Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: Qf48SRXPYUibsleezAOaK5BmoxKM8vzfxuaNEe+aiIg=
Subject key identifier: 57:F5:D5:8D:80:A8:87:49:F9:15:C4:F2:D5:D9:96:B8:05:C0:9F:E2
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019A70A4C56D07D840B021752C345606BF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 172D
Signing time: Tue 11 Nov 2025 02:00:37 +0000
Manifest this update: Tue 11 Nov 2025 02:00:37 +0000
Manifest next update: Wed 12 Nov 2025 02:00:37 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: Hw7+Ebrk3z15S/IG9s7F0Je2rozdQ+bjnAj30RFmBQw=)
2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:c5:6d:07:d8:40:b0:21:75:2c:34:56:06:bf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Nov 11 02:00:37 2025 GMT
Not After : Nov 12 02:00:37 2025 GMT
Subject: CN=57f5d58d80a88749f915c4f2d5d996b805c09fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:c4:68:d3:e6:69:90:e8:3c:91:65:44:31:
f0:18:ea:e2:ab:97:d0:67:67:2e:0b:a6:43:9a:43:
54:dc:71:6b:b3:9b:9a:cd:4c:0c:23:67:8d:44:06:
82:ec:e8:31:cf:0b:92:c2:cf:e9:cb:91:5e:ff:13:
13:08:c7:79:95:de:9a:69:a6:14:15:e8:50:0f:fa:
d6:15:3d:2a:fd:95:25:10:c5:d8:8e:51:f4:c4:3d:
4b:62:e6:58:c2:31:a9:6f:89:54:28:b3:3c:27:24:
dc:9e:94:60:2d:58:b9:6e:a3:1b:13:10:b6:5d:38:
62:0f:8b:ef:0d:a7:a6:b3:0d:b2:d3:44:26:fd:43:
52:23:db:fb:1c:e5:71:36:5b:e0:dc:f3:13:2a:63:
4b:53:fa:ae:4e:f8:03:12:dd:d9:d7:92:8f:f2:a2:
8c:e7:d1:be:3d:4d:4c:9e:53:54:62:4c:55:cb:aa:
d0:3a:09:e8:d6:91:39:9b:d4:4d:0e:f9:45:a3:ff:
53:07:37:59:a9:32:d9:e1:11:c7:b1:41:92:ae:63:
02:c1:16:c1:b5:b6:26:74:2d:ef:b5:9e:13:57:6c:
77:06:b6:b6:b5:65:19:7d:f7:36:60:5b:ed:83:df:
09:f5:87:23:10:38:ba:75:70:d4:35:0a:f7:ac:cb:
11:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F5:D5:8D:80:A8:87:49:F9:15:C4:F2:D5:D9:96:B8:05:C0:9F:E2
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:13:06:35:9b:79:69:22:72:5c:9e:ce:98:35:ea:55:0c:fb:
32:9e:23:68:3a:55:a7:3d:45:c4:cf:30:3f:87:47:60:fa:59:
b2:9e:04:d6:8a:95:1c:e4:d3:f1:f4:7a:d6:e8:df:b8:5f:73:
df:60:20:3d:92:33:25:d7:b8:19:58:fd:ef:11:b9:0f:aa:0c:
b5:28:9a:d5:4e:dc:94:19:f2:f5:80:3c:eb:77:86:63:3f:45:
83:40:db:19:04:11:59:dd:a3:87:10:00:dc:f0:d7:a1:e0:6a:
a7:9f:47:7f:ca:fd:ee:ca:f1:e4:c1:70:13:fc:f3:9e:7e:e1:
63:4c:88:6b:18:c7:fe:7a:97:7e:69:f6:d4:9c:15:a8:97:26:
44:f8:a8:37:c5:07:f8:58:5d:f5:9d:06:ef:8a:ae:8a:25:c6:
6d:a9:dd:48:8d:58:d3:ad:26:26:86:20:23:be:2d:ef:98:66:
65:67:d2:82:30:d8:3a:1e:f7:45:b2:ae:97:3c:f7:e3:de:18:
67:66:e2:08:99:ee:01:5c:fd:6a:af:1a:9d:62:fa:3c:31:c7:
a3:b8:98:d8:4d:01:5a:df:e6:5d:65:ff:4e:6c:b9:b5:b0:0d:
0a:89:8c:94:04:78:21:a1:d8:4f:30:1d:39:7a:f8:5a:28:8a:
7d:76:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:24 2025 by rpki-client