Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier: 7IWLeXPttPJ7i5Fq+c9SQOjcL8uOqpuoYIVa8r2Gbmk=
Subject key identifier: BE:ED:91:3E:94:3D:6E:97:FE:5C:2C:14:93:F4:67:31:6B:CC:3F:A5
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 019A8952BECA06C328E2B52A1BF538B39006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number: 174C
Signing time: Sat 15 Nov 2025 21:01:32 +0000
Manifest this update: Sat 15 Nov 2025 21:01:32 +0000
Manifest next update: Sun 16 Nov 2025 21:01:32 +0000
Files and hashes: 1: 2FhEmcxYfTh9K3J3avRiCdDc75E.roa (hash: tOhuHX2KWyFG2B0a0se5O81lEiJFRABFP38mxTII8TU=)
2: 8nUvj8lY7CMTGbwnkVwsxBWh6aw.roa (hash: Aix9ab5boOQSnVduDf/PzYb3KHZGbO4bW6Ul5fxfzk8=)
3: bdkHO-cMRs9yWZFdjBV-qe9nYgE.roa (hash: qubjkKMt0NactOF0nXU7jk7H1UZ/exx8oL0CEz67yU4=)
4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: 8pVQXd030xBYeB/Oz+Hr1XhmMajsbfMOyv/HMg4FybE=)
5: yT5ungE9NAr5a95GJEQ0WzC2bc4.roa (hash: 3Q09eXeA/SVTTdlEZBa1ZfiKoZceB51s1iopXPbgTXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 15:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:89:52:be:ca:06:c3:28:e2:b5:2a:1b:f5:38:b3:90:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Nov 15 21:01:32 2025 GMT
Not After : Nov 16 21:01:32 2025 GMT
Subject: CN=beed913e943d6e97fe5c2c1493f467316bcc3fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:ef:cc:f1:62:9a:1a:0f:56:56:4e:95:4f:
ab:02:e2:23:8d:f2:d6:9a:91:e4:a0:d4:45:4a:95:
46:9d:0b:c7:0d:e5:2a:4d:72:39:76:bc:45:af:90:
74:b5:5a:a9:e0:50:0a:54:6a:c2:38:47:1c:9e:cc:
11:f3:1b:16:03:f7:d3:b4:ac:7f:8f:77:f9:f2:9e:
62:b1:37:58:12:59:77:1c:74:50:15:a4:2b:5f:fd:
98:09:66:8e:5f:34:4f:ac:f2:16:99:ac:09:9b:9f:
e1:9b:10:b0:a2:4c:56:59:43:dc:20:88:26:70:d4:
e9:f2:ed:ab:d2:77:2e:b2:ff:b5:55:07:ec:24:a3:
14:40:56:4a:de:a4:46:92:29:af:04:25:93:80:ff:
47:8e:11:a4:e6:a4:7f:4d:88:6e:ab:73:96:24:28:
c4:03:91:1a:c2:9d:9d:8b:ad:69:7d:fe:e1:9c:44:
80:14:67:fe:cd:ef:38:81:83:de:0b:66:0e:ae:5d:
0f:38:64:78:ac:77:4b:af:84:d1:ec:d5:2a:6d:f5:
55:30:04:01:b2:2b:9f:17:6d:87:5b:44:66:5c:6b:
46:27:17:15:46:23:2f:91:db:2d:8d:4f:02:1f:50:
d1:74:7e:03:90:51:12:98:c3:6f:77:09:08:b1:73:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:ED:91:3E:94:3D:6E:97:FE:5C:2C:14:93:F4:67:31:6B:CC:3F:A5
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7d:7d:f6:0a:c0:f1:15:30:ae:f1:0b:db:ac:51:d4:91:ae:
97:cb:bb:2b:93:ce:57:bf:25:8c:9c:8e:46:29:dc:ac:30:28:
02:f2:ea:1d:aa:12:c9:3a:65:c6:cc:e6:2d:bc:35:5c:47:51:
0a:db:12:5c:d3:fc:89:02:17:73:51:16:df:0d:5e:e5:05:15:
70:4c:8f:ef:16:fb:6c:63:ae:6b:1e:7a:33:89:af:09:00:05:
1f:f5:f0:b2:ff:94:74:52:52:1b:61:99:8a:73:e6:30:c3:ae:
ce:66:34:31:8f:87:be:18:fe:2f:de:f2:96:31:d0:d9:cd:a1:
0c:27:b5:ee:98:5c:56:dc:c6:d4:58:73:81:76:07:de:79:b1:
75:a9:2d:71:5b:25:7f:7b:51:44:f4:c9:b4:1b:4b:a2:e9:66:
20:6a:02:f2:40:49:7d:d3:96:8d:94:08:e5:e1:a6:f0:87:dd:
cb:e8:c2:bb:dd:3f:2d:5b:d1:92:11:f9:2c:38:0a:2d:18:6c:
68:5d:55:9b:2e:0c:a2:d5:6c:ca:2f:5e:18:87:17:3e:3a:10:
76:0a:57:3e:62:d0:17:d1:84:3a:dc:0d:31:2d:58:f1:b3:20:
93:f5:82:bb:f7:85:8e:e5:44:28:2c:e2:3c:8f:7f:73:b1:f6:
ee:fa:1e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 00:05:00 2025 by rpki-client