Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: K3OVvc/lWy/Fn5HSyKS9MBburTN4tEDahcO4ohnrJIA=
Subject key identifier: 01:82:86:B7:65:74:E0:BC:4E:DA:31:6F:EC:65:41:A1:26:0C:70:80
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 019A722619AEF2FF620C81D30FD6CEF8FD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: J4MQX2OIOcAbDCyt8wkC7HGWpLTzhCVAHYQchRdn9pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:19:ae:f2:ff:62:0c:81:d3:0f:d6:ce:f8:fd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=018286b76574e0bc4eda316fec6541a1260c7080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:af:41:61:f4:65:bb:eb:73:aa:b1:4a:4b:
4a:d6:a8:92:7b:fc:4c:c5:cc:fd:a7:f2:28:34:2f:
4b:4f:da:89:79:c9:b1:9e:c3:42:4e:27:7b:99:6a:
ee:0e:e7:0b:a8:62:c4:65:8a:92:e2:72:c1:a7:43:
36:55:26:2b:b4:f0:13:1f:88:98:71:b3:94:20:04:
a5:3f:b2:7f:d9:cd:12:28:c6:f0:60:5e:92:48:f9:
69:c9:be:92:b8:0f:b9:4e:9e:59:24:8c:e1:17:c0:
5d:01:1b:17:3b:1f:fe:de:99:50:96:2e:18:1d:05:
ad:2f:1f:5e:d0:89:64:22:a5:dd:e7:8f:61:bc:2a:
9a:ed:11:eb:4b:29:5c:a5:a1:f8:da:3c:ed:43:be:
61:b7:b0:84:e6:4b:c7:d4:67:bd:96:8f:c9:63:30:
6a:8c:7b:6f:d9:66:d7:d5:93:16:9e:a7:a6:86:e1:
f1:b8:e0:68:93:ad:d6:52:37:23:b1:29:72:4c:11:
8f:0c:c1:24:17:30:73:3c:64:fa:32:ea:c0:ae:94:
44:04:30:8f:0a:f1:cb:23:64:69:10:9e:ba:ac:8b:
65:16:3d:14:37:18:5e:02:3a:b8:a1:79:67:aa:79:
4f:6c:3b:e8:d8:84:e4:91:ec:a3:78:b1:b2:32:c9:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:82:86:B7:65:74:E0:BC:4E:DA:31:6F:EC:65:41:A1:26:0C:70:80
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:e2:da:c2:a0:33:5f:8b:73:b0:aa:48:72:1c:28:41:1f:
9b:37:65:ad:ef:a4:41:97:fe:17:8c:41:67:1f:7e:56:d1:7d:
ec:ac:43:19:22:7b:b1:1d:37:07:0e:48:fe:7b:6d:1d:54:54:
37:47:4c:4d:c7:96:87:c2:03:15:75:46:25:ab:ce:30:a0:25:
61:27:6c:8a:fe:a3:38:6e:42:2c:bb:60:c1:08:d4:e2:4b:cc:
b8:5c:db:cc:8a:61:9c:15:f1:44:b6:03:2b:b6:45:b0:a7:3e:
93:1c:c0:65:19:8f:38:8f:00:31:76:5f:87:2c:f8:f4:16:99:
c2:f9:2f:67:88:eb:d5:2b:4f:05:1d:d5:df:e7:3a:1c:66:b5:
7b:57:e4:4a:d5:38:b3:ee:fc:2f:cf:b6:00:ec:85:e1:da:96:
ae:e0:33:2a:d4:3e:cd:cd:f8:1c:d8:d9:14:d6:e1:48:8d:db:
1b:57:cd:05:f8:56:89:7a:27:78:ca:37:b6:6b:7f:01:50:40:
ac:cb:b6:5e:54:3b:2b:23:67:1a:a7:55:ec:94:03:01:c9:30:
a4:6e:33:de:8a:c9:4f:4a:05:6c:1a:64:85:90:c5:ce:9f:b6:
a7:ac:79:92:79:e2:16:df:1e:01:27:89:65:5a:4d:e8:7a:e7:
c9:c4:19:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:50 2025 by rpki-client