Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: +Ak4Ton/9GXDNlRvxwRq74pWQyuostSPFEkI+0TB70A=
Subject key identifier: B9:2C:2F:59:84:9E:79:1F:93:2F:4D:4A:F6:97:1F:EC:34:A4:AC:02
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 019A4E500DD2BDF2C1CA3D4DFCAACC26D8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:01:00 +0000
Manifest this update: Tue 04 Nov 2025 10:01:00 +0000
Manifest next update: Wed 05 Nov 2025 10:01:00 +0000
Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: b09HKc1hajO3L5iNquy5u0rA9CPpX+1KNJRautu/TPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:0d:d2:bd:f2:c1:ca:3d:4d:fc:aa:cc:26:d8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Nov 4 10:01:00 2025 GMT
Not After : Nov 5 10:01:00 2025 GMT
Subject: CN=b92c2f59849e791f932f4d4af6971fec34a4ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:cb:a8:0f:ed:71:4d:1f:5d:20:9a:66:cf:
11:f9:57:4f:32:ff:34:b6:ac:f6:e6:7e:74:a3:6d:
f1:aa:b9:d8:69:0e:71:f7:27:8b:91:cd:93:b8:e2:
db:4e:7a:9c:84:cd:a2:84:54:68:37:b0:1e:d5:f7:
e4:d7:5b:b6:e0:7e:bd:44:10:68:03:61:ee:8d:ea:
93:77:0c:ac:b3:40:d0:cd:8a:7e:d2:64:87:dd:7d:
93:16:be:1a:b6:2d:be:aa:ae:58:06:64:d6:94:29:
18:ee:be:4a:04:df:2e:7e:01:45:c2:82:5b:66:99:
9c:27:78:e9:14:a5:a5:dd:49:a6:a9:e0:2c:fc:06:
76:6e:1a:a5:8d:ef:88:10:6d:de:5a:99:f3:8a:71:
e7:7a:9d:84:2c:57:9e:8e:9f:7a:55:21:06:a8:06:
75:fd:d5:55:1a:14:f5:2c:a7:cd:d1:f4:af:44:d1:
ef:c5:36:2a:f9:49:4e:8b:bd:a3:94:2c:ca:de:48:
f8:23:7a:96:54:a1:d7:6e:5c:7f:f9:95:41:68:1f:
b3:61:eb:49:b2:26:c3:0b:7f:a8:1c:eb:48:c0:94:
12:74:bd:3f:3e:d5:2a:80:bc:af:0c:bb:d3:08:e2:
15:c9:10:12:11:a6:bb:1f:91:ae:56:56:55:3f:50:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:2F:59:84:9E:79:1F:93:2F:4D:4A:F6:97:1F:EC:34:A4:AC:02
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a9:e9:2d:21:97:57:31:2e:ca:b9:a2:84:78:bf:18:51:7c:
a9:c0:a5:0d:c8:22:03:20:29:0e:2a:d5:8f:68:f2:13:6c:c5:
89:b2:bf:f2:04:d9:d3:57:95:49:fb:0e:91:9d:54:e9:b3:87:
d0:d4:a8:5a:c8:c0:eb:42:f2:8a:ac:84:86:cc:ff:60:6b:4b:
d1:0e:5a:37:e2:b8:c4:b0:ea:85:7d:ce:92:6d:26:e1:34:b1:
d7:32:c4:51:b8:05:dd:b0:f9:7a:20:2d:56:12:68:8e:bc:af:
74:b8:5e:e6:5c:4f:b4:4a:d0:99:37:d6:ba:59:cc:c1:23:65:
80:f3:1c:c8:b3:3c:e5:71:24:64:67:3d:f3:86:86:4a:cb:f6:
be:b3:01:2c:a2:96:95:f5:d8:e3:a4:3f:26:df:81:5f:3d:67:
02:c3:a4:d2:6d:95:1e:32:83:88:de:cc:e3:2f:b7:23:ac:3d:
da:a0:d7:53:06:35:b5:77:ab:73:8e:4d:84:7a:06:39:a0:77:
22:5f:aa:52:a2:7f:79:63:74:2f:b0:5f:f9:22:d3:ae:20:b6:
7b:d4:3d:ef:3b:96:2d:7c:8f:bc:ab:e8:5e:b2:bd:21:f4:eb:
73:0b:cc:df:a3:25:13:d4:f3:e0:6c:29:84:37:49:bb:3f:2d:
1c:f2:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:24 2025 by rpki-client