Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft (raw, json)
Hash identifier: iy0HlNMJZCewSvIwj2rJM9tDfdm3q+DkWSLyMHpGibk=
Subject key identifier: 19:21:31:1B:02:3D:E5:80:E3:C8:A4:59:9E:B8:D9:BB:8C:81:7A:6D
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 019A72934F81D4E6AE02EC9C6F5C8944363F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl (hash: BcVYC3VUTuUCmfnkK9WE9LYJkFDK29WYifbA03arUNA=)
2: 0rKi7U6MqI1r_Vs3kaCLYTfsLSY.roa (hash: 8QsFJSNtdZfQAAQzebOppMUtF/t29sf8g4pkzx7Cv9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4f:81:d4:e6:ae:02:ec:9c:6f:5c:89:44:36:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=1921311b023de580e3c8a4599eb8d9bb8c817a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:56:8c:ee:eb:cc:1c:45:45:fc:20:96:60:
96:e0:40:b8:b1:55:24:c6:f7:5f:ce:d4:bb:1f:c2:
0a:1c:eb:d2:be:80:3d:69:fa:8e:b0:95:df:7b:13:
b0:e7:f6:4f:c7:db:91:1a:f2:e9:c3:22:d9:41:e4:
84:6f:bb:9d:97:36:bf:c4:37:c2:16:aa:76:9a:83:
6d:e5:19:02:5b:dd:6e:7f:ff:e4:f6:c1:dc:f0:56:
4b:d6:22:24:10:d2:1e:07:6f:c4:61:dc:78:02:bd:
58:20:77:a9:a9:a5:c5:84:8f:8e:b4:5d:46:9c:da:
0a:ec:b9:b6:50:e5:c1:f0:62:59:b1:9e:c8:1a:b5:
43:55:d1:43:4b:d5:97:83:09:0d:12:a5:45:36:6a:
65:23:04:02:50:e7:3a:f2:a4:df:1c:7a:42:af:31:
0e:f3:f8:a9:07:22:ce:c8:76:43:7a:71:76:b9:a0:
5a:29:91:9c:1c:9b:19:8e:c6:fc:c4:f5:ee:1d:d3:
46:33:e3:f3:db:1e:93:df:17:f1:9b:28:8e:38:fd:
ac:d7:b6:31:4e:04:11:e8:d8:77:bd:89:45:a6:3e:
c6:f5:e4:6d:6e:25:5a:ff:00:83:2c:1e:90:d8:2f:
5a:70:fc:d8:72:cd:8a:87:f0:a8:10:cf:73:37:10:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:21:31:1B:02:3D:E5:80:E3:C8:A4:59:9E:B8:D9:BB:8C:81:7A:6D
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f8:b5:dd:a4:e9:57:ad:62:d7:6b:2c:cb:f9:4d:da:e9:29:
2c:ef:15:13:23:96:5e:df:cb:0c:fe:28:e5:9b:72:a3:12:86:
26:af:58:76:9b:ba:1c:4c:74:00:08:93:dc:92:b5:c1:f8:85:
ee:0c:43:dd:77:3e:5c:ae:18:08:ed:70:23:1b:d5:6d:86:64:
dd:e8:a0:b1:10:bc:95:54:ee:e3:1c:26:c7:6e:15:96:40:39:
a1:bf:a3:31:2a:4c:24:40:45:33:43:62:f0:6f:15:26:91:ca:
53:43:d7:47:16:df:41:86:71:2a:4c:27:ad:1e:6b:42:75:ae:
db:9a:68:42:22:58:6e:6a:f3:49:13:da:08:92:6c:6f:97:8d:
d5:f3:1d:33:d8:64:cb:44:47:8b:82:f6:50:d0:ad:fa:e2:3d:
9a:36:b0:b9:f9:de:cd:2c:c4:e5:92:d7:7e:fb:62:c3:f8:e6:
62:a0:c6:21:ec:be:69:07:f3:33:6c:2a:81:8a:37:27:9d:32:
ba:6a:fe:9d:61:9a:ab:76:52:2d:44:b4:ae:35:77:97:c9:da:
85:b4:4d:51:04:ac:7b:57:fc:f5:80:71:c7:72:a8:86:74:a0:
52:e1:dc:5d:41:36:6b:d4:ca:5f:55:d5:1a:1f:42:7c:e8:74:
34:5e:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:05 2025 by rpki-client