Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
File: 69-nwK1-9nTdW0GUlg8v_UEV8mE.mft (raw, json)
Hash identifier: 7DO0xnwBxPhuWlBqfkG3Wssz2tMiJKM8a18M4KJZQtY=
Subject key identifier: DC:2E:4B:AF:4D:F9:40:7C:23:82:98:0E:7C:B8:B5:45:EA:43:6A:BA
Authority key identifier: EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61
Certificate issuer: /CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
Certificate serial: 019A7112BA5C417FCAC0756411F018F2C238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:43 +0000
Manifest this update: Tue 11 Nov 2025 04:00:43 +0000
Manifest next update: Wed 12 Nov 2025 04:00:43 +0000
Files and hashes: 1: 69-nwK1-9nTdW0GUlg8v_UEV8mE.crl (hash: hOPVky5EuZe3JoIpkKBXxkGHHuIjJYrkcnmHlc10DPM=)
2: jKlk89-fCSzoTB01s7RShivsAOE.roa (hash: iI/3xADl4iYI6LJcczTraHOHC9ZNevaWvmg8LIoJztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ba:5c:41:7f:ca:c0:75:64:11:f0:18:f2:c2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
Validity
Not Before: Nov 11 04:00:43 2025 GMT
Not After : Nov 12 04:00:43 2025 GMT
Subject: CN=dc2e4baf4df9407c2382980e7cb8b545ea436aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:95:90:b4:6a:16:6b:53:c4:03:26:87:4a:
72:38:cf:e5:42:06:7e:60:25:eb:82:40:35:74:9f:
41:d4:27:f2:f7:bc:fc:74:ab:82:1e:3f:18:35:3f:
d2:60:ab:54:0e:a5:bc:66:ee:89:6e:16:c8:81:fc:
29:a2:36:cf:10:98:2c:0f:a7:19:ac:fb:96:fa:2b:
4f:f2:bc:fc:f4:5b:5d:ba:16:c2:5d:e2:e0:e4:b7:
11:c6:6c:99:52:cb:8c:dc:7a:f7:57:86:9a:28:6d:
0a:d9:73:09:33:5a:5d:b4:6e:47:34:51:e9:30:0c:
3e:f8:5d:26:76:ba:20:e1:ae:e3:fe:0a:4e:61:2b:
23:d0:12:c8:24:e9:fb:a4:5a:14:86:90:29:c3:b6:
d7:e7:0c:c4:09:e7:c5:6d:43:b9:2e:dc:a2:61:ac:
fa:8a:c0:59:5e:18:b0:81:5f:3a:42:80:3c:9d:ce:
f6:3d:40:f5:d6:7d:c4:2b:99:fd:a6:ab:d1:9f:85:
cc:4e:26:6c:06:95:fd:75:bf:43:59:4e:34:e9:89:
19:7a:af:19:fd:78:31:52:e2:f9:1f:86:cf:c3:71:
12:01:2f:9e:82:f2:17:f1:65:e5:3e:60:26:da:31:
b0:0c:81:70:b9:a3:bb:7d:d3:ca:7c:ae:2a:4b:31:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:4B:AF:4D:F9:40:7C:23:82:98:0E:7C:B8:B5:45:EA:43:6A:BA
X509v3 Authority Key Identifier:
keyid:EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6c:61:3c:39:97:cd:3b:77:64:62:25:23:34:fc:27:30:06:
c9:c2:08:ad:e9:16:65:8e:cb:c8:c3:ad:06:24:8c:c3:83:05:
a0:57:93:3a:a6:76:cd:3b:74:fe:6b:95:63:73:62:20:23:06:
de:6c:ef:fc:c1:c6:db:22:eb:30:07:8a:fe:4f:f0:69:95:c9:
fc:60:d5:71:12:ee:57:06:c6:11:93:d8:6f:14:25:9d:06:fd:
0b:e0:ec:fd:a6:cd:f2:43:5f:8f:fa:42:8c:fe:09:73:fa:6f:
90:ff:5b:e2:55:c3:d2:a0:c6:b0:3c:db:68:f6:de:a2:f5:f4:
30:9e:4a:de:95:ca:8e:0a:2e:e2:8c:e6:38:a0:74:f8:b5:b7:
f8:a6:f8:6c:3d:42:b5:09:a9:74:ed:ed:c8:02:fa:86:de:6f:
d1:cc:65:4d:67:d4:6b:44:6a:ce:fc:23:0b:34:f4:ca:84:e3:
b5:2a:9b:6f:da:a3:4e:46:36:3a:8a:05:d4:f9:d0:d1:d8:0b:
10:9a:42:83:ca:65:42:ff:a0:e2:a2:f2:81:c0:6b:67:76:4f:
dd:bc:20:44:8b:36:0a:d0:49:38:96:c3:be:f1:c1:07:df:29:
54:c0:2e:db:0e:22:40:4a:23:6a:a0:17:ce:9b:76:82:9d:64:
9e:51:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:32 2025 by rpki-client