Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: IZouuLm0eclq02Pwo0rYyIOKEFDMCY6lODdcoVBkUHU=
Subject key identifier: B3:E1:3C:AC:73:A1:07:CD:45:B3:50:B8:2E:38:72:EF:02:C0:3A:B0
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 019A70DC0D0600B9850E3B6456772C314EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:01:00 +0000
Manifest this update: Tue 11 Nov 2025 03:01:00 +0000
Manifest next update: Wed 12 Nov 2025 03:01:00 +0000
Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: RBdi8FKtTr3agwucoBs7+COKZa9d3FpoGbhrCUVeoFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0d:06:00:b9:85:0e:3b:64:56:77:2c:31:4e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Nov 11 03:01:00 2025 GMT
Not After : Nov 12 03:01:00 2025 GMT
Subject: CN=b3e13cac73a107cd45b350b82e3872ef02c03ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3f:53:c6:68:77:6c:38:ea:b3:48:f1:26:b4:
02:a4:02:ef:5a:ef:e2:06:57:01:29:de:b0:25:4e:
fb:dd:ac:54:ee:06:a1:41:db:e0:e3:fd:55:e4:4c:
50:19:1a:4d:fb:0b:42:49:80:67:11:72:e6:8c:5e:
b4:68:a6:d0:bd:c0:44:d2:56:fd:75:b1:e2:af:fa:
0b:d2:ec:04:00:57:b9:ae:7f:6e:af:95:85:3b:4e:
6e:1a:6d:9e:c5:dd:17:81:26:58:72:bf:86:88:cf:
e1:5a:8c:23:d4:6e:a7:c5:b7:c1:f1:92:6a:dc:a3:
d9:9b:a7:ed:9b:3e:b7:88:5e:55:ed:6c:1f:94:75:
37:37:f5:11:c9:55:0e:78:18:8c:70:0c:32:1d:b2:
03:fb:da:2a:de:2c:21:c8:e1:d0:5d:d7:43:98:7c:
ba:eb:95:d3:3d:36:7d:da:f8:18:4d:a5:33:6d:86:
84:be:02:03:3f:c1:bc:89:2a:af:7a:ae:2e:fb:23:
ab:62:da:4f:d4:63:21:e6:4a:4a:4a:7a:0c:2f:2b:
e1:f1:dc:b1:82:2f:9c:65:9c:9b:63:f5:d4:84:fc:
ee:35:6e:9e:49:8f:45:48:01:72:04:24:23:2c:0d:
c7:e1:7b:94:fe:ba:c9:44:2c:6b:03:31:3f:d8:ca:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E1:3C:AC:73:A1:07:CD:45:B3:50:B8:2E:38:72:EF:02:C0:3A:B0
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7f:5a:26:cd:fc:33:b0:5a:bb:7c:57:7f:51:a6:a1:c3:8b:
66:48:b0:15:d0:ac:e1:c1:67:b2:95:06:87:d7:52:c9:bf:19:
dd:2f:9c:38:27:63:c6:76:d6:3c:ec:ff:1e:81:6a:b2:f0:0a:
1c:b0:c5:c6:c3:9c:22:cb:37:fb:7f:e2:e6:73:ee:3a:ca:37:
0d:1f:61:2b:da:0f:ee:17:45:96:ca:11:c5:cc:2e:9e:40:bb:
09:1a:9a:ba:db:6c:ec:e3:26:4d:37:be:ea:2e:a2:e6:54:24:
f4:9e:be:a6:74:b0:fe:02:45:2f:31:32:6e:db:83:c8:da:f8:
ff:41:d2:7f:4a:04:79:72:3d:80:10:a5:29:a8:49:d8:1a:a0:
cd:f9:4b:25:7c:89:ba:77:e0:a6:f8:1c:49:d0:96:ed:6f:3f:
fd:f4:52:2b:de:e3:78:58:23:61:ee:00:7c:b4:68:f0:c6:58:
d5:ac:cf:0c:fe:a2:e0:b7:0e:73:fa:fd:d0:dd:56:1f:a7:d0:
98:fb:de:1d:d4:03:60:93:bf:f9:83:92:d1:84:92:ae:38:0f:
ea:09:38:ed:eb:44:aa:d1:81:17:b8:da:01:49:94:98:25:0d:
00:cb:0e:67:0c:61:33:ca:d1:c0:f7:05:32:d1:73:1e:54:87:
65:df:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:53 2025 by rpki-client