Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: fLxWoC91fNNt2kzhsnO9XOum0P13J0Ou5hrMHw9LvrA=
Subject key identifier: C1:F5:96:CB:A2:37:F2:62:C9:8A:AA:B5:C8:31:00:91:62:6A:62:AC
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 019A72936CED8D40AA24D566FAA5DEF00448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:55 +0000
Manifest this update: Tue 11 Nov 2025 11:00:55 +0000
Manifest next update: Wed 12 Nov 2025 11:00:55 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: VyGr+zSzxAPVD5DZG0lBQSTlctmHW8TuWLOD0PxyNcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6c:ed:8d:40:aa:24:d5:66:fa:a5:de:f0:04:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Nov 11 11:00:55 2025 GMT
Not After : Nov 12 11:00:55 2025 GMT
Subject: CN=c1f596cba237f262c98aaab5c8310091626a62ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:bb:59:94:90:50:fb:09:37:03:7b:bc:fd:
0c:5f:3c:5f:2a:0a:3e:4c:8b:87:0b:71:d6:54:83:
39:04:72:36:ba:a2:7d:a9:56:0e:8a:28:20:32:ea:
ee:85:af:36:57:2c:77:88:12:2d:15:01:54:13:da:
88:00:a4:a8:70:55:88:26:10:48:33:d3:d3:a0:05:
37:29:fd:a7:c0:04:6b:e2:63:d3:71:80:c6:a5:65:
33:50:f8:2f:e0:fc:66:25:43:ce:f3:89:44:f5:33:
52:a4:c9:b0:b2:bb:90:19:c1:6f:57:25:1b:9e:c4:
e9:af:0a:ee:1b:27:77:ca:f2:17:37:fa:6d:ec:14:
ac:14:06:06:a5:3d:03:60:d6:cf:5c:43:80:22:a9:
cf:00:64:bb:4f:89:37:50:ef:b3:6e:c1:97:06:21:
00:e9:a6:fa:e4:a8:a8:f8:48:2f:6c:19:ca:62:da:
82:ed:9b:1f:e3:d9:91:66:1b:aa:84:6b:db:ed:e6:
af:74:48:7d:2c:b3:65:50:ed:06:a0:c9:9a:8e:5d:
e2:1c:22:ac:67:50:b7:1b:95:e5:20:ab:c7:24:63:
63:0f:7c:17:1d:2f:3a:78:e1:81:34:05:e4:a7:2c:
f2:5a:d9:d2:04:9a:81:a9:4a:11:19:c6:24:0a:b5:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:96:CB:A2:37:F2:62:C9:8A:AA:B5:C8:31:00:91:62:6A:62:AC
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d6:fb:e5:35:20:73:0f:89:c2:1d:fd:2a:e6:4f:e6:0e:0d:
c1:af:19:9d:da:be:24:d5:f5:89:b9:52:dc:58:95:3f:16:8e:
e0:a8:42:f8:46:fd:70:4a:85:4f:3d:2b:3b:f4:04:2d:12:24:
eb:37:7e:6b:40:7c:38:b3:c9:82:5c:ca:42:f5:aa:b0:37:de:
1e:e7:d5:46:d2:57:74:e2:67:c6:2b:b6:ee:d4:06:7b:cc:33:
cb:40:34:8c:c2:1b:4e:27:7b:10:de:84:4e:de:12:3d:06:90:
26:c1:18:50:05:e8:7e:75:c8:21:bd:ff:6c:87:e8:ba:28:00:
5a:ff:d6:14:ef:d6:41:f9:5e:09:64:42:96:93:21:7e:aa:57:
04:bb:f5:a3:8c:19:90:16:41:4d:e7:5f:56:e1:59:47:75:ae:
52:d5:37:67:e8:f9:b7:65:30:17:5d:32:54:e6:7a:06:40:62:
18:1c:b1:05:1b:ad:ad:7b:33:04:21:a7:8b:60:57:f6:5f:b2:
18:75:0a:52:8a:ab:50:c2:7a:07:49:10:56:6c:bc:c8:76:d1:
e4:59:40:2d:0e:8b:f8:eb:f2:e2:3b:af:e3:60:6e:e1:fe:cb:
1b:43:66:88:fa:d6:80:23:3a:f9:00:f0:9d:ec:d3:6d:08:d4:
ad:fd:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:56 2025 by rpki-client