Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: DOp1j4VO7LrbXwmxNSM1+zSJaErOH9PaaKPHfHiAPkE=
Subject key identifier: DF:3E:D5:9A:05:6B:A8:CE:33:84:18:C0:EC:D6:36:66:C5:30:28:45
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 019A73015F64DA7525C6BA7AA0FA7EA03525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 1729
Signing time: Tue 11 Nov 2025 13:01:01 +0000
Manifest this update: Tue 11 Nov 2025 13:01:01 +0000
Manifest next update: Wed 12 Nov 2025 13:01:01 +0000
Files and hashes: 1: NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa (hash: iAmQ4V4JG26ummlLKO90sg6lAyK0jGsDeoSWyDoF0l4=)
2: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: bWWLij1Wx83t+MFfz+XF7XVuVj9SrApAZ2Znldi61NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:5f:64:da:75:25:c6:ba:7a:a0:fa:7e:a0:35:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Nov 11 13:01:01 2025 GMT
Not After : Nov 12 13:01:01 2025 GMT
Subject: CN=df3ed59a056ba8ce338418c0ecd63666c5302845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:57:27:c0:12:70:7b:05:c9:48:9d:2e:3d:
93:f7:3b:c2:ce:30:bf:08:9f:c2:71:a0:82:7d:49:
1f:ef:c0:1d:c2:01:61:98:69:98:70:00:f8:f8:ae:
1c:85:06:3f:8c:2d:2b:78:cd:9b:0a:79:ad:0f:d3:
8b:f0:ba:3c:9d:0a:6a:3e:db:8a:ac:35:57:ab:f1:
5c:67:ee:d2:41:3c:fa:7a:72:83:27:9b:25:ab:db:
b7:02:c0:8c:a8:d4:f8:37:b1:db:01:cd:81:2f:a4:
b5:04:c0:ae:ae:67:02:b5:68:92:9a:30:da:e2:cc:
91:4b:e3:f7:04:f7:8c:1a:f0:36:b9:b6:92:7d:1c:
44:ce:50:58:8e:36:5e:51:8a:22:d1:d3:a3:69:c9:
d3:7e:c3:1f:a8:c8:39:60:49:17:5d:ed:20:90:51:
7a:19:8e:8a:b9:15:d8:a0:0e:2f:c4:8f:01:1a:18:
f4:e6:f6:c8:c0:ca:a6:5c:ae:2e:c2:77:d8:14:95:
c9:f4:f3:f5:7d:a5:34:3c:d6:4e:bc:7d:25:64:9f:
a4:99:00:d4:e6:b4:9a:e1:5b:d9:ee:84:64:08:4d:
03:a5:51:7d:15:f8:6f:59:14:81:3a:18:51:29:73:
63:7c:6a:3d:6c:75:3f:81:97:e0:4f:2f:b9:10:03:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:D5:9A:05:6B:A8:CE:33:84:18:C0:EC:D6:36:66:C5:30:28:45
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d3:0a:a3:4e:68:ed:82:97:1c:41:76:ec:d9:80:53:c6:52:
c9:d5:ef:8f:64:83:33:16:44:bd:e9:41:d5:55:d1:77:fc:db:
60:c2:44:b4:37:c5:49:6c:10:bc:fd:57:08:8d:b3:59:d7:44:
33:e8:1e:3b:92:54:bd:2c:73:b4:3e:a7:75:66:7b:a4:dc:3b:
fb:e4:d6:3e:27:49:8a:f7:3a:d8:f8:97:d8:e5:27:07:73:c4:
77:63:4d:18:b5:35:f9:e5:ec:8b:c8:ec:76:50:56:ff:88:ab:
d0:a5:cd:4b:f5:30:50:d8:f7:c7:71:fb:66:e6:10:1e:04:70:
e5:c4:77:22:eb:7c:6b:cf:8a:19:fe:ca:4f:83:7e:de:e8:80:
c5:5e:88:21:86:b2:8d:1f:97:fe:32:58:0a:f8:00:e1:81:0d:
a5:ce:61:ee:f8:38:1e:1e:d8:09:3f:b3:b7:ff:c9:58:8f:b7:
78:86:9b:50:26:2d:5d:eb:28:35:0a:ce:9d:be:0e:9c:9f:cd:
e1:97:35:2e:31:78:6d:61:40:95:3d:bb:a9:33:eb:52:9b:f3:
56:63:0e:4f:5b:8f:37:78:7e:18:97:28:f8:80:82:44:2a:53:
e9:54:d3:db:b2:fc:88:ba:56:59:ee:49:29:fd:7b:51:7a:34:
89:3c:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:13 2025 by rpki-client