Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier: 1uYFHczS+THXkqLWevdmaAwAz/pKRh8MSDyTZnQGyL4=
Subject key identifier: 82:E9:02:D3:C2:86:C5:D5:9D:07:C7:44:27:B5:91:4E:97:D7:65:61
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 019A706E155D5B33FFCA13729AD6593FDEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 01:00:53 +0000
Manifest this update: Tue 11 Nov 2025 01:00:53 +0000
Manifest next update: Wed 12 Nov 2025 01:00:53 +0000
Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: +eZXMFHk1q4qXoyMysrHxPb6iV/qixC6O5wCxR/LCpE=)
2: hJUOwaTvP74lE8UHTrGlvy92Ql0.roa (hash: AMxeUVD26hTz30vzgYyULbbdEqiL9GrkX+UdMqFq2KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:15:5d:5b:33:ff:ca:13:72:9a:d6:59:3f:de:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Nov 11 01:00:53 2025 GMT
Not After : Nov 12 01:00:53 2025 GMT
Subject: CN=82e902d3c286c5d59d07c74427b5914e97d76561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:d9:86:a4:23:44:5a:be:0c:6a:55:fc:d4:
f8:2e:c6:fd:e8:bc:a2:22:ab:b1:57:96:77:30:84:
30:17:05:70:c0:6b:81:76:32:22:dc:ff:49:0b:07:
a0:23:aa:e2:94:ab:db:16:b6:42:03:68:de:56:58:
de:65:bb:fb:da:8c:b1:3f:2e:ba:aa:7c:41:75:26:
c5:23:e4:12:4f:ce:c0:6d:2f:d5:ef:05:4d:2d:98:
3a:88:4e:3e:e9:7c:89:43:7b:9e:3e:b3:20:8e:a6:
07:8b:c1:e8:c0:48:a4:31:f8:d6:8e:b6:1e:76:ca:
15:c9:da:32:8d:8d:7a:fd:fa:04:2f:a7:92:91:f7:
29:5e:18:b5:20:96:8c:e4:35:79:27:80:e1:17:c1:
f9:e1:60:07:bf:7c:e4:04:15:99:6e:a4:d1:cc:cb:
06:24:1c:2e:5b:2c:b6:e0:78:39:a6:4c:70:0c:1a:
00:b5:49:73:12:b3:20:cf:25:34:1a:0c:8f:a1:85:
9f:29:c2:50:fd:dd:bd:71:ef:1f:b3:42:75:3d:ba:
f6:8d:c1:27:a1:c2:12:9e:fa:45:18:02:d2:1e:27:
25:67:79:13:3e:9c:f4:71:33:e7:97:6e:f1:2b:b2:
1a:a7:c9:e2:31:b2:6c:fe:5e:56:dc:96:57:7a:b0:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E9:02:D3:C2:86:C5:D5:9D:07:C7:44:27:B5:91:4E:97:D7:65:61
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d2:c2:99:68:9c:c8:b7:d7:0e:65:70:36:2c:93:9d:c6:9e:
52:82:b6:b8:3f:09:19:86:c9:b2:4d:13:de:f4:1a:d8:44:ae:
2b:e1:ef:e3:1f:79:72:cd:bf:d0:85:a5:98:76:20:6b:9c:5e:
db:fd:59:fb:25:0f:49:9f:86:30:cf:11:d0:03:93:f8:da:80:
77:2a:47:df:df:60:7e:6f:c3:48:16:38:30:4f:28:a0:89:df:
c7:fb:ce:22:b3:98:f9:ef:05:65:6d:1b:7b:1c:c8:1e:c4:5b:
b9:c4:30:61:fc:37:87:e0:b7:fa:96:02:54:40:b4:66:c7:28:
f8:3c:20:d6:cb:1a:dd:72:03:a6:d9:81:a8:1a:e7:9e:a0:a5:
92:68:02:10:c5:4f:6d:06:8a:89:8d:e4:78:d0:2f:94:aa:fe:
7e:c6:24:6a:87:87:93:e9:53:43:76:74:92:a4:bb:eb:e7:ed:
86:dd:1b:be:dc:c5:67:8e:34:d9:1d:b3:4b:65:a0:a2:f5:16:
3b:2f:3f:72:7f:64:cc:b6:10:be:93:06:2d:5b:e0:67:68:6b:
a2:3b:3c:21:3c:06:69:20:ac:cd:bf:1c:4f:ae:67:f4:7d:08:
1b:9e:8a:f8:c8:e8:aa:78:7c:b6:d2:41:c9:96:17:07:5b:7b:
83:a4:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:12 2025 by rpki-client