d:9b:17:a9:be:14:b6:36:4a:2f:61:
91:10:4d:ff:a2:f0:76:28:ab:d8:51:b6:e1:e3:40:e6:db:cc:
f5:b4:cf:5c:25:09:8c:61:b6:ca:49:12:a4:db:93:52:11:95:
d4:01:f6:c1:b6:3e:18:f7:c6:5e:b3:c4:e2:30:1e:22:72:4c:
eb:df:8c:a5:80:64:de:af:9b:ae:4d:af:80:5e:1f:ac:da:a1:
f6:e6:fa:a7:6b:d0:85:b0:3a:36:df:df:a2:53:6c:6a:fc:54:
29:cf:94:59:76:cd:b2:0a:45:43:8b:40:24:f4:97:c9:bd:56:
79:f0:79:c3:8f:79:ed:a2:1b:14:34:d7:44:3d:c4:97:ca:b0:
fc:72:22:bb:75:82:a1:32:fa:5f:49:a3:b0:55:56:b7:5f:0d:
f6:89:f6:89:b1:f4:4c:04:81:41:a0:cf:7e:91:c8:94:34:59:
92:d0:ed:9f:d7:ca:f6:8a:a3:86:3b:3a:94:0c:14:3a:89:35:
a0:67:4e:42:ad:4d:51:2f:03:6f:02:ee:4f:b8:58:5d:ad:02:
f5:d1:52:a0:f5:6f:43:1f:df:f4:50:ec:e9:88:20:66:9e:1b:
0e:47:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:46 2025 by rpki-client