Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: PJgOwPtmXoWR0eF8StzXhc/rBxYOQVOGaYdYczGgtXI=
Subject key identifier: FD:20:9B:56:D9:FD:A2:38:74:CD:4C:85:87:07:09:03:B7:A5:8A:2D
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 019A4E1893E93B964516823C0B67EFDF8CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 09:00:24 +0000
Manifest this update: Tue 04 Nov 2025 09:00:24 +0000
Manifest next update: Wed 05 Nov 2025 09:00:24 +0000
Files and hashes: 1: gFSAApK2GHEW9co-hPvID0_Xbj0.roa (hash: 4lamTHM9SOHzvbwgysIOqInF+Jmi38B32pNkhrQEyFY=)
2: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: +Rq7k+wWJuKEj4sCocTAqciyDC4D2HC4a+0N3HEL9Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:93:e9:3b:96:45:16:82:3c:0b:67:ef:df:8c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Nov 4 09:00:24 2025 GMT
Not After : Nov 5 09:00:24 2025 GMT
Subject: CN=fd209b56d9fda23874cd4c8587070903b7a58a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:cc:3b:2a:1f:07:eb:98:06:16:e2:1d:ab:
b3:ab:12:a0:d1:8e:d8:1b:50:ea:11:85:ec:36:9f:
f6:31:43:29:d2:cb:1f:4d:de:04:be:fd:f2:cd:4f:
ca:6d:24:97:98:02:ce:15:9a:2e:1b:46:a2:c1:e4:
cb:3d:7c:f2:e7:1a:4d:0b:f6:52:8b:b6:c9:d7:bc:
b7:0f:bc:78:99:66:9c:90:96:b6:85:bc:b2:f6:43:
3c:67:9c:9a:b8:22:b1:66:c7:19:f3:3c:78:d7:10:
c5:3e:4c:10:4f:02:30:6e:c2:4f:34:da:bb:e6:08:
6d:9a:d3:07:5f:29:dd:36:93:cb:89:b1:4b:fb:95:
f0:32:2f:c6:e2:ec:4a:ba:04:ee:53:82:ee:c9:55:
cc:b6:bd:70:f1:2e:23:3c:25:2a:13:81:22:9d:cd:
ec:41:58:33:d0:95:a3:74:9e:64:5c:57:81:3f:a0:
c5:d5:e4:c9:21:ad:8e:e1:3b:31:54:2e:f9:80:6c:
4f:55:b1:56:5e:e7:f8:9c:12:4a:13:3f:db:e0:0c:
51:e7:73:05:48:9b:ec:c1:05:ff:4e:b3:e4:a0:6e:
48:5a:98:94:a0:7f:d1:d4:98:84:a5:64:fe:2f:f3:
44:15:55:b5:6d:00:40:4b:27:c1:8f:00:6e:85:96:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:20:9B:56:D9:FD:A2:38:74:CD:4C:85:87:07:09:03:B7:A5:8A:2D
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:d4:f1:d8:7b:f3:ff:69:13:01:e6:63:5f:69:ba:0d:89:
e1:62:c8:c3:ff:74:89:51:f2:d0:fe:60:6b:af:ba:0f:1c:89:
55:df:7a:62:71:7f:48:68:14:b5:29:2a:88:bd:e5:b0:96:6c:
45:52:ac:64:a6:a7:af:71:c6:70:0a:d3:c4:e5:65:62:ff:80:
42:d9:d8:03:7a:dc:2e:e4:50:4f:f1:02:ae:bf:69:97:61:c3:
e6:54:b6:16:ab:f6:76:c0:f0:5e:b0:18:0e:53:a9:e8:ac:98:
9e:fb:73:c6:a3:4b:3b:de:7c:f5:52:77:f5:3e:47:a1:fb:a1:
cd:3a:46:1f:ce:4b:8f:0c:40:fc:12:6d:b9:07:90:cd:54:23:
97:e0:7c:e5:88:20:06:27:df:bf:b0:af:38:f2:09:a3:cf:ab:
9d:37:de:8b:d4:bb:e4:27:b3:2c:f2:f9:bd:27:b6:9f:f8:20:
a8:2b:02:d7:27:5b:74:76:a3:79:0a:95:ee:3a:02:7f:ec:e6:
17:9c:8d:56:1d:92:33:d1:3d:44:31:a2:83:07:07:21:ca:a8:
9c:6d:3e:93:97:df:2a:7f:0c:66:c8:30:c3:cc:ad:f3:be:cd:
d9:58:8e:03:20:eb:b6:35:db:83:11:95:d9:b0:39:cf:1b:0e:
41:bc:62:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:59 2025 by rpki-client