Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: FcP4BunuKqfMUcyJuxc3PvUxe7XfYn2iNhMOmkT55FY=
Subject key identifier: 20:53:CA:82:DD:07:F5:22:45:DA:C1:4D:92:8B:E6:8C:7C:29:CA:A7
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 019A4D745F75024E43C021DE92D1525E5B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:01:03 +0000
Manifest this update: Tue 04 Nov 2025 06:01:03 +0000
Manifest next update: Wed 05 Nov 2025 06:01:03 +0000
Files and hashes: 1: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (hash: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: 6VSUUZQOQ2f9EJSeJASjxs/woRXOYXtUXTH8PfRnCoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:5f:75:02:4e:43:c0:21:de:92:d1:52:5e:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Nov 4 06:01:03 2025 GMT
Not After : Nov 5 06:01:03 2025 GMT
Subject: CN=2053ca82dd07f52245dac14d928be68c7c29caa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:fe:34:ab:3b:68:56:63:90:ec:a3:3c:db:
1a:c6:89:d8:2c:80:dd:bb:25:d0:03:89:2d:83:13:
97:d0:48:c0:2a:79:60:7d:9b:5c:d1:f6:b2:d1:75:
53:e7:dd:3e:c2:0d:be:7a:ba:24:99:54:46:d2:09:
d5:cd:4b:04:47:55:04:c9:08:50:4c:d5:ec:17:58:
c7:6f:7b:a2:e4:d6:e4:a2:72:2c:59:cd:1f:d7:a4:
04:18:b5:3c:9d:fb:6a:08:a7:4a:a2:4a:1c:31:76:
b2:c9:b6:87:ab:01:5c:4e:fb:78:68:9a:18:58:53:
a2:e6:17:2c:21:f1:27:a4:aa:5b:ca:9c:5e:33:b0:
1c:e1:c3:6e:66:09:2e:c6:9d:b3:8e:ac:9a:e0:6a:
38:14:c6:e8:05:ff:69:b6:ba:d0:da:65:3f:fe:9d:
e6:78:b0:4f:a7:68:ea:01:88:b9:28:fe:d3:43:49:
4b:0e:82:4a:8d:ec:f7:f8:93:45:47:d2:a4:3e:24:
82:f0:49:7d:94:49:8e:8e:4f:be:8a:f6:eb:e5:38:
49:cd:74:7a:37:63:17:5b:c9:4a:f7:98:93:43:38:
82:31:b7:08:55:bc:84:af:d3:0e:bd:16:bb:38:7a:
23:32:da:fa:b3:50:53:01:2f:85:62:5f:60:0a:1f:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:53:CA:82:DD:07:F5:22:45:DA:C1:4D:92:8B:E6:8C:7C:29:CA:A7
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b4:0e:bb:f2:ad:57:df:08:30:5e:24:37:23:d3:18:77:70:
cd:81:e6:b7:12:c2:57:91:ee:4b:40:22:5e:c8:63:ea:72:27:
6b:95:7d:ad:44:51:ea:09:70:7b:e9:72:8d:ab:57:0b:d6:14:
51:23:0e:2c:51:43:e4:85:c3:c2:31:4a:6e:c9:06:7f:70:44:
ba:7c:02:90:1a:40:9b:4c:34:ea:07:aa:68:db:81:e0:1c:e2:
18:03:23:e2:f3:b7:12:bf:7a:85:69:df:7c:d1:5f:20:be:0d:
35:57:97:0f:15:7f:34:c8:44:d4:2f:cb:09:af:b4:dd:07:ea:
a0:ba:64:90:76:62:c1:48:e5:e0:f3:ac:a9:4b:d9:55:7a:9f:
cc:6c:2c:f4:1a:31:b8:ff:82:ab:fd:22:ea:5e:93:bc:1a:7d:
28:d6:f9:17:a5:b0:56:93:8a:c3:4e:a2:8a:b1:d5:9d:cf:c1:
1b:b7:65:74:39:a1:aa:86:df:f2:23:85:f5:99:fb:4c:ce:cc:
bb:c1:5c:f4:52:04:21:47:5e:d7:09:7a:15:65:ee:e2:0f:d5:
fb:cb:e5:31:bc:6e:68:1b:6a:c2:df:fe:47:11:ff:48:e7:f6:
a9:dd:b9:c2:2c:f1:62:75:56:2f:c7:ce:44:ef:45:8a:2f:e7:
4c:cc:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:25 2025 by rpki-client