Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File: 95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier: mg7Vt8L+TMpR2VpVRIA4ybggU7UTDX1Un+hKW1dUf3k=
Subject key identifier: 9B:19:E7:61:79:DE:11:F1:A0:D4:E4:7F:53:9A:69:11:3D:84:F2:73
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 019A50749D7F90ECC814FCAB17EAF19BE50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number: 0302
Signing time: Tue 04 Nov 2025 20:00:11 +0000
Manifest this update: Tue 04 Nov 2025 20:00:11 +0000
Manifest next update: Wed 05 Nov 2025 20:00:11 +0000
Files and hashes: 1: 5BPtNrEhH9Rw1aJqmYEkCzXkQjY.roa (hash: qBma49p0UmV3mrUVRqrsoQSZBl3jQDEOljuj/i+uqbI=)
2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: H6bDObbRusqHKqRTpU70JouaNleDKSwRk+A1Njc2BoA=)
3: OQ9RtML9G-ixWSm5EbGC_EQmqZQ.roa (hash: Jj0BQnswIB1ZHaTdvAdTXUICRNEwRPIUjy/LhMuocGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:9d:7f:90:ec:c8:14:fc:ab:17:ea:f1:9b:e5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Nov 4 20:00:11 2025 GMT
Not After : Nov 5 20:00:11 2025 GMT
Subject: CN=9b19e76179de11f1a0d4e47f539a69113d84f273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:9d:2c:8e:a3:04:31:c6:3b:00:b8:75:66:
f9:40:0e:1b:15:f4:c4:37:4a:06:db:3a:be:90:ed:
bf:ad:b3:e5:12:28:92:25:53:8c:fd:95:ca:6e:b9:
9e:4d:eb:c4:6c:8a:2b:18:84:cd:14:45:ec:aa:4c:
c5:6a:40:a5:80:a1:02:a3:f7:e3:d3:bf:a6:1e:85:
bd:10:78:bb:61:e2:59:51:08:07:2d:82:2f:cc:7e:
d0:ca:ae:4d:2a:48:cd:de:f5:0e:01:dd:29:4c:67:
fc:3d:62:22:fb:d5:87:e6:9a:97:01:e3:42:e3:19:
63:86:ce:14:d1:9b:d8:f1:d8:41:40:29:7d:7d:d6:
ce:aa:c3:f1:27:9b:64:41:4b:b7:99:f8:83:c4:8c:
98:f1:a0:5d:7a:61:00:1d:c6:b4:ed:0d:60:4a:58:
3f:58:b2:34:bc:4b:49:74:4e:af:60:fa:10:26:52:
1d:c9:71:ff:bc:88:59:02:40:f1:a6:cf:51:21:90:
e1:be:69:41:47:4e:50:d0:7a:ee:12:f8:80:fa:d9:
50:7b:93:14:f5:46:6e:12:b6:0c:93:5d:27:22:92:
69:de:07:5d:a7:21:05:ed:05:26:04:a4:f3:0d:bd:
cd:3b:f3:4f:50:11:e4:63:16:04:7f:28:22:59:83:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:E7:61:79:DE:11:F1:A0:D4:E4:7F:53:9A:69:11:3D:84:F2:73
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:42:a8:b9:ed:51:15:30:62:6b:24:fd:ff:f3:f0:1e:00:af:
fc:08:97:50:f4:ac:7d:92:19:39:09:85:67:2a:b1:ee:9d:77:
58:e2:e4:d1:5c:b3:05:3c:2d:7f:47:71:97:e5:19:40:08:c9:
00:43:ca:d3:e6:70:bb:82:1d:f9:ff:6d:21:1d:1f:0b:e8:98:
b0:37:b4:ff:07:3a:60:13:37:be:e3:b5:67:7c:ec:5c:a1:a7:
12:74:20:86:2e:e4:7e:b0:48:a1:f3:a1:d8:c3:13:5b:33:8c:
c7:48:c2:64:42:1f:4d:73:fa:47:77:c2:19:bb:c4:8b:50:e5:
be:38:80:af:40:c7:19:db:91:fc:f4:47:6a:b7:79:4b:5a:70:
41:30:57:f8:b4:00:5e:e1:73:80:d9:bd:f9:3e:75:ad:4d:b0:
9e:19:49:69:b7:49:f1:5b:92:fd:79:9b:74:54:02:27:f1:c4:
34:cc:0d:d0:bc:b8:ed:07:a8:fe:66:dc:45:ad:a1:bd:40:4a:
c1:5a:ac:28:f5:f3:4b:b4:3c:62:33:14:21:5f:1d:80:4a:b8:
b3:5d:d7:5b:32:d2:1d:76:56:43:de:c6:43:87:0f:8a:4a:dd:
ea:c6:c4:4f:29:43:1a:03:3c:0a:09:4f:12:02:a7:9b:b5:f8:
2b:df:4f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:47 2025 by rpki-client