Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
File: tPgsjv3jS9meROrwcxtsUltFShk.mft (raw, json)
Hash identifier: KTzbgowLyv4vjegsEzS1JyGfFLY1PBI4DafxgZqcGv0=
Subject key identifier: 71:7A:7E:1C:B9:29:6F:7D:E4:D3:D3:BA:42:24:A1:9E:81:1C:65:86
Authority key identifier: B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
Certificate issuer: /CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Certificate serial: 019A72266311325BA7A276C5B9A02FB5B84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: qLkt693aVmyKYJQGNdNxcAXdJ9w.roa (hash: D8tW4gMgnbvNPYFRk3OMpyQUNWmp5AcbpxituaqMb+A=)
2: tPgsjv3jS9meROrwcxtsUltFShk.crl (hash: lcBTX9zx7Eu/TqODn0UFmNbqmPBne2MwAmot2QxqZq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:63:11:32:5b:a7:a2:76:c5:b9:a0:2f:b5:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f82c8efde34bd99e44eaf0731b6c525b454a19
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=717a7e1cb9296f7de4d3d3ba4224a19e811c6586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:6f:5b:45:47:8f:48:63:6f:a3:84:70:85:
ed:fc:09:ec:f9:81:02:54:5a:64:d6:4c:29:b9:72:
97:dc:84:df:4c:24:fb:3e:fb:ac:2b:7c:1f:f0:ed:
97:6f:71:f5:88:e4:64:6d:dc:a4:af:7b:e7:1d:ca:
74:13:4d:de:d0:4f:0a:7c:c1:f3:43:58:77:2e:20:
63:8a:71:b7:15:e0:c0:51:89:b2:18:f2:a7:e9:e3:
05:e2:e1:2a:26:1f:57:74:32:f3:ec:0a:b4:f7:51:
fc:a5:77:1f:56:00:33:f1:ac:58:c5:22:19:ff:78:
a2:85:3e:06:7f:93:13:25:f9:7f:34:54:40:c8:11:
c7:d7:48:77:e1:4f:98:54:22:39:f7:cf:52:f3:31:
bb:e0:32:ac:88:ba:78:b5:7b:9c:35:59:89:49:4f:
b1:ed:fd:6d:e0:ab:30:ff:8d:37:ac:c3:d0:52:f0:
9d:fc:c4:57:0f:88:81:85:49:0b:22:bc:33:cc:c1:
0c:68:0b:d8:de:96:ae:d6:a3:37:86:9b:23:82:db:
88:b2:15:e3:27:22:d6:85:51:9c:d6:a1:6d:1e:82:
35:7b:1a:58:6c:d9:79:30:54:ae:38:2b:f7:c5:b6:
d3:cc:9f:16:ed:92:f6:6e:0c:e6:fd:fd:59:dd:16:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7A:7E:1C:B9:29:6F:7D:E4:D3:D3:BA:42:24:A1:9E:81:1C:65:86
X509v3 Authority Key Identifier:
keyid:B4:F8:2C:8E:FD:E3:4B:D9:9E:44:EA:F0:73:1B:6C:52:5B:45:4A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPgsjv3jS9meROrwcxtsUltFShk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/608fdb-a406-4b85-b14a-d2441e8f6c7a/1/tPgsjv3jS9meROrwcxtsUltFShk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:1a:8f:dd:04:73:3c:ce:96:82:c2:e0:0a:29:ec:41:0f:
52:fe:21:b3:71:dc:ba:5d:b6:62:79:2f:7c:dd:1b:f5:c8:11:
f1:df:81:a7:7d:20:a2:07:e6:40:b9:99:a9:4e:0d:a5:7a:ab:
71:94:b4:12:6e:cb:43:8b:6b:96:f6:d3:a0:39:88:5f:b7:f8:
71:d9:e9:14:02:54:ff:6e:08:9a:ca:47:5a:8b:61:81:d3:64:
a9:6b:9c:c0:e9:56:26:21:97:a7:7e:c4:e0:04:69:d8:21:8a:
64:c5:27:6f:65:65:92:74:d7:8f:a1:ea:e6:86:1f:c5:1a:e6:
63:d6:31:38:33:dc:b2:2f:ba:d4:6d:27:d1:dd:ca:43:dc:4a:
a8:ec:7f:1f:78:94:1f:c2:80:4f:44:70:fb:0a:a8:ef:cb:b4:
a5:03:b5:cd:6e:e7:20:33:39:04:17:95:d8:eb:41:80:f8:86:
97:f8:11:cd:ee:dd:3e:f1:10:66:01:8d:2f:25:0f:ca:79:e1:
47:08:6d:ef:5f:38:d2:c2:2d:c8:b2:e7:f9:f5:6e:c7:80:2b:
93:80:35:5a:79:45:e7:bd:98:eb:a3:8e:ee:00:9b:93:cf:44:
69:bf:32:1b:9c:61:ca:3f:ad:c6:15:27:a4:b9:74:f4:7f:6c:
0d:53:73:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:39 2025 by rpki-client