Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: +LbZL5EittASqrRZT5+Y4NAam/6MvPUc96edKFIZajE=
Subject key identifier: 68:80:0A:3A:63:3B:56:21:C8:D2:2D:1C:4B:5E:C4:00:4C:8C:A0:7C
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 019A72CA2ED4791F3858B68BA28365EBF0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 12:00:44 +0000
Manifest this update: Tue 11 Nov 2025 12:00:44 +0000
Manifest next update: Wed 12 Nov 2025 12:00:44 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: Bv9f8v3/VraJsi2pZQ+O83tr1o0RqVaCEUwwtq1IAzk=)
2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:2e:d4:79:1f:38:58:b6:8b:a2:83:65:eb:f0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Nov 11 12:00:44 2025 GMT
Not After : Nov 12 12:00:44 2025 GMT
Subject: CN=68800a3a633b5621c8d22d1c4b5ec4004c8ca07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:71:a2:f5:11:b0:7e:1d:c6:40:f7:db:b0:
60:12:0f:a8:9d:73:ce:2d:25:10:ae:ce:ca:94:b9:
a4:5e:b4:69:a6:c4:02:33:fe:51:b6:d4:a4:b6:0b:
c7:f1:2a:55:8b:42:24:da:6b:39:8a:e6:cc:cd:da:
fc:be:75:ef:56:b2:c0:db:19:3e:11:cb:8d:a9:69:
a3:5b:af:a2:48:bd:e9:04:00:8a:3e:5b:41:af:5a:
07:f6:f8:a0:26:09:f0:30:2c:0b:63:30:f7:32:41:
7b:60:89:88:c6:4d:19:8a:3a:f8:65:38:69:4c:d6:
bd:80:5a:9d:31:eb:f0:80:a9:9b:1f:5d:35:73:cc:
24:de:ac:60:08:bd:98:af:1c:cd:1c:66:07:74:d3:
0c:1c:d9:51:05:af:f0:3c:2e:39:bf:ef:35:d8:47:
0f:db:57:d0:79:cd:ad:46:96:d5:4e:e8:5f:48:b5:
62:3e:a5:1c:a3:97:62:a9:76:ea:e1:1b:b3:f9:96:
41:26:f8:a6:0c:aa:71:a7:ee:7d:42:e5:71:e6:eb:
b1:14:cd:75:ed:b5:16:32:ce:1c:41:e5:b7:75:15:
14:9b:5a:02:c4:15:fa:54:29:aa:0e:48:73:03:b7:
c2:56:ce:48:ae:df:f7:93:8d:5a:3d:86:3f:07:4e:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:80:0A:3A:63:3B:56:21:C8:D2:2D:1C:4B:5E:C4:00:4C:8C:A0:7C
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ae:54:6c:28:40:c1:70:4a:d7:13:06:d1:59:b9:cb:25:a4:
50:8d:d4:fc:0e:33:14:7f:3f:be:2c:58:78:8c:a1:44:4a:71:
dc:c3:d8:ac:f1:ac:3e:ba:5b:df:e3:71:73:46:e1:01:c4:da:
a8:34:16:3a:25:9f:cd:cc:50:71:be:61:7e:51:47:e5:14:8f:
66:bd:d7:79:7c:50:3b:23:89:45:83:b8:b5:5e:0e:10:98:fb:
93:d0:2e:cd:ae:7c:8b:0a:14:cc:76:8e:f5:f4:48:a7:c6:24:
a1:ec:70:1d:e6:ee:7b:e3:03:75:92:fa:e1:41:9f:0f:82:61:
16:8f:29:77:63:df:78:67:9d:40:6e:76:bb:8b:70:1f:4f:7d:
6e:16:02:1f:c2:5f:39:1b:96:92:63:01:7d:7d:29:37:9b:97:
7e:41:f5:63:37:98:74:d5:f8:99:57:90:b3:79:b1:6f:8c:87:
2f:f8:5e:8b:c2:07:9c:a0:25:66:cb:79:f0:5b:47:a3:ab:fd:
b6:01:52:b9:f2:dc:11:b8:3b:f7:e5:e6:71:f8:6f:ea:0e:d0:
e1:16:ef:8a:8e:dc:bf:56:bb:00:b3:29:da:69:6e:c8:4e:74:
66:d8:e0:f7:b0:0f:c0:b3:89:7f:bb:3e:f5:15:1b:db:7b:d8:
a1:e6:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:46 2025 by rpki-client