Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: C3likZJFOyPeOVxcU1DJXLCp6x9oFA0zBhF2Ry+pM/A=
Subject key identifier: 15:1C:EC:0C:B1:20:29:E8:CA:F2:F1:B0:55:92:DB:65:48:C7:9B:94
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 019A70DC8653B40401C444FDC85DAFA2E0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:01:31 +0000
Manifest this update: Tue 11 Nov 2025 03:01:31 +0000
Manifest next update: Wed 12 Nov 2025 03:01:31 +0000
Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: V9kNQgmMa2ebLYqipIe+jv3aUXkdLuOI30pOcIeEiB8=)
2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:86:53:b4:04:01:c4:44:fd:c8:5d:af:a2:e0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Nov 11 03:01:31 2025 GMT
Not After : Nov 12 03:01:31 2025 GMT
Subject: CN=151cec0cb12029e8caf2f1b05592db6548c79b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:c5:c9:b1:7b:45:70:53:e2:2a:1a:38:bf:
36:86:ce:65:f8:27:e1:6b:af:91:b8:9f:85:d0:37:
6e:63:69:a0:c1:44:d2:a4:2f:fe:46:c5:2c:9c:46:
f6:eb:77:be:ab:8f:86:d5:19:62:f4:a8:a0:bc:42:
d2:c2:4f:1e:cd:8b:97:c2:86:62:d0:4c:85:41:b7:
18:89:67:4f:fc:d0:c3:bf:a2:0f:f9:f1:ea:f3:6d:
e1:db:8f:a9:de:7a:cf:79:d8:59:04:ec:24:b8:9a:
05:32:5b:64:71:3e:47:f7:3d:ff:cc:ab:26:55:eb:
8f:2e:25:4c:f7:66:1e:b1:3d:1e:a9:db:c6:e8:c2:
9d:59:dd:a9:eb:fb:37:68:42:1b:55:52:19:60:b1:
d4:67:94:49:c4:87:a2:ea:f5:d3:44:ba:a6:96:87:
53:30:72:a7:af:1a:67:cd:b2:9e:ec:fc:f5:63:eb:
61:d8:de:52:e0:3a:d3:7c:74:20:80:d8:b1:ba:51:
a6:0b:5e:85:ce:8d:4b:15:cf:ad:3e:db:4b:c4:c4:
d1:96:5e:4b:e5:d7:ec:05:e3:7c:13:3d:6a:35:21:
8b:e9:10:4e:65:50:26:11:1f:27:fa:6d:88:6f:26:
35:89:62:8c:5a:13:75:58:af:7a:77:d1:c7:9d:f3:
c5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:EC:0C:B1:20:29:E8:CA:F2:F1:B0:55:92:DB:65:48:C7:9B:94
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:64:a1:28:68:33:ca:cd:24:16:d0:73:0c:d3:77:2f:02:64:
c9:c1:1b:a0:48:89:af:c5:22:a4:54:2b:a4:8e:01:95:f1:37:
30:31:b7:c6:52:f4:49:fa:09:4a:1d:87:f8:89:75:ba:59:25:
67:cd:59:d1:3b:f3:17:fd:8b:c9:3f:2d:65:54:aa:10:1a:22:
82:a5:dd:3e:c3:c9:36:5d:f6:de:b1:29:72:3c:9b:e9:38:0a:
fb:ea:38:f3:e7:b0:18:88:28:13:7a:de:a5:1d:9b:54:3a:fd:
ff:01:d1:80:ab:6f:15:05:18:58:24:b9:0a:3b:e9:d7:96:ee:
d9:2d:38:09:ad:1c:c7:a5:90:ad:b8:d1:68:f0:69:8b:fb:9c:
30:32:e6:f0:cf:35:d9:11:04:79:d5:8a:92:41:67:20:59:8f:
cd:fa:a7:03:14:13:3a:13:0e:66:82:dd:c6:a8:f7:03:28:66:
7e:6a:6d:69:b8:05:05:13:17:aa:14:4c:3d:a3:32:70:f2:6f:
99:f1:41:a9:95:2f:0f:4e:a0:12:4f:b0:fe:ab:c5:7d:d8:e6:
1c:77:3b:cf:19:c8:b3:cc:04:40:d3:19:03:14:43:3f:45:45:
f4:75:d5:b4:ca:49:d5:63:ad:5b:cb:28:e5:19:ce:14:98:74:
f0:77:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:43 2025 by rpki-client