Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
File: D_jpPzRy6mvljz_rdElUcAlaF30.mft (raw, json)
Hash identifier: t8/Or7HCjYP4O6wzqYAfk47r5F3ZBQkyxqsZS7LwAhY=
Subject key identifier: 19:F7:32:B9:D4:D1:9B:66:CA:E7:D1:8A:D9:46:67:B6:78:D4:C3:6E
Authority key identifier: 0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
Certificate issuer: /CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Certificate serial: 019A4E190BD76938FFBC6B1C31E1C1C79049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: D_jpPzRy6mvljz_rdElUcAlaF30.crl (hash: IptnxwXqO9pSVk61kwll8SMNChg85hc1wOQZA0bxLzs=)
2: hfGXrKTt6u41NiQkrNCRG03FgTo.roa (hash: DUf/jFg7LXlvnvWQ7PksqyhLZu7mleW34Ka9y48nKKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0b:d7:69:38:ff:bc:6b:1c:31:e1:c1:c7:90:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff8e93f3472ea6be58f3feb74495470095a177d
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=19f732b9d4d19b66cae7d18ad94667b678d4c36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:67:98:91:f4:ce:45:0d:81:c9:7c:d2:9d:
b4:c1:82:a2:82:0d:66:11:dc:aa:5e:84:4a:90:65:
86:74:c7:27:cb:7c:7b:85:23:79:71:e3:fe:1d:21:
15:ea:37:8d:51:4e:f2:f0:33:b6:56:e6:51:7a:8e:
8e:8a:09:7f:0c:e4:1c:25:1d:21:c1:f6:92:79:59:
d3:5a:00:00:7d:02:ac:13:39:ea:72:b5:c7:d9:74:
27:8e:c6:66:65:0a:ba:e7:82:bf:f8:03:a2:f5:69:
a7:1d:f5:54:f6:ec:6e:27:82:48:52:f9:56:5b:c3:
85:4d:6b:92:b8:cc:2e:fa:cb:71:78:f8:22:e2:e5:
d7:28:0a:43:ce:79:cb:39:cb:f0:e2:55:b7:51:73:
ab:4a:b7:1b:c8:77:7d:19:2e:f4:2b:0d:5a:f6:9f:
b5:25:28:a1:2d:4e:27:41:3e:cf:7d:33:4c:78:54:
66:61:cb:8d:e4:a0:78:12:61:98:0a:63:3d:59:23:
03:c0:3f:f5:d9:c6:9a:17:55:19:5a:ce:58:94:66:
00:00:36:6f:a7:d7:3b:02:93:75:88:ae:17:e2:4e:
cb:af:eb:1b:80:a3:d3:96:b1:a6:67:34:39:48:02:
ab:9f:77:b4:2a:47:cf:36:1a:1b:ff:db:2e:33:5e:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:32:B9:D4:D1:9B:66:CA:E7:D1:8A:D9:46:67:B6:78:D4:C3:6E
X509v3 Authority Key Identifier:
keyid:0F:F8:E9:3F:34:72:EA:6B:E5:8F:3F:EB:74:49:54:70:09:5A:17:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_jpPzRy6mvljz_rdElUcAlaF30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8b93a4-868d-4f30-b44f-fce3d590c6db/1/D_jpPzRy6mvljz_rdElUcAlaF30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:44:c7:d6:e0:65:82:76:49:b2:91:58:de:80:c1:f4:8b:30:
f0:36:03:f5:76:50:5f:95:40:c5:bc:8d:4d:fc:52:b2:7c:97:
37:04:15:b4:81:d3:42:a8:23:78:39:da:91:f4:d1:5e:7f:a2:
a4:4f:08:e5:47:e2:6b:97:54:df:f8:09:fb:09:d1:b7:2c:51:
f1:d2:26:82:c8:78:9c:4c:b5:22:a2:b9:1e:5f:5e:33:f6:d0:
30:a2:d8:48:cd:88:5f:f5:23:f5:1b:05:68:eb:63:6e:7a:92:
a2:3e:97:d5:0e:5b:08:ed:39:fa:c2:ce:68:72:1e:ff:e7:0b:
4e:7f:74:63:ce:62:3a:2d:c0:78:fe:f1:37:2a:20:c6:91:00:
2b:e2:68:62:17:99:9d:96:f3:a9:5c:a1:e1:b5:a7:e8:3f:99:
c1:e4:6f:5d:75:bc:d9:a0:c6:4b:7a:80:cf:37:ef:f8:31:50:
3f:3a:01:78:dd:81:b0:9e:98:96:48:5e:11:8f:d6:0b:22:c9:
93:56:bc:c1:9d:6a:5a:ee:e9:b5:6d:95:a7:25:2e:53:19:1a:
37:de:fe:2e:96:21:01:74:4d:e7:96:2e:ae:a2:54:48:1b:6d:
d4:20:95:7f:47:68:ee:d9:72:7c:bf:89:d8:d2:c7:88:14:50:
ca:4f:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:02 2025 by rpki-client