Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File: c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier: RVJrrIx9EDfDkqFsSuePFNnH+cXZ8aDNxzIJtyQp7Fw=
Subject key identifier: 47:3E:56:24:E8:4B:BD:09:09:B3:DE:C9:8E:9E:AC:FA:42:F5:47:CD
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 019A7225A78C812EA47434F4977448590E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: I9vgIWuaiEwVbrWFIv7mFggy9a0.roa (hash: CuGCVrXCD5akH61wJYu8Ar6/+5VEgpmtOisQYkqg0kQ=)
2: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: /lsNpOY0NQEp+D7lOQOZ1Nnp6HcwEoGWaLGLa+VcCXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a7:8c:81:2e:a4:74:34:f4:97:74:48:59:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=473e5624e84bbd0909b3dec98e9eacfa42f547cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:da:f0:1d:f7:31:f4:15:83:97:83:d7:cc:
99:1a:43:37:bf:d8:43:79:c2:2c:3f:56:a0:10:a3:
59:8b:d1:7b:fc:8b:66:ab:93:ac:83:f8:84:9a:d4:
c3:68:6a:64:5e:5e:a1:20:a0:c3:09:33:77:9a:e6:
be:c2:a6:3b:c1:32:2d:6a:59:c9:73:0c:a9:f3:42:
8b:af:a2:8a:9e:f2:3f:c3:8d:b0:60:03:48:7a:51:
93:9c:b9:a9:d2:f3:ed:d0:09:bb:4b:7c:2c:67:54:
4f:f0:89:01:5b:fa:ae:fb:9a:03:54:58:db:fe:07:
83:b6:31:fa:95:01:bd:31:1a:a9:5e:31:c3:1d:22:
c4:1a:a9:c6:cb:e1:9e:09:f5:5f:3d:01:fe:f1:a0:
47:42:17:dd:12:d0:31:06:88:08:77:6e:38:87:5d:
31:be:ed:f3:2e:a7:40:b9:c9:6c:68:38:c7:f1:3e:
64:1a:05:c6:c4:a3:d4:dd:02:a6:87:02:f9:cf:42:
0f:5c:b1:2e:37:a2:e4:4a:80:08:15:48:7a:c1:f1:
53:0a:a8:fd:83:56:96:7f:46:83:3f:00:63:96:ab:
1e:a9:a4:d4:ea:b1:e1:04:7b:9a:c6:d1:41:cd:37:
3f:5e:30:98:07:46:c9:32:ec:57:a7:fb:ea:ac:98:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3E:56:24:E8:4B:BD:09:09:B3:DE:C9:8E:9E:AC:FA:42:F5:47:CD
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1d:8a:db:2a:2e:30:e0:84:62:4e:7f:fa:c9:31:f3:e3:b1:
c1:27:be:83:76:aa:73:a9:87:e8:26:54:1e:7c:74:46:53:b5:
97:43:e4:00:0d:88:70:a9:54:35:b0:26:b6:29:cf:18:a7:8b:
8f:06:ff:97:5d:00:54:3a:e6:0f:bb:67:79:05:4f:2e:00:13:
71:19:96:d8:2f:3d:96:d3:c1:82:5c:de:15:83:79:e2:ed:35:
38:6c:a2:f2:d3:6b:51:bf:2b:07:b7:e3:11:5c:85:c5:e7:be:
f2:46:e5:f5:37:bb:8f:e5:7c:ee:93:34:db:df:3d:a9:f6:ed:
02:3b:85:20:7b:8f:92:bc:cb:9e:e4:ed:68:bb:79:1e:99:97:
80:60:aa:08:aa:8c:e6:fb:e2:40:28:fd:60:72:4e:f4:13:95:
26:eb:cb:8b:2f:ba:06:ad:75:72:49:c7:30:38:5b:44:89:21:
c9:5f:3e:49:98:4b:e1:de:a5:3f:71:f7:f6:e6:13:c2:30:b8:
9e:87:1d:22:72:f0:cf:11:b3:63:11:6a:ef:f8:ec:7b:5e:f0:
dc:8c:31:24:46:be:3d:10:a3:bd:3e:d3:d9:a1:81:ca:e4:6a:
96:a9:7b:29:42:c8:3d:9a:85:f7:d6:6a:51:db:13:6e:a2:5e:
93:3e:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:48 2025 by rpki-client