Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: hM6/Nkjb2t4AHmQn1qS02JdxEOxHp8JC9810Cwa2PwE=
Subject key identifier: 3D:11:72:07:4C:EA:D4:CF:7A:C1:0F:B9:DD:65:FB:D8:A8:48:C7:90
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 0199E0E0C027E3B3695928A4CA84418E85F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0C2F
Signing time: Tue 14 Oct 2025 04:00:49 +0000
Manifest this update: Tue 14 Oct 2025 04:00:49 +0000
Manifest next update: Wed 15 Oct 2025 04:00:49 +0000
Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=)
2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: kmbZkIcRkCgKxy7lvT58sTQqmOMRiR5YHDv2BWJvXi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e0:e0:c0:27:e3:b3:69:59:28:a4:ca:84:41:8e:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Oct 14 04:00:49 2025 GMT
Not After : Oct 15 04:00:49 2025 GMT
Subject: CN=3d1172074cead4cf7ac10fb9dd65fbd8a848c790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:91:79:75:16:ed:50:8c:49:9d:15:02:39:
2d:2e:57:fa:98:48:0d:ea:f4:4c:40:c4:89:13:df:
d9:f4:34:91:4d:ae:93:9e:16:74:bc:e9:bd:4c:7f:
08:83:f3:bc:6a:65:1b:4d:cf:20:bd:06:75:c1:ea:
9e:1b:20:ed:27:74:bd:ad:6b:60:8b:19:66:1b:1a:
39:93:79:d0:8c:4f:2d:71:85:6c:25:60:02:22:cb:
85:6d:59:c4:ab:df:cb:39:da:88:98:24:25:fa:59:
81:3d:8d:4d:4b:fd:8a:69:60:27:2b:b7:18:75:d2:
d0:0f:10:57:93:7a:06:ce:a3:ec:f3:62:f4:99:ba:
f0:cb:3e:d2:4f:df:3d:4a:09:9f:ac:2b:ca:a2:da:
3f:47:f2:f0:b9:c9:5d:ff:ad:2f:81:40:c8:bd:12:
73:9d:5e:d4:77:d6:aa:db:de:e8:12:aa:ce:a7:90:
84:42:d3:f7:e6:a5:6a:c4:46:00:ee:8a:43:7a:50:
a0:1e:b9:be:26:80:6a:1a:62:b6:51:43:ff:a0:26:
b4:ba:b8:6c:cd:70:65:b3:e5:fb:cd:0d:8c:8e:b0:
6c:91:68:a1:df:08:4b:69:51:31:a2:dd:34:f3:5b:
b8:d4:e1:ff:2d:44:17:a0:eb:f9:bc:f0:63:9a:17:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:11:72:07:4C:EA:D4:CF:7A:C1:0F:B9:DD:65:FB:D8:A8:48:C7:90
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:de:ab:94:a8:99:c5:12:76:34:3d:7e:ee:97:f5:2f:9a:bf:
a5:7e:69:83:25:e5:80:5b:98:cd:8f:cb:51:cc:b7:51:b4:09:
7a:af:bd:d4:b9:8a:7e:89:79:54:f3:a3:11:25:51:25:2f:0c:
e4:9b:4f:99:2b:c3:c1:4c:6f:f1:e7:16:b6:69:61:69:76:3d:
75:3c:7e:42:fd:f6:51:f7:19:70:3d:c0:ef:43:7a:82:fd:5b:
b3:f7:5b:c9:ea:d4:f6:f6:a0:92:a3:13:79:db:04:43:ff:78:
e8:80:2f:de:80:aa:8d:a2:b8:82:68:81:94:eb:5f:5d:8f:b9:
1a:ca:a7:3d:d4:83:31:13:95:71:c1:51:f4:9a:98:47:90:cf:
67:7a:19:99:41:84:be:2b:a6:a9:0a:05:8b:1c:60:b7:95:b2:
c1:3d:6e:82:03:f3:a4:86:89:6f:6d:9b:cf:da:bb:8e:5a:33:
5d:d2:7d:8d:88:90:75:04:06:74:e5:e4:df:53:c1:42:20:2d:
e6:7b:63:71:07:d0:5c:2a:66:7c:fa:61:0e:f7:40:af:50:da:
2a:df:89:bb:ae:3d:b6:bc:27:04:03:eb:f1:73:a9:8d:66:3b:
aa:48:a5:e0:1d:77:3b:67:da:fb:bb:78:a0:bc:0b:9a:dc:03:
32:a8:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 11:26:03 2025 by rpki-client