Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
File: d_u84sIID4H1oPmPJ5Ipgm3khQs.mft (raw, json)
Hash identifier: Jz7OdQMxtGvYaOutitqaiuz1DMiIn6QmH+55MBh+nkI=
Subject key identifier: 54:A0:78:B5:F7:5B:5D:D4:AE:2B:C8:BE:68:23:5D:97:C4:27:7B:AB
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 019A72934CCD9A34D1400A4F900A71D9A00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
Manifest number: 0E44
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: AOhn7xhM2kSUfRAFFhvDCxU-O20.roa (hash: 1VAhBGtFhGjWFmWSsORfWNgJJ1LUT2F54ZQ/3ep5zho=)
2: d_u84sIID4H1oPmPJ5Ipgm3khQs.crl (hash: l5z3LyhWBmcOAI/h17Kk+33C8YzKqV5lO438zIC9lVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4c:cd:9a:34:d1:40:0a:4f:90:0a:71:d9:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=54a078b5f75b5dd4ae2bc8be68235d97c4277bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:01:e2:bf:cf:22:d0:c8:95:45:25:fd:2d:
a3:c9:82:55:36:43:16:46:a0:99:55:60:44:7f:29:
50:f3:8c:ff:b3:3e:85:f9:29:c2:32:48:c9:8e:18:
5f:c3:05:24:39:ec:34:31:75:4c:6a:51:de:bd:8b:
a6:63:b4:81:e3:84:7e:81:8d:d7:f9:07:85:4f:6e:
38:54:5f:d0:24:1a:14:4c:4c:43:66:b7:5e:07:98:
65:3f:e8:2f:08:96:57:d6:a8:55:d4:45:2b:13:90:
69:4c:42:59:15:94:7b:b7:5e:06:b9:b2:50:e5:58:
b7:22:7d:6e:2d:1f:0b:87:05:82:db:42:c4:45:02:
28:9f:7c:7c:bb:b0:00:62:2e:2c:50:4e:77:51:42:
b9:c3:b2:ab:84:4c:fe:cd:40:4a:7d:ad:e1:a9:96:
4a:5e:5a:99:29:d6:61:fd:4f:71:73:2a:a3:5b:96:
fa:11:3a:88:ad:35:f2:c8:e2:47:13:59:b3:31:37:
b8:3d:4f:12:8a:fe:ea:7f:00:6f:00:01:cd:75:c8:
b1:1f:c7:3a:d5:fb:2e:17:36:7a:c5:38:dc:36:0e:
84:3b:98:c5:7e:24:25:b1:bc:d0:8f:f9:24:5e:b3:
57:a7:5f:6a:cc:68:49:1e:87:ec:8c:20:9d:f0:ae:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A0:78:B5:F7:5B:5D:D4:AE:2B:C8:BE:68:23:5D:97:C4:27:7B:AB
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:61:b6:2b:34:4f:b2:96:33:79:38:2c:9b:c4:fe:0d:42:17:
a8:54:e2:d0:5c:29:de:d3:25:9b:6b:15:31:7b:71:52:92:52:
77:df:e6:da:b6:1f:b7:7f:ef:19:5b:37:55:59:12:97:7a:cd:
2f:53:20:e6:a8:f7:3c:da:6f:80:a5:03:44:bc:ab:20:e2:8a:
f2:e6:d1:9e:fd:29:9e:59:a9:e2:e2:a1:86:18:f7:dc:95:e4:
bb:46:77:24:85:6e:d5:44:01:ad:cb:41:51:9f:7e:c2:82:37:
4f:b5:dc:34:18:ef:2d:2a:52:97:75:04:81:5c:c6:7c:35:3d:
a0:11:6b:04:67:87:37:65:20:20:35:0a:e7:de:d6:70:d7:97:
5a:cc:25:98:69:75:26:71:9d:f0:94:10:b2:0b:55:14:36:58:
2d:d4:45:aa:06:e8:2a:ba:1b:06:b6:e3:59:f7:db:b2:b6:ce:
49:96:3a:3f:3c:76:5c:87:9b:59:07:57:96:82:fa:1c:fc:35:
7c:ad:a7:e0:b0:68:9d:b9:a1:22:47:36:cb:ef:f2:fb:89:87:
fc:f7:c4:96:db:cf:c9:9f:eb:59:6c:9f:da:b7:91:24:5e:bd:
11:e7:cd:80:dd:21:da:e8:b3:68:7d:8f:b8:5c:38:5c:85:11:
fa:6f:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:15 2025 by rpki-client