Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File: aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier: LloICWbJccQA4W2R+i8pgqSInyXU6vJMwL/tpd339as=
Subject key identifier: 31:52:3F:96:33:A0:17:05:12:A7:F8:86:09:DE:9A:7F:68:5B:48:8B
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial: 019A71EECCC1C131D561E9340415D4971B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: uRLPr+78MedtwhZyoqPMxBer7SUaA3fHSKLryx1T2z0=)
2: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (hash: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=)
3: bqsYblKj7hcMS1s1tPb3Q-dO_OY.roa (hash: C6NQjixTOIceoGsxhMeDSn6DTrvOtIxF3QPKT2AqmUU=)
4: fZN-mJc8fZOK-6XrfXacVqv1tuE.roa (hash: dKX6X2ROArIQd/pMehz+1TmwgekylLZCGEI0q4Su81U=)
5: qT9a3yWCoydql47MfRG9zQlfRRU.roa (hash: sztKYcCFWM27FMQp6a+1b3A1caK/AF/jWPueCOzMPvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cc:c1:c1:31:d5:61:e9:34:04:15:d4:97:1b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=31523f9633a0170512a7f88609de9a7f685b488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:f3:ee:3a:33:71:fe:45:a5:08:6a:1a:f5:
e5:b6:80:35:4b:cc:24:a6:50:ef:f1:6d:f2:09:98:
d3:e0:24:f3:1d:1c:13:cc:b2:9c:11:6b:98:9f:84:
8f:de:3b:c2:22:83:72:37:2c:ed:53:72:e4:0a:33:
94:e6:d1:f8:24:48:58:5f:92:38:93:07:2d:29:27:
4a:3e:e1:b5:76:59:c8:90:8f:b8:0f:f7:f9:2b:7a:
06:41:1c:4b:5d:03:54:a2:68:03:a8:4b:5a:7a:02:
13:e9:27:39:ef:6c:0e:48:00:28:02:dc:67:63:c6:
3d:ee:1a:a0:b4:33:c7:2f:c3:d4:0b:6f:f2:2e:b2:
0f:27:7b:72:d7:50:c5:bd:8d:a5:d6:50:15:b3:bb:
25:7c:f2:e1:e1:2d:72:74:6f:d2:df:94:c6:c2:29:
0c:4f:6b:ff:de:04:b9:75:9b:19:f4:52:41:82:1d:
d6:f1:b3:b7:32:78:e3:38:72:a5:88:73:74:b9:be:
58:99:e9:5e:53:8a:01:bb:7d:2f:a9:7d:f6:5b:6c:
d5:c0:aa:40:38:ac:69:9e:31:52:62:7e:15:7d:8b:
76:bc:d2:c6:de:8d:50:34:cd:44:3d:77:d3:27:55:
c9:39:ab:d4:ea:c5:0c:84:c1:ee:66:49:e4:e9:5e:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:3F:96:33:A0:17:05:12:A7:F8:86:09:DE:9A:7F:68:5B:48:8B
X509v3 Authority Key Identifier:
keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:78:98:05:2c:64:33:7a:0b:37:2d:46:5c:08:73:fd:3c:7c:
cc:ec:50:b4:34:7f:a6:a9:8a:79:23:53:a7:5e:42:7a:f9:37:
35:a9:19:e5:82:6b:78:34:13:4c:85:51:1d:f0:06:42:4e:b3:
da:84:0e:77:dd:a6:80:df:6b:71:95:4d:bc:9f:ae:90:4c:f1:
7f:f2:99:23:1a:81:98:67:2f:1a:67:7f:d7:c8:0c:78:f7:a3:
bd:88:a3:77:35:2d:30:48:c5:80:83:bf:d7:2f:4d:7b:b6:7b:
70:3a:a5:1f:2e:a8:04:83:85:33:11:0c:2b:ec:ce:2f:d9:d4:
88:26:60:dd:50:f2:40:aa:c2:6f:ac:6a:84:0d:e1:fc:77:43:
e2:88:64:f5:3e:9d:c9:35:90:5d:29:b1:33:a7:b8:f2:0a:69:
7f:d5:f2:66:7b:82:b2:c6:bc:17:cc:58:12:b5:89:38:b3:8a:
dc:6d:e8:89:c6:25:be:d5:65:22:4c:fb:12:de:16:22:2a:fe:
47:49:ee:86:58:b2:43:71:d8:a6:28:92:72:00:67:27:79:35:
8f:1c:ad:5b:ca:78:a2:94:1d:11:91:50:2f:24:4d:e2:82:05:
ba:79:62:85:09:2f:c7:28:8b:30:a0:1a:ca:0b:e6:74:ea:78:
81:e2:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:33 2025 by rpki-client