Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: i46FDWirFfAqcCsVA52RBtk8fJY9YwCpdfFjuN6XCQ4=
Subject key identifier: 34:4F:F7:49:15:2B:24:60:B1:34:9F:1D:94:80:DE:3F:D4:8E:7A:19
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 019A71B81A4A627966A9533A4E4A8D56ED97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=)
2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: /crRDajH5IRvFasih11yCbI42YoOBptak6iiTz7WL08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1a:4a:62:79:66:a9:53:3a:4e:4a:8d:56:ed:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=344ff749152b2460b1349f1d9480de3fd48e7a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:ca:f3:32:60:94:16:e2:3c:e9:9e:ee:56:
46:ab:5c:31:59:e8:1d:54:8d:db:ae:52:3c:d1:da:
ee:10:34:21:07:53:96:47:82:42:31:0b:65:a2:2d:
34:de:68:69:7a:7f:a6:87:41:a5:bf:da:42:00:dc:
d5:5b:c9:d7:03:87:fe:98:62:b5:6f:e2:af:b2:28:
f7:af:5e:44:45:33:9d:99:62:3e:e3:2e:1a:38:19:
c7:bd:6f:de:1a:2a:68:85:c7:dd:77:95:8c:7a:ba:
70:2d:37:f7:97:87:23:e6:c7:83:43:2a:2a:9d:a8:
d3:e5:16:76:c9:b9:53:d6:0f:03:26:cf:2c:a1:cd:
b8:94:68:0d:da:93:3f:6e:d4:2e:c0:62:9e:53:54:
18:22:e3:ec:88:ff:37:53:72:a8:bb:08:ba:a5:5f:
29:f3:0f:59:21:ec:b5:08:9f:8a:ab:6e:9b:ea:74:
e9:b9:de:0b:a3:38:37:dc:e3:47:b0:e7:39:1e:bf:
41:f1:c6:3d:0c:fb:50:6f:3d:7e:65:9f:57:39:67:
e8:5a:57:d7:cc:35:ed:17:95:36:f5:e7:50:f3:a9:
a3:2f:db:4b:d7:a3:dd:07:57:49:25:48:51:b6:f3:
78:75:05:c5:1e:be:de:bc:a0:4b:fc:e8:05:a8:1b:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4F:F7:49:15:2B:24:60:B1:34:9F:1D:94:80:DE:3F:D4:8E:7A:19
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d5:db:9e:26:42:b2:55:16:c7:6c:8c:8a:a0:c2:75:85:a3:
a4:44:7a:31:60:be:dc:61:07:2e:a3:73:21:0a:4e:ec:bf:a2:
7a:19:0c:1c:95:da:c7:e8:22:91:07:1a:92:e9:57:97:4d:cb:
1d:22:8c:1d:bd:c8:ed:40:40:49:c7:da:af:0a:2d:56:8b:a0:
69:39:df:f4:19:1f:ec:8c:7b:06:a0:31:38:bd:5f:cd:ad:cc:
89:34:04:40:1e:15:aa:f1:49:99:70:ea:46:e4:1e:af:5c:66:
ff:d7:92:d5:5d:ec:d1:cd:b2:93:2e:06:5e:d0:86:7b:15:e1:
87:5d:7b:47:6d:9d:52:cd:22:52:1d:59:13:80:8e:6f:ff:27:
eb:a6:14:ee:e3:b6:37:44:11:76:74:11:b0:cb:30:77:aa:0f:
32:42:f0:cc:17:1f:5b:f0:45:d6:dd:80:03:6a:e6:15:19:0e:
27:a9:d3:b2:19:e6:18:6b:7d:a2:04:a3:19:50:1b:b0:4f:0f:
6b:73:03:89:6f:a3:b5:7f:1c:f8:ef:5c:12:87:7e:74:2f:fc:
21:34:c1:5d:bf:3a:d3:5a:8e:12:d0:3d:61:dc:8d:53:4d:95:
92:19:0b:a8:d0:df:5e:44:dd:f2:ae:81:f8:9f:b1:ac:0b:06:
e6:a2:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:57 2025 by rpki-client