Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: yLrb/A7bJdNk2xoihVRgC+CscWqOUt88qQXwgygOy+U=
Subject key identifier: 1D:B9:CE:15:9E:FE:42:52:75:92:67:6B:1D:F2:C6:5B:D6:B1:55:E9
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 019A71EEDB2433A750FE7F5E2B869AE98A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=)
2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=)
3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: TDwcx2ajL1N5g5s9inJeHGlzEn3FUyRqWgdZhZD04sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:db:24:33:a7:50:fe:7f:5e:2b:86:9a:e9:8a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=1db9ce159efe42527592676b1df2c65bd6b155e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:43:a5:36:f4:1c:9b:c2:1e:fd:e3:c2:9a:
fb:0f:49:c5:2b:a8:4d:0f:fc:99:27:d5:f5:91:72:
8b:e0:0b:70:02:ac:93:68:5d:16:41:18:cf:0d:90:
17:2c:e3:40:78:36:f0:b7:09:bb:db:fa:22:a6:4f:
1e:e3:e2:83:c8:3c:6d:ee:29:74:fc:92:ae:37:9b:
91:11:75:80:59:21:13:01:a5:c4:01:53:5e:3c:e5:
3e:ae:9f:80:ef:4e:f0:6a:a3:20:be:bf:52:bd:8f:
6c:d0:62:ef:8b:66:79:cc:3f:f7:f3:9c:5c:08:88:
2b:fe:6a:ae:db:8b:7f:ac:cc:4a:8d:5b:4c:2e:6e:
d7:63:87:5a:bb:f6:a2:62:08:2e:83:50:5f:58:10:
a3:11:06:72:81:ab:4f:db:05:3b:79:be:38:08:73:
54:c8:1a:8c:0f:7f:a0:ce:59:5f:1e:05:bc:c6:e4:
ef:63:a7:0e:4f:17:29:04:e1:22:a5:02:6f:d6:8b:
3f:82:eb:64:ba:f2:38:55:ec:c6:6e:47:68:cb:4c:
6a:e8:7c:78:ed:c9:ff:b4:b5:f8:8e:76:a7:8b:d7:
65:0f:11:c9:57:de:ca:8e:55:36:84:7d:7b:1b:23:
96:b9:0a:d6:bf:80:0e:ac:b8:a0:8d:9b:d6:cc:ca:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B9:CE:15:9E:FE:42:52:75:92:67:6B:1D:F2:C6:5B:D6:B1:55:E9
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:72:89:3b:a4:ec:bf:eb:29:45:d3:b0:60:6b:93:22:81:aa:
60:24:b8:1e:67:78:4b:30:ea:81:60:ba:cb:fe:0b:84:ee:fa:
8a:81:7d:3e:45:37:7d:e1:ef:b9:f8:9c:20:85:dd:9b:c3:3f:
ab:8a:d6:92:b4:e9:b3:19:28:26:0a:dc:81:a8:5f:21:be:50:
31:8f:45:e2:d7:ed:12:6d:1d:48:35:87:37:af:90:78:70:14:
d2:94:4c:ba:ad:83:1c:10:ca:50:cc:3a:43:fb:2b:cd:2e:74:
70:89:03:56:95:f0:63:22:38:b3:45:35:9a:11:63:e1:30:fb:
de:37:26:85:28:f7:6f:c7:bd:12:26:b9:1e:c2:42:4c:c6:6b:
64:64:78:f2:69:06:2f:6d:0d:00:d0:5f:30:d1:67:ab:e2:97:
f3:ce:7f:50:49:56:ce:03:10:36:56:75:0c:9d:55:a8:4a:4f:
b1:9b:45:c1:b6:54:47:8a:33:2d:52:ce:32:83:51:ba:89:05:
3f:a1:b5:c1:4d:23:b3:07:7a:2c:92:74:93:92:9e:b2:ec:9e:
f4:84:b1:c6:ba:ef:d7:6a:48:9b:6e:71:ea:61:c3:f0:74:04:
5e:11:e9:f6:d6:52:f6:3c:c7:eb:32:58:0b:27:69:dc:bc:c9:
aa:56:18:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:00 2025 by rpki-client