Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: ZOEveKPRw8m/bHIBZtoSwFAz2wNIhvWSlHXRsE2unJs=
Subject key identifier: D7:4F:39:73:F8:C4:C7:C2:CF:CE:2D:88:CE:48:83:A8:B6:85:BC:B3
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 019A725CF599B2592603D5024BDA2196130B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:26 +0000
Manifest this update: Tue 11 Nov 2025 10:01:26 +0000
Manifest next update: Wed 12 Nov 2025 10:01:26 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: 0EjBVTOpMUdjdor1zSkjU/yIbP62bSNazM6Winwiavk=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f5:99:b2:59:26:03:d5:02:4b:da:21:96:13:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Nov 11 10:01:26 2025 GMT
Not After : Nov 12 10:01:26 2025 GMT
Subject: CN=d74f3973f8c4c7c2cfce2d88ce4883a8b685bcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:53:a5:86:d9:4c:ae:da:f2:0f:94:1f:9f:
e0:2f:4a:73:c7:fb:da:b5:47:58:eb:62:6d:1c:aa:
48:9d:53:69:9c:69:1d:ad:b9:a1:fc:c8:5d:5f:97:
4c:0b:6d:21:64:8d:50:78:90:61:da:86:6a:2e:de:
27:8d:fe:2e:3a:f9:75:b5:a0:cb:0d:74:0d:1e:64:
ee:91:bf:94:bc:b6:07:de:ec:c6:07:da:09:03:1d:
bd:e1:2c:df:e0:cf:fd:73:8d:84:73:99:5c:49:31:
b3:98:44:9a:2b:54:65:05:b9:e8:27:d2:bb:28:4d:
3c:b3:8e:c3:3b:30:dd:4c:8c:a7:4c:ed:e2:d0:4b:
6d:15:87:4f:ef:2a:c3:6e:07:4e:3f:82:7e:4b:1e:
6f:6f:78:57:68:27:ec:dd:58:da:71:7e:4a:b2:af:
2e:5e:a9:a1:1e:b0:c7:5c:50:b0:98:37:63:97:9b:
03:ad:47:7f:56:ed:be:55:43:b4:bb:77:77:3a:af:
9d:93:1b:cc:cf:ce:04:6b:3d:ca:8a:27:fd:c6:7d:
c0:71:01:98:27:e2:8a:d1:9c:ef:89:88:d2:c9:ec:
92:42:ca:20:b0:c0:4b:8c:c4:f5:7d:88:ca:2a:60:
9d:12:19:ed:b8:17:cb:08:58:72:6f:f3:b1:1e:f7:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4F:39:73:F8:C4:C7:C2:CF:CE:2D:88:CE:48:83:A8:B6:85:BC:B3
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:da:d5:7f:7a:89:a6:1d:66:1c:a9:bf:cb:ee:04:85:b7:8a:
69:0c:51:03:a3:58:eb:ff:b7:ee:d9:6b:a3:2e:02:85:85:72:
0d:ac:97:0e:9a:55:86:11:bf:18:b0:6f:0e:b2:1b:1f:b8:12:
b7:1b:a5:fd:6d:f1:03:c2:62:52:ab:21:57:c0:ed:7e:0c:17:
6b:80:e6:e2:a4:2c:9e:ed:eb:4f:b0:28:ea:4c:bc:62:9a:20:
7b:dd:1e:71:19:b6:95:dd:f3:8c:bf:fd:6b:02:1a:00:b0:bf:
70:96:2b:cc:62:32:14:a0:c0:6d:59:c6:6a:b7:9b:c3:1e:f8:
a2:41:ec:de:b5:54:fe:3d:74:d3:b7:87:91:5a:2c:52:a0:fe:
7b:b0:d8:3e:5e:96:96:f8:ca:c2:52:41:eb:bf:fc:75:d2:47:
dd:b9:a2:57:7b:16:7c:84:c3:c6:34:de:2d:c7:de:e8:77:db:
d6:00:81:59:1c:47:fd:d0:76:9a:92:04:d4:a4:b8:aa:78:24:
b7:91:03:24:70:39:54:4a:fe:8b:5d:26:32:1c:c5:24:dc:e6:
bc:61:43:b9:59:84:49:7b:d0:ee:c5:e1:68:31:0d:cb:04:a0:
d7:a5:0a:fd:58:da:48:37:55:32:55:a9:31:52:03:07:fe:fc:
dc:d9:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:17 2025 by rpki-client