Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier: lSyb/OVBQTjogAEjlK8vfx1X1HJJpX0UUNUJm/7++rc=
Subject key identifier: 6F:AF:C0:11:DB:E3:5B:D5:D0:11:55:6B:7C:64:4A:F6:6B:BC:85:25
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 019A71B7B39C734710C10D155B5C51DE45BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number: 15D0
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (hash: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=)
2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: KBEQPq+GaUmqTZeQJrhJzsgrh1AMglQyX7gnb950M0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b3:9c:73:47:10:c1:0d:15:5b:5c:51:de:45:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=6fafc011dbe35bd5d011556b7c644af66bbc8525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:21:be:95:7c:a7:f0:87:cc:3b:e1:8c:7f:
42:e9:dd:38:5c:3b:54:56:19:b6:1c:27:87:17:0e:
46:66:ba:ca:8c:97:69:8c:7c:5a:d4:5b:18:c4:bf:
f2:29:a1:56:39:a9:bc:35:42:43:7d:d3:c0:d6:47:
c6:9f:ac:d7:5c:93:61:b3:d0:f4:92:fb:4b:d9:84:
af:d7:37:a8:cb:5f:71:78:b4:81:8f:12:e8:89:83:
3c:53:aa:47:92:ab:fb:4b:aa:97:71:44:ea:d4:f9:
8b:4f:d7:2f:c5:22:3b:b8:c5:99:bb:2a:4b:af:fa:
12:f2:72:5d:43:e8:52:1b:a9:7b:09:13:c7:f8:9c:
89:f0:d3:5d:cf:df:76:a5:da:ad:33:9f:d4:2e:58:
d2:48:99:28:c7:70:cf:76:d4:d0:d9:51:9c:f2:7f:
c9:b8:21:06:7a:5d:bc:ec:3a:14:a3:5a:fa:f4:23:
0d:e2:10:a0:db:6a:c9:ec:03:a8:58:72:68:1d:95:
af:e6:a2:38:c6:b7:85:df:c4:75:07:72:38:fb:c3:
d2:cd:46:ff:95:d3:ae:1c:8a:45:ed:a6:8f:fa:dc:
80:06:3a:38:43:1d:64:e7:27:c1:4d:ed:30:af:9a:
75:ba:5e:cd:00:02:02:05:3c:27:16:76:db:f0:a7:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:C0:11:DB:E3:5B:D5:D0:11:55:6B:7C:64:4A:F6:6B:BC:85:25
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:27:a4:b1:b9:88:2f:61:78:d4:be:48:e5:ff:f2:d1:dd:d7:
b0:23:5a:66:a0:66:71:c1:a4:e3:78:a4:7e:6b:12:a8:bf:9a:
97:cb:97:0d:f8:1e:e9:1a:01:cc:34:13:3c:20:86:a1:37:d4:
81:8a:07:ed:c7:d8:ce:1d:53:ee:9c:48:5e:ed:57:6f:24:d3:
3e:cb:3d:dc:21:64:59:9f:45:5f:3f:19:95:85:90:35:ad:ad:
ae:ee:c7:4e:36:06:04:ca:19:05:ea:3e:cd:8a:cd:6d:d0:ef:
fa:96:0b:18:a7:e7:d3:76:02:a3:ed:1f:83:25:84:bc:96:a1:
19:22:cd:8e:8f:16:9d:39:fa:39:0d:5f:3b:ce:10:ac:7d:13:
e6:25:7e:37:84:aa:99:0b:c7:49:0f:c7:68:e6:2f:a2:46:e8:
dd:e5:d3:96:73:bc:a3:8c:4f:fc:6f:a7:03:3c:b6:2d:f1:de:
4c:38:94:0d:89:fc:e9:e3:59:0d:2e:d9:30:43:7e:5b:a7:19:
aa:34:ad:0c:20:96:b3:65:ed:f1:37:47:41:a8:c9:95:55:5a:
b7:67:21:8c:ef:78:00:13:3f:7b:cc:76:79:32:ef:84:45:69:
e8:8f:29:a2:b8:54:3a:a2:40:04:90:70:69:f2:4e:3c:d7:34:
9f:b3:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:22 2025 by rpki-client