Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
File: c21yTiOe-38ve-pSap4MXn_Im74.mft (raw, json)
Hash identifier: dUTHI8Ql6SSWapS3TCunxemUs5QTeMEP+9zbpolpBek=
Subject key identifier: 9C:6A:5B:8B:84:1E:AB:7B:F0:89:4C:27:75:CF:11:F3:01:79:B6:E6
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 019A730185D5644E256AA9F6A22009167CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:01:10 +0000
Manifest this update: Tue 11 Nov 2025 13:01:10 +0000
Manifest next update: Wed 12 Nov 2025 13:01:10 +0000
Files and hashes: 1: 1fA5PORVd3jPdWz7xA5f_vnyxD0.roa (hash: ykI4OL9fWsgYZNYcziWcElBypDNzSjFchoDv23Mnzrs=)
2: c21yTiOe-38ve-pSap4MXn_Im74.crl (hash: SOPcNnTjUmkKp2BkKGtyDdvlIh9BrVx+eqgNxVmsrrQ=)
3: uy61Z_8RU66-jPuUHYoqaPIOhik.roa (hash: L9o3XCU/iUGm+BZYXWE1H2NgYx1sjgSieqKtDG+tWqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:85:d5:64:4e:25:6a:a9:f6:a2:20:09:16:7c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Nov 11 13:01:10 2025 GMT
Not After : Nov 12 13:01:10 2025 GMT
Subject: CN=9c6a5b8b841eab7bf0894c2775cf11f30179b6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:19:b9:63:cb:fa:66:30:7f:91:bc:de:eb:
ef:3b:2e:76:41:87:97:7b:5d:a8:40:05:06:b2:cd:
62:0b:53:74:95:7b:b0:1b:53:78:c5:35:72:07:43:
b0:94:88:bd:73:b7:83:b1:fd:4d:63:89:da:64:df:
2e:e9:55:64:7e:d1:f8:d8:ad:88:05:78:47:20:95:
24:b4:43:2b:59:d1:32:89:22:ba:63:e7:1a:1f:e4:
9b:9c:39:57:80:c4:4c:00:14:6d:47:3e:de:62:69:
69:1a:0c:9c:e0:81:6b:bc:3f:a9:17:8d:18:9a:65:
ef:3b:79:fd:ec:dc:bb:49:f8:a2:c6:6e:6c:63:b0:
6e:31:32:cc:97:b2:37:bd:f2:d6:89:94:1a:4a:62:
a0:be:b0:49:cf:48:9e:e1:54:af:74:5d:39:a5:70:
1b:3f:06:fa:a4:ca:82:72:da:ae:55:2b:96:d3:54:
a3:b7:45:06:07:f7:b5:c9:11:5a:52:90:4e:d1:31:
46:ed:61:e9:c0:80:c2:82:4a:6f:fb:a0:ae:cd:a9:
2f:70:06:33:55:ba:93:c5:0c:53:0b:9e:0f:86:49:
43:b5:6e:53:e1:70:66:98:68:aa:91:13:43:3b:0c:
51:0c:72:32:bd:46:04:22:2d:2d:8c:22:94:38:a3:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6A:5B:8B:84:1E:AB:7B:F0:89:4C:27:75:CF:11:F3:01:79:B6:E6
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0e:3b:e5:b9:94:3b:2c:0a:e0:ea:88:f7:39:bc:f4:16:85:
a0:9a:61:4e:73:c6:5d:cb:2e:25:c1:89:01:59:e5:2f:14:d3:
6d:c5:0c:da:7c:38:96:9f:d0:b6:ea:30:e9:2c:73:c1:e0:7c:
fb:e6:33:20:90:9c:44:5c:e5:2a:2c:20:86:a0:e4:8b:79:14:
0f:b9:d1:9f:8d:96:b5:9e:9b:52:6b:36:7a:16:8a:93:a5:06:
df:09:7d:ab:a8:a9:08:54:65:b3:50:c9:66:4d:5d:79:90:c8:
3e:50:f5:94:30:94:c8:de:80:e5:71:05:51:0c:ea:c0:ee:bc:
2d:ea:1e:a2:97:46:3e:62:33:4e:ab:24:e1:1d:fb:02:3b:4f:
e4:b7:c6:2a:c8:14:59:3a:7e:c4:c2:2e:9b:ee:14:4b:43:69:
e7:2a:88:66:87:57:cf:1b:0b:c3:55:6b:90:ab:64:d5:e6:09:
f7:f6:ad:88:b9:37:8a:c7:be:88:5c:c8:78:9c:35:c4:42:a2:
fa:3d:11:33:9d:7b:d0:cc:3f:7c:58:66:1f:19:17:44:e7:e7:
ed:a0:d5:f6:da:00:37:39:da:cb:b0:08:38:41:74:ac:e5:65:
5c:f7:a0:b2:4a:03:ce:3d:02:f0:8b:bd:b0:96:00:31:c2:4f:
8b:e0:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:17 2025 by rpki-client