Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: YvoxaGavir1HHcLtbSQmseHxNUOE8eNDBfSGv21QS2w=
Subject key identifier: 11:19:E1:C8:9F:B9:B4:F3:1C:5D:B3:CB:E0:86:76:86:95:C9:17:AE
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 019A725CDCD4342D1C7D7EB6D492454A63B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 1695
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: TcxQ_LIgSlnQjiSbvcx7DOq2_Zc.roa (hash: v9utTlGogD+SmAb7nxAo7ersLZspEGf0TY5tMFbjRB8=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: vVHOY8AM+lzP0w3PBlc+ilPBZxim2j8+ILKA9A/n54U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:dc:d4:34:2d:1c:7d:7e:b6:d4:92:45:4a:63:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=1119e1c89fb9b4f31c5db3cbe086768695c917ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:31:e0:8f:07:4d:80:37:18:78:09:8f:b0:
32:fb:e5:8d:0c:48:49:38:f1:90:75:4a:61:fb:7f:
63:0a:3b:65:48:6e:ca:3a:4b:92:2d:3d:46:e3:a3:
e4:54:af:eb:a2:4c:d0:92:14:6b:69:7d:8d:36:d2:
31:10:81:3f:1e:74:73:28:26:f1:d3:2d:4c:e2:15:
8c:c5:5c:a4:2f:53:94:da:bf:72:33:c9:f4:11:ec:
2e:43:83:f2:ff:f9:d5:9c:f3:7b:98:c4:ff:93:78:
33:a6:cb:2e:2b:43:ef:7d:4d:9a:7b:be:bc:33:77:
a3:89:a2:ab:ff:c0:30:91:dc:ed:74:ef:20:d0:97:
86:86:79:96:26:14:68:cb:13:2a:4c:54:b6:bd:77:
6b:9b:a8:34:53:15:00:15:ff:0f:72:af:b9:f2:fd:
b6:75:35:5f:a1:4e:55:d5:11:d2:99:8c:5e:7b:7d:
8b:32:1d:5e:e5:91:f6:e2:17:bf:30:97:6d:63:13:
ee:9e:a6:9c:06:a6:37:89:d6:af:e7:82:1f:47:ef:
1d:0c:d3:94:95:58:97:62:5e:d6:6a:ba:42:df:46:
ad:dd:9e:2a:36:7d:59:7c:62:c9:43:1c:36:36:06:
1e:42:eb:97:92:26:2e:b0:b7:77:be:28:c5:92:e6:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:E1:C8:9F:B9:B4:F3:1C:5D:B3:CB:E0:86:76:86:95:C9:17:AE
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8b:5f:97:0a:7c:59:61:50:8f:42:3d:ba:2d:71:9f:40:6b:
0f:d9:27:96:d4:26:fe:54:bc:27:f2:c9:0e:99:31:b0:43:b2:
cb:ac:34:8a:04:9c:f4:3f:a4:07:20:56:51:61:ac:7c:c3:3f:
68:b5:ff:33:94:2a:89:2f:67:b4:bd:93:57:a5:e2:18:33:4c:
a1:af:d2:6f:b2:27:77:d9:57:20:b6:9e:9f:86:b6:f6:53:c0:
63:e0:cd:db:23:c4:e3:a1:e9:31:90:7e:cb:14:d4:6f:54:38:
1e:14:e9:7d:be:90:cb:c4:4c:1f:b5:74:79:cd:7c:cb:26:b2:
54:6d:e5:11:26:cc:89:fb:39:33:39:30:7a:5c:cd:72:8b:16:
be:a2:14:ed:19:3b:97:10:19:a0:1a:0a:39:12:98:e2:94:21:
db:84:2a:15:7a:22:29:00:a8:81:ec:b7:4c:be:dc:fe:4f:2b:
ee:bf:1b:08:ae:19:e3:5c:f3:99:50:c7:a7:5a:ae:4f:00:e9:
89:5d:7d:30:3e:c8:b8:ba:2d:70:4f:fd:53:73:b7:5f:76:3e:
f6:a0:e9:f4:6d:5d:73:f8:63:c8:5c:0f:59:c0:71:e7:64:7a:
9a:2f:58:de:2c:e2:27:4c:03:cc:d5:f9:7d:72:dc:ae:7b:04:
57:85:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:46 2025 by rpki-client