Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
File: _0ywnegmUO5MxDJ-q2dwt6sUfvs.mft (raw, json)
Hash identifier: myQnjlNYbMFVZnWwWNN73ZrFsoWDcnQwpsN1rRex3as=
Subject key identifier: 3F:B0:A2:88:1C:05:9E:5F:A4:7D:C4:82:D7:53:43:A5:A6:FD:09:A0
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 019A72934E4D7C71F094A0264EA978631C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: RcUeax2IJNxx-VLzmeCKMxA0SJU.roa (hash: vene8siI5AmwNR1jjMXzcgVgONNVdoSDnnxQWvu3CqU=)
2: _0ywnegmUO5MxDJ-q2dwt6sUfvs.crl (hash: wvVsrDAWJvi/JEwnKIcx4TatdJICpvF0TO03tnU9F7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4e:4d:7c:71:f0:94:a0:26:4e:a9:78:63:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=3fb0a2881c059e5fa47dc482d75343a5a6fd09a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:82:45:bc:a3:e4:78:e9:ec:d1:52:cb:42:
8d:a0:ef:2d:18:bf:d4:68:93:5a:28:34:f4:04:88:
0a:2f:19:24:ac:22:30:df:33:cb:82:4e:7a:7b:41:
d4:81:65:4b:2d:a4:8b:09:96:b2:2a:61:36:9d:68:
11:25:0a:89:55:17:f5:b1:e7:36:bc:bd:ca:b6:b8:
21:cd:55:44:2b:42:a0:ab:f2:81:8a:e3:47:b5:c2:
7b:30:5c:a1:89:18:32:eb:eb:53:e4:32:2a:2b:f4:
8c:b9:c1:e3:33:bb:a4:37:70:cc:03:93:08:2a:11:
19:39:b0:78:e7:7f:43:9d:b9:f2:04:e9:a4:70:64:
9c:96:eb:3e:ff:b4:59:2a:72:e4:b3:ca:4c:8a:4c:
09:6b:94:e1:7c:35:7d:01:4d:30:e4:21:54:9d:86:
2f:06:e3:28:62:54:37:80:d4:84:a6:31:be:90:04:
54:e7:e5:ce:4c:7c:ba:f1:7f:93:bd:f1:53:66:6b:
5c:84:1d:df:e0:d3:48:1f:4f:3b:a1:5d:c1:3c:a1:
12:ab:55:34:3c:d8:b5:f9:18:a8:a4:46:f7:07:7f:
92:5c:a6:33:ac:1f:d3:a2:4e:31:a7:b3:d2:63:e6:
52:6e:cb:e5:a6:c8:fe:86:41:71:95:1c:f5:3c:3e:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:A2:88:1C:05:9E:5F:A4:7D:C4:82:D7:53:43:A5:A6:FD:09:A0
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1e:fa:49:7a:7a:de:5d:3b:28:4c:a2:fc:22:1b:01:d8:20:
d3:e6:b5:39:2f:f7:cd:66:10:80:18:ab:91:61:54:37:89:b6:
78:18:11:03:7e:60:a2:f9:ae:82:59:1e:56:05:4a:c4:d1:d5:
e1:6c:b4:ec:b2:f9:c1:be:d4:a0:d9:62:93:de:2c:6d:1b:78:
24:6b:e5:f5:fd:b0:9f:54:46:c5:64:42:3c:a2:52:f5:cb:90:
c3:42:f2:ab:83:d2:74:c1:d8:fa:99:f6:5d:ce:fb:ce:c6:89:
e5:ec:96:97:59:dc:10:4c:f7:31:47:1d:b6:09:db:c6:79:e3:
63:94:09:65:e5:a6:a1:cb:88:54:75:85:cf:3c:e7:ad:bb:8b:
f6:12:82:5b:c1:cc:87:fb:05:80:a5:38:7d:ae:ad:82:9e:53:
9e:b4:5c:9a:d7:47:a1:f5:51:47:da:ea:ca:05:8b:a8:82:73:
4b:19:3e:e1:14:2c:bb:e3:b5:5f:0e:17:2a:5c:90:31:77:53:
79:29:54:d9:6f:13:ea:89:8e:5f:d3:a0:0a:d5:a2:cd:ea:e8:
97:f9:ea:45:84:e6:e9:26:ee:3c:9b:e3:ef:87:be:b5:83:86:
c7:52:51:29:3f:69:3e:68:5a:8e:3a:8f:ed:8f:53:80:3a:78:
8c:68:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:02 2025 by rpki-client