Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: y25olC7iFcRwmb1e1omjqyUOZB2swd2fdD+kB96iC6A=
Subject key identifier: 37:A8:AA:27:FC:C3:46:FE:59:BE:58:7F:78:5C:46:9B:D5:43:D4:87
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019A73012AF4875F3A42F4B190697FEC2639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: 0105
Signing time: Tue 11 Nov 2025 13:00:47 +0000
Manifest this update: Tue 11 Nov 2025 13:00:47 +0000
Manifest next update: Wed 12 Nov 2025 13:00:47 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: oMcQjCxiIM4kkHm2G+/IC1Y8QLN+YKGKx3cebRJlTaE=)
2: 1-7rqPeApfWB5OeXme1R2dxaURkI.roa (hash: G1AfCo2TRIj0s8Iv4o94YSbEJ+sCCm2M5yCwI2QU6Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:2a:f4:87:5f:3a:42:f4:b1:90:69:7f:ec:26:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Nov 11 13:00:47 2025 GMT
Not After : Nov 12 13:00:47 2025 GMT
Subject: CN=37a8aa27fcc346fe59be587f785c469bd543d487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:76:82:4c:ae:5c:ce:eb:71:f3:49:ff:44:
a9:d7:f5:0a:7a:1a:7a:89:0c:58:df:74:be:34:06:
8c:31:eb:66:44:d9:5c:a8:15:5f:2a:ba:b5:0b:18:
5f:8b:aa:cc:02:91:d6:91:4e:cf:bb:7c:a4:57:64:
bf:7a:57:fb:f9:b1:44:51:5f:29:d5:34:e1:3c:d4:
53:f2:41:82:78:e0:29:62:99:a2:8f:48:77:ae:a5:
1f:b1:fd:36:d7:9c:f4:a9:c4:26:c2:1c:91:e1:63:
3d:11:a3:a3:71:f9:27:34:9e:da:4d:c6:d5:9f:d0:
84:be:02:eb:51:8f:03:80:82:07:cf:6f:7f:0e:fc:
9d:5d:07:f9:79:45:86:09:c4:33:f1:bc:7f:4b:04:
f9:8a:39:96:86:2f:78:04:df:e1:25:7f:87:ca:56:
93:fa:79:d9:c2:33:5a:90:fd:d7:23:1e:19:2f:27:
b9:ac:32:09:4a:3d:f4:fd:f4:d3:87:2f:f4:c3:4c:
52:6c:24:d5:48:5d:0f:32:53:e0:e0:c3:2b:3e:88:
3c:74:3e:17:6d:51:e8:65:f0:17:35:2b:de:e8:88:
fa:23:5f:ba:43:2e:84:74:87:3b:5d:a9:43:2b:d9:
89:eb:39:eb:6c:44:28:5a:68:94:6f:90:2a:e7:de:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A8:AA:27:FC:C3:46:FE:59:BE:58:7F:78:5C:46:9B:D5:43:D4:87
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bd:3d:c3:ea:02:63:82:cd:33:75:29:79:14:68:4c:1c:cf:
0a:44:74:cd:1d:c7:19:94:9e:42:dd:a7:30:85:0c:de:c0:41:
74:86:72:47:84:70:0a:91:9a:95:5a:42:66:9c:2b:54:96:68:
ab:f0:01:45:26:46:29:85:c5:66:e6:10:d2:38:dc:cf:f1:84:
b2:f3:e2:e1:28:db:2a:80:8b:2e:59:03:69:c5:31:00:c1:0a:
e3:d2:0f:31:19:48:64:8b:99:cd:27:39:d7:d3:9f:d0:64:c8:
81:cc:2c:71:5f:eb:6f:f8:7d:72:34:33:29:13:b7:29:b9:a4:
bf:22:6f:1f:91:a6:50:07:2d:fc:bc:c1:6b:24:2f:78:99:ae:
66:9a:9b:cd:48:27:e7:aa:78:00:d1:26:fe:78:24:68:9d:32:
96:49:bc:2d:b9:7d:8c:92:e9:aa:9f:e4:45:a7:6d:8d:6a:56:
5a:d9:d1:a9:69:4f:a9:63:49:98:38:27:49:72:b3:89:5b:14:
2d:b5:05:7d:c9:9a:1a:08:6f:e6:ac:11:89:f3:f3:3c:f7:ca:
53:24:89:ee:b5:d7:3e:b5:9d:59:ae:97:42:3e:a2:2c:cd:0d:
3d:b0:55:e5:34:e4:fa:3d:df:0e:89:95:65:a3:9d:83:7e:e8:
58:36:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:39 2025 by rpki-client