Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: i7TtjeHnFJDmKLImEHa+EiynNhSvZp8kXM6hFIlMPIE=
Subject key identifier: C0:9F:61:58:2A:35:F9:B9:09:E6:9C:99:69:92:9D:98:F5:1B:5C:78
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019A3722C66E9FF84FD3ADF0C9C0218520C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0DA8
Signing time: Thu 30 Oct 2025 22:00:17 +0000
Manifest this update: Thu 30 Oct 2025 22:00:17 +0000
Manifest next update: Fri 31 Oct 2025 22:00:17 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: /LktcO45WrBhK+kodfKfnK9qvaXStBXh2tmuEyucdtk=)
2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:37:22:c6:6e:9f:f8:4f:d3:ad:f0:c9:c0:21:85:20:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Oct 30 22:00:17 2025 GMT
Not After : Oct 31 22:00:17 2025 GMT
Subject: CN=c09f61582a35f9b909e69c9969929d98f51b5c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:ec:62:79:ae:1a:1a:97:a6:26:82:cc:a2:
00:d6:32:33:f8:02:d4:30:32:89:ad:60:1c:d0:c1:
a1:26:42:24:33:5e:b9:8c:70:aa:4c:a2:47:7d:a6:
dd:72:c5:e6:63:fd:d3:8e:4d:cf:9f:a8:11:b7:01:
98:9f:11:fb:8d:07:99:53:7b:a5:be:71:7a:2f:0d:
49:33:9e:f1:28:0d:ec:51:ab:a1:a4:19:13:2a:dd:
c7:7b:50:81:08:2a:46:10:5c:8b:ff:54:25:1c:56:
99:7e:e1:b5:b6:4e:06:ad:b9:f9:50:79:45:4c:a6:
02:d6:f1:35:14:95:18:99:b9:29:5c:86:9c:db:07:
9b:45:7c:32:9b:6e:1f:e4:cb:3e:00:95:26:9b:dd:
56:2f:20:f1:ba:d2:88:24:66:ba:06:0c:a4:13:e7:
b1:40:4c:09:ed:b1:76:4c:a7:74:87:78:c4:e3:f0:
5d:ee:c8:ba:52:fd:b1:55:eb:d7:56:c3:6b:2e:a6:
22:38:2e:92:ee:c0:85:70:70:01:1e:a8:48:2c:db:
b9:6b:80:f1:82:12:c6:10:58:50:a7:a6:a6:01:bd:
6b:40:1d:5a:75:b5:c5:97:66:c5:15:63:c2:d1:2f:
94:f7:2a:ef:d8:2b:05:18:fd:2b:1a:50:c8:b0:e4:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:61:58:2A:35:F9:B9:09:E6:9C:99:69:92:9D:98:F5:1B:5C:78
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ac:09:40:95:86:d6:b7:23:08:ac:d7:cd:3c:73:6d:08:62:
a9:76:1c:7f:ad:9a:3d:f8:f0:57:33:21:17:a9:10:1b:8a:72:
eb:67:a0:74:0c:42:1f:21:96:99:92:28:86:dd:a9:8c:3e:32:
53:4f:e2:a7:f4:87:9b:b7:01:88:4f:81:42:08:f0:e8:9b:55:
32:53:f2:9b:05:ed:29:e1:2c:1f:04:e4:9a:fb:0c:be:0e:ce:
63:9c:95:ee:a1:fc:c5:9e:e6:b0:20:84:1a:bc:b2:ff:ae:36:
ba:38:3a:10:30:07:c2:c4:db:e5:c4:31:89:00:de:7c:69:c2:
8b:53:dd:97:4e:4e:ee:ac:61:3f:33:d1:c6:7b:a1:4c:13:43:
5c:d0:54:06:f0:2f:65:9c:40:4f:f9:41:1e:79:85:ba:dc:f2:
b7:fa:07:d4:f2:9d:de:95:72:fd:d4:a5:7e:64:9a:95:49:24:
b4:df:6a:db:8c:57:ad:98:8b:d8:67:f8:33:f6:42:06:7b:81:
fd:f8:0c:c3:ff:ff:ab:14:9e:cf:9b:85:68:e6:69:f6:40:e6:
4c:cf:cc:9c:94:ad:90:6b:4c:3d:b3:61:0d:04:84:fd:6d:f6:
13:31:27:0b:5c:69:0d:53:41:f3:98:38:fb:85:2b:6a:7e:d0:
c5:64:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 08:03:53 2025 by rpki-client