Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: drdSyzId0+Q5lcEkJ4VWk8TrORiiUd7Lphan8QOimFE=
Subject key identifier: A8:46:DE:32:AC:B1:F5:2C:99:DA:42:A1:D6:8E:B6:A3:2A:7E:26:BE
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 019A70DC382ACAFD9BC4A48610802F657725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 0982
Signing time: Tue 11 Nov 2025 03:01:11 +0000
Manifest this update: Tue 11 Nov 2025 03:01:11 +0000
Manifest next update: Wed 12 Nov 2025 03:01:11 +0000
Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: Y1/yL9YJ6dlmX+yf2BOso7HCytHQx81UxN++Qi/jCgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:38:2a:ca:fd:9b:c4:a4:86:10:80:2f:65:77:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Nov 11 03:01:11 2025 GMT
Not After : Nov 12 03:01:11 2025 GMT
Subject: CN=a846de32acb1f52c99da42a1d68eb6a32a7e26be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:8c:cf:0c:52:ed:56:ff:61:5b:cc:c7:65:
7d:15:1c:ce:0d:e1:ce:c4:52:ed:59:6a:69:b9:2d:
79:67:df:9f:d5:d5:cc:eb:ee:4f:fe:34:e7:eb:06:
f0:26:98:a3:68:cf:9c:12:e2:dc:11:73:1a:d7:7a:
bd:39:49:54:06:ce:ee:55:1e:5f:e5:a1:18:1a:f6:
04:d2:f2:0d:f9:7f:8e:9c:49:b2:2c:e5:93:bf:ad:
83:f8:5a:04:c6:76:71:3b:f2:08:76:75:ec:0b:93:
d3:80:9d:9f:db:f0:d7:93:83:e7:ed:79:92:9b:98:
b4:16:b7:49:33:e8:42:8e:ce:6c:1b:74:bf:a6:90:
fa:e5:39:48:38:2c:b0:a9:fc:3f:18:4a:20:5a:9b:
59:67:19:ea:db:de:49:bb:11:ca:12:a7:13:31:3e:
59:7a:9d:03:35:ee:06:c7:5d:44:e6:6e:9e:0f:24:
f7:8d:90:9d:5a:38:70:eb:d5:01:81:bd:44:c7:b6:
b6:20:9d:77:a4:16:e6:0b:db:05:2e:11:dd:a3:98:
62:1a:aa:26:07:84:73:ee:7f:24:d0:e5:c1:64:89:
73:56:92:f1:be:08:0b:c8:f5:49:8d:15:1e:c0:ac:
5f:db:2a:b4:2f:e5:82:aa:a3:e5:b1:58:8a:a9:dc:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:DE:32:AC:B1:F5:2C:99:DA:42:A1:D6:8E:B6:A3:2A:7E:26:BE
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5e:11:0d:32:8f:00:31:f0:03:e3:98:9a:6a:07:59:85:11:
fc:c8:a1:a7:0b:6f:82:8d:89:f1:b2:a1:6f:52:1a:0c:95:a8:
98:8c:cd:62:c6:29:c5:2f:cd:e5:fd:74:d8:83:f5:84:a4:f9:
31:38:1d:f4:4b:ab:13:a2:df:76:40:59:6e:f2:4a:a6:9a:7b:
15:4f:62:6a:69:c6:f5:1e:c4:08:4e:20:d7:bb:90:9a:44:ca:
75:5e:08:ad:19:27:ef:40:22:e9:78:d6:48:cd:cc:d8:50:0e:
fb:08:27:09:43:df:ba:cf:7c:d9:ba:7d:ba:29:73:86:f6:34:
7b:42:76:90:f8:cf:79:4f:bc:0b:b9:23:e3:25:26:c7:da:6a:
75:fe:df:17:e5:c5:8a:83:3e:a7:c5:6c:02:39:0b:5c:2f:ca:
ee:cf:79:61:44:50:6d:8b:63:ef:ef:d0:7e:49:05:f0:82:a1:
95:29:cd:3d:84:9b:79:ae:98:fa:37:4b:24:f6:f6:ad:a5:fb:
ee:ac:6a:6a:05:46:7d:12:96:d3:c7:7b:0d:f0:cf:3c:00:73:
4a:53:67:b6:8a:c1:91:de:8a:e2:0c:cd:24:b0:19:57:f7:de:
e9:55:e4:3b:c8:ed:e5:9f:6c:7c:59:b2:46:e1:ec:7b:7f:a6:
c4:50:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:05 2025 by rpki-client