Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
File: sMeY09W2CWzTnliSWiihffthznU.mft (raw, json)
Hash identifier: d1o3yrEWaDixntxDA8ir793jxbToUrPFlree3cjMgJM=
Subject key identifier: F9:5F:42:19:3B:8D:8A:E7:B3:BF:84:F5:1E:E9:91:2F:DE:1B:EC:8D
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Certificate issuer: /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial: 019A71EEB210EBEF17E2FDF842AC99C957A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
Manifest number: 0C78
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: lAlkLc1CavmRfvnNM-ldOwGYoR8.roa (hash: 0wroejPoBcULff3nhQGRj0gl288xNtfnDJXaFr+mf24=)
2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: 7Q/jiDshlkNguBKoY9wJMI9B6Yp05sM08BNsbJUpYng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b2:10:eb:ef:17:e2:fd:f8:42:ac:99:c9:57:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=f95f42193b8d8ae7b3bf84f51ee9912fde1bec8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:5c:78:67:35:f1:9e:fa:d0:48:b2:43:4b:
f1:1f:56:65:0e:72:6b:22:45:76:a2:65:07:41:54:
0e:f0:f0:73:f0:2a:f9:3e:d1:9b:76:96:60:fa:ac:
17:df:97:26:7b:20:4c:0c:f9:b6:a1:7b:a5:17:25:
62:d5:6d:79:b4:43:a1:e5:d1:1d:9b:92:94:92:1e:
8c:ae:ce:6b:63:58:23:b1:5e:80:db:dd:dc:5a:a3:
c1:5a:83:73:af:eb:8e:a2:a0:67:8b:fd:fe:54:05:
ef:d1:cf:b3:94:82:71:fd:cb:06:72:f7:56:0d:df:
29:81:6d:75:d9:36:46:e7:42:0c:5e:ba:dc:ab:27:
1a:d0:a4:75:cd:07:df:bf:15:4d:53:48:cf:72:fb:
ad:90:54:d3:52:bf:8c:3d:4c:7d:93:e0:27:2b:b4:
4f:f7:ba:44:72:e5:d7:10:1b:a4:32:6d:7b:61:8e:
8a:48:e4:2c:da:bf:d2:50:e4:1f:44:08:b4:f8:16:
f5:11:ea:5f:ae:15:b6:58:ce:3f:e7:33:bd:e2:41:
8f:2a:79:c2:6f:0d:0d:64:83:1f:a8:ee:6e:9a:8f:
54:42:ac:b6:75:cd:68:10:b7:7d:c4:7f:e8:7e:6b:
e1:08:bf:d4:40:b4:bb:d6:28:9d:e5:50:70:88:21:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:42:19:3B:8D:8A:E7:B3:BF:84:F5:1E:E9:91:2F:DE:1B:EC:8D
X509v3 Authority Key Identifier:
keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:78:b9:43:8b:62:9d:50:51:0e:b9:71:1d:39:4e:c0:26:0f:
00:35:d4:ae:8e:6e:03:f7:fa:27:59:48:ce:dc:13:2c:14:45:
89:0a:de:12:af:2c:78:01:47:05:9b:19:05:88:64:bd:11:b0:
3b:51:df:0f:fc:fa:8c:94:e1:e9:88:4d:30:54:67:22:79:a5:
87:42:00:df:7a:f8:e9:b8:f7:46:08:da:6d:ea:b8:e8:69:ed:
e2:ba:60:a1:3b:53:88:44:69:84:1c:08:64:9e:f4:0a:95:cf:
45:2c:d3:bc:01:0e:7f:a7:d3:9d:f0:3e:70:6d:32:08:18:a3:
4e:6c:08:73:47:65:f8:a3:fa:b3:c1:6f:54:52:d4:4b:d5:b3:
b8:9f:bd:09:df:1a:62:9a:91:7c:f6:ab:56:ec:7b:c2:a4:30:
42:d3:a6:90:9a:73:25:22:52:35:ff:80:cf:12:da:2b:e4:d3:
25:50:40:b5:28:53:ad:06:e3:24:10:9f:6e:23:50:c3:7e:a3:
7c:71:d7:5e:88:4e:59:41:0f:7e:42:e1:78:48:05:b1:02:a3:
1d:fc:dc:bd:35:1f:ff:e9:89:f8:4b:7b:72:f0:b1:21:cb:a6:
f5:34:11:f2:f2:fd:ad:26:13:64:2a:27:db:08:eb:35:de:c2:
79:20:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:44 2025 by rpki-client