Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: +nFhZykgTJxLLTtu7VRVAbq/CzMemVuFJba+HlQ+SkA=
Subject key identifier: B2:DE:9F:F5:FC:7A:70:F7:71:21:E3:6E:87:25:80:18:74:5E:2E:04
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019A71B7C0354E5237A8AB59C86F6F4486AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0AD3
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: 6t5qx8UppnxeJBlWQ3KZijbFf4dMxTKqsj2hx28omjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c0:35:4e:52:37:a8:ab:59:c8:6f:6f:44:86:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=b2de9ff5fc7a70f77121e36e87258018745e2e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:7c:b3:6e:42:dd:ba:d4:07:1c:34:62:28:
4c:6f:93:fb:cf:1f:70:30:16:30:b6:d1:3f:48:37:
60:5b:43:21:15:e0:09:82:f8:54:c7:c8:70:13:66:
87:56:4e:88:32:c8:f7:22:70:69:f0:83:f1:8f:1c:
9c:a0:df:9b:65:91:0d:41:89:26:7b:89:3c:2a:42:
af:47:e0:04:03:d0:3a:ed:f7:16:1a:82:62:0f:94:
a9:9d:39:40:42:e8:aa:b8:77:47:fe:c0:af:2e:30:
5f:93:01:25:7e:e3:e8:7d:25:48:2f:f7:da:81:30:
f1:a4:7d:41:18:3c:a5:1d:53:d4:ba:6b:04:3f:83:
ee:46:de:e6:58:68:c2:2b:9b:96:c4:db:c6:af:db:
96:1f:16:ba:11:ea:72:30:0d:f9:74:7c:e5:78:79:
cd:60:f7:bb:b5:13:10:b0:1d:29:4a:db:15:25:30:
60:52:58:fa:0a:c2:48:04:32:0b:ab:e3:40:ed:1a:
ff:cf:31:c8:79:a7:5a:03:67:c9:08:44:89:e9:71:
0c:77:8a:38:d9:fb:62:38:d9:7b:57:77:e9:f5:61:
fa:e6:a0:d5:af:25:28:0c:bf:14:f3:5f:30:de:3b:
04:05:39:3f:f9:83:84:4f:27:44:3c:1a:f9:8c:05:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:9F:F5:FC:7A:70:F7:71:21:E3:6E:87:25:80:18:74:5E:2E:04
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8f:f2:68:d8:a5:32:30:fd:c6:b8:1b:fc:c0:4c:7b:e9:b2:
17:1c:fa:9b:65:a0:02:71:dd:47:e0:63:c2:87:73:77:3d:c4:
ee:e0:65:cd:fb:60:92:e5:ac:7e:d6:9f:90:a3:c4:f2:f0:b7:
85:90:d5:35:dd:f2:dc:31:fd:43:36:6e:55:83:50:68:4d:a0:
dd:23:17:3e:9a:87:6b:49:8a:38:df:71:eb:09:3b:ae:27:22:
10:8c:d2:dc:7a:0e:bc:2c:e0:e7:d9:b0:09:82:f5:22:7c:4a:
49:10:8d:9f:99:82:20:aa:54:a3:ab:9a:72:4a:20:51:84:95:
08:c6:95:81:b5:8d:be:8e:8d:66:41:7a:98:87:c9:16:1c:fd:
56:9c:48:7f:b1:1e:f3:96:af:25:46:13:15:4f:8a:0d:f9:00:
7c:38:39:4d:4e:0a:25:64:4c:32:ce:c6:73:00:5b:7f:5c:20:
39:f5:b9:04:5f:27:c3:fd:de:ac:ae:33:9a:93:15:f4:b2:44:
73:2b:ff:70:a8:fc:c4:d5:64:0e:a0:36:90:00:69:d8:dd:62:
20:4f:ba:d9:d0:60:77:b1:60:67:b7:09:ac:17:65:b2:42:17:
43:97:fe:c0:ab:83:20:cc:e0:16:22:f0:bd:95:94:3e:83:3b:
65:78:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:31 2025 by rpki-client