Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: byZ4MomE7Gfc5d1nRaqkgyXL9j0ZebTTB2XIj2LJJbY=
Subject key identifier: 17:C2:C1:A3:C4:44:27:8B:08:B2:FE:31:90:B2:3E:ED:16:BF:84:EB
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 019A2D4458724EA6C85DCDD80790C37D7C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 1704
Signing time: Wed 29 Oct 2025 00:00:45 +0000
Manifest this update: Wed 29 Oct 2025 00:00:45 +0000
Manifest next update: Thu 30 Oct 2025 00:00:45 +0000
Files and hashes: 1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: X7llaYIThnveVjcncC4OQdPk70GCFJ+tp3vH0MGe9l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:44:58:72:4e:a6:c8:5d:cd:d8:07:90:c3:7d:7c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Oct 29 00:00:45 2025 GMT
Not After : Oct 30 00:00:45 2025 GMT
Subject: CN=17c2c1a3c444278b08b2fe3190b23eed16bf84eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:c2:71:a0:6d:62:69:48:03:cd:15:7e:af:
50:b2:50:22:fd:61:2d:f1:79:c6:2f:ac:75:8a:a6:
eb:8f:95:5a:79:07:95:63:5f:2d:2a:08:5a:db:0c:
c7:1f:a7:18:51:3b:73:23:0b:01:cc:cc:0f:5e:ff:
d7:a9:72:cd:96:0f:02:58:0a:e3:cd:17:53:4e:49:
7b:b3:67:85:73:a7:2c:10:89:3e:7e:9a:56:42:9e:
bc:8d:f5:ce:a1:dd:5c:57:9d:0e:96:1d:1c:5b:05:
b2:cd:2e:39:ec:bd:ec:ee:77:4f:1d:ba:89:4c:29:
69:eb:83:b1:d3:b5:bc:96:7b:ed:7c:80:58:a5:92:
6b:99:93:83:1c:b2:ee:74:75:2c:2c:96:ca:b4:24:
dd:5f:51:cb:46:70:bf:42:1b:da:61:88:26:73:5d:
35:23:84:ba:4e:64:80:8a:17:e9:e7:86:8a:7d:66:
7e:00:2f:82:a1:69:1a:4e:df:9c:47:62:2e:05:39:
6b:fb:c2:97:7f:27:b0:b1:56:e8:77:92:da:c6:a4:
48:da:b3:03:e7:cc:1a:85:e4:51:7c:fe:62:55:c7:
b3:88:a9:86:a2:5d:ba:8f:15:8e:c2:46:ca:70:3d:
0c:f8:f0:d6:b8:09:9b:04:29:7d:0e:f5:53:66:b7:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:C1:A3:C4:44:27:8B:08:B2:FE:31:90:B2:3E:ED:16:BF:84:EB
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c1:11:76:4d:3a:c2:e7:c7:d1:de:0c:f5:da:5f:19:e5:99:
b3:1b:bb:43:a3:6b:6c:65:38:51:8c:5d:21:16:de:93:e7:81:
75:be:e0:92:c9:fa:82:61:d5:0a:7c:69:70:0c:cf:7c:c4:4f:
5d:19:d5:37:1f:d9:59:27:46:c8:58:ec:9d:9e:8a:52:63:95:
f7:dd:b4:15:90:43:2a:51:84:1e:be:ff:d6:c2:5f:67:93:d2:
b9:0a:86:35:52:df:fe:b2:5d:51:e5:3b:a9:72:53:13:cb:0f:
c8:d3:65:de:09:db:5b:18:51:77:e1:05:87:65:7e:3e:e2:bc:
30:cd:b2:04:cf:a4:4d:b4:f8:e5:3b:92:40:88:e9:f1:f6:df:
11:1e:97:ac:01:d9:9a:f9:c1:76:b0:39:b0:91:48:df:6e:c1:
1f:82:d6:82:b4:bd:47:50:43:72:88:e8:e4:b4:f5:16:9f:5c:
0b:35:0c:61:fd:3f:55:ec:56:31:11:4c:5a:84:7b:80:bf:a0:
aa:4f:ef:3e:f9:99:ce:51:3f:55:5b:92:09:cb:36:cb:d8:eb:
55:1a:31:d1:49:db:2f:2b:87:dc:76:6c:36:e9:c3:8c:d3:ca:
a1:cd:72:86:05:ab:74:82:e9:e6:cf:1a:d8:31:d9:11:c7:c3:
1a:3e:cd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:25:15 2025 by rpki-client