Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier: iiGQzDLVtOmg75E2cVTVtNp5vuZnU44jA9QLMjpfJ6M=
Subject key identifier: B3:21:F2:0A:FB:1B:EE:B1:F6:0D:C8:9B:AC:47:BC:69:3E:7F:4E:21
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: 019A5263249C66135E8F013C254A97AECE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number: 0DF4
Signing time: Wed 05 Nov 2025 05:00:20 +0000
Manifest this update: Wed 05 Nov 2025 05:00:20 +0000
Manifest next update: Thu 06 Nov 2025 05:00:20 +0000
Files and hashes: 1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=)
2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: oBBEGgdCYyl7DWtDHYCyR+ThFOWMaJ7Pp1dK0UlcJxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:24:9c:66:13:5e:8f:01:3c:25:4a:97:ae:ce:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: Nov 5 05:00:20 2025 GMT
Not After : Nov 6 05:00:20 2025 GMT
Subject: CN=b321f20afb1beeb1f60dc89bac47bc693e7f4e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:7d:cc:07:f2:50:ec:57:9b:63:18:91:af:
ce:04:91:1f:07:52:16:cf:a1:49:3d:99:d5:75:d6:
f4:84:75:ad:61:cc:93:02:2d:6e:35:42:50:5e:e6:
30:28:d5:2a:8a:4c:cc:de:78:c5:01:04:0c:1f:7c:
7a:2f:6f:0a:45:1c:45:7e:e7:7a:f7:36:ce:48:30:
ed:e7:a8:92:21:85:80:9d:6d:a1:50:5b:dc:02:3a:
36:df:65:cd:06:96:72:62:17:69:a3:6e:09:cb:7c:
04:3a:89:16:71:1e:ba:f0:2a:5d:83:a9:72:fa:e9:
b0:ff:7a:01:3c:4f:2e:f8:fc:e8:02:5b:fc:f6:f0:
52:19:6f:be:ee:68:32:79:63:a0:72:ac:8d:36:59:
8c:b3:94:de:5d:45:76:e4:65:ae:78:bb:9e:3c:da:
6f:56:b6:b9:74:24:c1:b4:bd:f2:d9:be:f6:c0:2f:
e7:bd:57:2a:78:f2:3b:dd:2c:f7:2f:35:8f:d8:67:
a7:04:b7:89:b3:5a:97:61:b9:a0:7d:36:b4:74:ea:
a4:27:c3:b6:13:4d:ea:b8:44:44:e4:d4:42:5b:67:
74:a2:fd:19:42:7c:df:eb:cc:4d:f5:2f:4a:88:27:
93:0d:4e:9d:8a:e9:f9:4e:ca:4d:6d:4e:1f:01:75:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:F2:0A:FB:1B:EE:B1:F6:0D:C8:9B:AC:47:BC:69:3E:7F:4E:21
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:80:71:4d:ca:11:b2:7b:fc:0f:0a:d7:bf:95:ce:0e:a7:fe:
d8:27:80:9d:2a:f0:35:44:db:4f:ca:6a:98:a2:99:ec:53:23:
5f:1b:0e:21:23:22:23:88:17:30:77:ff:43:d8:43:f7:f7:10:
2f:36:16:fc:d3:f6:66:67:81:51:37:79:80:b7:c8:e7:04:e7:
7b:85:7d:12:73:8c:43:6a:bb:74:b1:e7:1c:1c:c5:f2:49:66:
ea:62:c6:38:eb:0c:f1:25:05:b5:4d:27:4b:3d:c0:fb:41:fa:
4c:59:50:77:af:19:f7:91:d7:8e:25:f9:8c:1c:8d:09:02:a7:
95:0e:de:78:82:ca:28:4e:a6:da:f8:89:d1:17:2d:94:38:10:
b3:14:15:b2:ff:6f:14:a3:dc:16:f3:8e:cf:f7:ed:34:bf:a9:
2e:75:34:52:e9:23:b2:4e:46:05:60:fc:b8:5d:79:fd:a2:bb:
9e:0a:99:95:f7:bd:c2:db:c7:dd:12:94:88:22:97:f1:bb:32:
a7:51:26:e0:6c:30:bb:ee:f9:59:7b:a7:b9:4d:98:f4:c4:e8:
0e:0f:ae:2b:08:c7:10:6e:83:ce:da:a8:24:93:40:78:ff:b7:
99:55:e9:6a:82:c6:e2:b0:aa:50:30:8b:37:9f:8f:80:5f:35:
e3:90:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:29 2025 by rpki-client