Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: QUOs4Rby+7ZCLkZnzuS5VocArpamyHnN9lgKlhsgs7k=
Subject key identifier: AB:0C:1B:26:2F:D2:3A:0F:30:D5:6A:5E:0A:7A:CD:71:1F:6B:80:47
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 019A7225F183F150F0D8652705CE244362B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: TJPJs6ifmcIlKHDAHeapnCb4QrlJ/I07CGo4Arl/7/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f1:83:f1:50:f0:d8:65:27:05:ce:24:43:62:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=ab0c1b262fd23a0f30d56a5e0a7acd711f6b8047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:57:41:de:31:c2:19:1c:2a:54:d8:9f:dd:
f9:4f:21:4c:23:de:a0:79:41:b7:54:f4:6b:24:cf:
84:46:da:8a:a0:de:27:c3:69:14:02:41:b1:45:2a:
63:bf:7a:98:4e:17:86:65:65:a6:49:09:3d:85:03:
ed:6d:1e:cc:fd:24:41:f0:0b:4a:25:e4:19:57:3b:
79:0b:19:20:3f:9e:24:a2:2a:43:47:b4:c6:bb:9f:
9c:2b:ce:f0:08:ff:12:49:bf:19:34:18:76:ab:77:
d2:f2:ae:2c:7c:25:f6:17:6f:e2:52:29:cb:1f:69:
57:14:ef:af:08:d2:ae:c3:d5:c8:82:49:e4:a5:f4:
91:f9:f6:dc:d2:ea:5c:59:a7:c7:12:89:02:c7:c6:
4f:47:0e:4f:49:4a:be:f5:56:7d:da:a2:c0:2c:e9:
4f:80:c9:76:f8:89:23:6d:57:5b:ff:e2:a7:b5:b5:
de:81:6e:00:ef:b7:31:f8:5c:f9:f4:cb:28:2c:a7:
35:e9:a7:9d:e3:be:09:e6:2a:81:34:47:08:e6:fe:
18:24:e3:f4:7f:82:7a:5e:b6:f3:23:cd:a9:7f:6c:
e0:8b:76:15:51:67:ec:8e:89:5d:85:75:b9:ac:e3:
e0:13:3f:31:25:8d:cf:fa:70:c6:a6:07:59:ba:6e:
29:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0C:1B:26:2F:D2:3A:0F:30:D5:6A:5E:0A:7A:CD:71:1F:6B:80:47
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c8:12:b8:78:a3:8c:95:d5:6b:2b:b6:a0:d5:2d:fa:e8:f8:
4b:2e:ac:98:28:ac:b0:46:ab:d8:b8:54:d1:98:ab:52:db:13:
88:45:0e:f4:d9:fa:5d:1e:23:2e:28:50:84:3f:88:11:06:97:
b0:b9:72:8c:05:a0:61:24:59:19:28:50:3f:cb:bc:47:7f:53:
0a:f4:37:34:d1:6b:7a:86:7a:36:97:5d:99:51:ce:f2:27:1d:
62:d0:e1:07:2a:46:05:9b:d1:71:2e:55:c8:79:4e:af:64:12:
fa:31:d6:d1:fd:10:98:ac:22:02:68:c2:4f:5e:cb:5d:d7:02:
90:d5:da:38:2b:da:71:5e:73:4b:5d:42:6a:02:bb:74:47:22:
72:16:ae:c9:bd:65:61:61:03:34:fe:d8:c0:7a:9a:d6:42:bd:
ec:73:f4:7d:a2:84:f0:7b:f5:a4:72:56:8a:3f:f2:a6:2e:d7:
16:21:e8:0e:40:38:90:f8:c3:bb:05:70:8c:42:69:f7:9a:72:
5e:cc:39:83:dd:c4:c9:1f:b6:30:7c:4b:45:db:ac:a3:76:c4:
cb:fd:89:c5:5e:e3:1b:7a:9f:b0:3c:91:57:58:fa:a3:5e:4e:
d4:7f:6c:ae:7b:84:db:63:1c:7c:10:13:83:7a:8f:25:f6:bf:
39:66:bf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:53 2025 by rpki-client