Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
File: d-L_RonUITUPdqNzvBGT5FG4HvU.mft (raw, json)
Hash identifier: rBJe4BXyzR32wkOhJqy4KKM0a4TPOMnmRcgsmQO0vD0=
Subject key identifier: C3:E8:81:06:FC:29:5F:29:65:50:36:D9:E9:BC:BE:3D:74:F5:BA:9B
Authority key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
Certificate issuer: /CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Certificate serial: 019A7293A85C0A6CCB9A1C62FAC9133CB0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
Manifest number: 0107
Signing time: Tue 11 Nov 2025 11:01:10 +0000
Manifest this update: Tue 11 Nov 2025 11:01:10 +0000
Manifest next update: Wed 12 Nov 2025 11:01:10 +0000
Files and hashes: 1: _jCuY0H7p6bIiBFSZYJo7QRa2GM.roa (hash: TpMghtYoXA8sj9zv0aUbBiasB0uWw4MufaB/nWeBcDs=)
2: d-L_RonUITUPdqNzvBGT5FG4HvU.crl (hash: V/u+ADmQfN6T2jO3iurxSq31hurbqj/Wf8LfTWxZc5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a8:5c:0a:6c:cb:9a:1c:62:fa:c9:13:3c:b0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Validity
Not Before: Nov 11 11:01:10 2025 GMT
Not After : Nov 12 11:01:10 2025 GMT
Subject: CN=c3e88106fc295f29655036d9e9bcbe3d74f5ba9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:e0:6b:cc:54:01:8b:d7:39:a6:52:e6:f0:
1b:54:60:d7:46:78:f8:eb:35:8a:61:97:eb:b5:d4:
e1:73:b5:42:6d:55:b7:c6:41:56:09:26:b9:63:cc:
10:d8:f5:eb:b5:dc:f9:ae:19:91:08:12:ab:be:92:
48:a0:86:c1:a9:d9:a7:0a:22:73:bb:a3:e2:f3:fb:
b3:bf:e4:90:5f:65:f8:62:6d:bb:7e:19:cb:a4:40:
8e:c0:62:2e:c9:d1:20:d4:34:14:d5:11:1c:0a:b3:
54:89:df:34:36:91:18:b0:e9:c3:96:0c:10:91:ca:
a2:e9:71:cd:de:5d:61:05:af:80:6b:92:46:7c:f7:
a9:89:15:ab:a0:fc:71:9b:6d:d5:84:4e:75:d4:75:
f2:3f:17:17:52:41:54:12:fc:2e:bd:16:ea:f5:c6:
84:27:e6:f7:72:06:3c:ef:65:d6:de:63:76:f6:86:
3c:59:bf:83:c1:01:97:3f:ed:8c:1c:38:8f:69:6f:
a0:fb:1d:67:00:3a:ec:b5:c1:1d:79:48:42:20:80:
22:d2:69:e3:65:12:b2:01:b8:b2:41:63:d9:4c:44:
71:9e:02:f4:47:45:3c:b8:6e:a9:9c:7c:8f:8a:2a:
7a:ef:ca:cd:69:e1:b7:4b:38:7e:47:14:77:b9:2e:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:81:06:FC:29:5F:29:65:50:36:D9:E9:BC:BE:3D:74:F5:BA:9B
X509v3 Authority Key Identifier:
keyid:77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b5:f0:96:61:ee:c5:05:79:5f:39:02:2a:bf:16:75:64:21:
b3:51:b4:01:67:05:41:f1:fb:57:75:a0:89:27:3f:ab:67:43:
55:cd:b5:04:9b:8e:ef:90:e9:63:cf:8e:93:71:24:50:c1:58:
39:ca:43:3d:2d:f3:77:78:06:a2:dd:88:66:d9:e0:17:13:d7:
7f:e1:d1:72:5b:2f:f7:bf:d8:1d:5d:a8:96:6f:4a:cd:ad:e6:
aa:f8:1d:a6:58:c4:3f:ba:01:74:fa:8d:9f:4b:ec:16:6d:96:
c5:7c:c8:a7:ef:87:ff:7d:98:ac:63:04:97:57:3a:da:1d:f7:
a5:ec:ef:3a:66:4a:1b:c9:f0:55:a6:a0:57:49:57:5b:f9:1e:
24:c6:d6:81:a1:49:69:ab:c3:8f:f0:35:30:2c:42:af:5c:d3:
aa:69:dd:64:17:b0:79:ba:38:1c:e2:63:ae:1b:15:9a:39:e9:
ce:7e:0e:6b:2f:f4:03:5b:1f:29:58:f8:2a:a3:06:ec:25:d7:
4d:67:ab:69:01:99:ba:3e:36:c9:aa:a7:8a:83:71:f1:d1:53:
d5:bb:7a:0a:e7:fc:1f:03:4d:69:4e:54:26:37:1c:05:75:3d:
4f:96:57:c6:10:3a:a7:7e:37:e0:8c:3d:a3:7b:7b:ae:b1:27:
a7:e2:fe:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:53 2025 by rpki-client