Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier: WvpBlDnr+P5KA1IBRBeASyIvuHHPTjC9WRBexCXMtpU=
Subject key identifier: 36:37:84:FF:04:FA:D4:90:AA:6C:A1:BA:CE:B2:0A:69:FC:E0:5E:88
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 019A4E18E473C05568A0934F0348BD533529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:45 +0000
Manifest this update: Tue 04 Nov 2025 09:00:45 +0000
Manifest next update: Wed 05 Nov 2025 09:00:45 +0000
Files and hashes: 1: qKf3kSwed1sQ8jIUt0CVeHwDYyo.roa (hash: JvCwYzHwZc3gc1jfWnqqm/e28zS68AlD89E8H1B2hTo=)
2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: 3r3JoEdMkYwvCDVszqYWIk/d0vrr+lXvyvYE1wkHbMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e4:73:c0:55:68:a0:93:4f:03:48:bd:53:35:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Nov 4 09:00:45 2025 GMT
Not After : Nov 5 09:00:45 2025 GMT
Subject: CN=363784ff04fad490aa6ca1baceb20a69fce05e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:37:6d:b9:6d:5d:f2:de:40:1d:f9:ab:f3:
7c:bf:19:7c:47:2b:72:9f:0e:15:fb:52:03:a7:48:
fa:bb:4a:ec:7e:f4:51:df:9f:b5:a6:40:06:05:6d:
f2:cf:2c:e3:1f:4f:1f:3b:6b:b3:d9:ea:f8:36:24:
d1:b9:07:f4:f3:00:78:49:62:fd:53:c8:de:b1:fb:
12:95:04:7c:b5:41:c1:a4:54:56:6f:fd:b2:de:15:
4b:20:b3:64:de:5f:8a:cf:bc:69:c1:e1:ff:8f:87:
28:6c:c6:1e:2f:bf:21:3e:23:e3:1a:53:ec:63:b3:
08:07:ff:c5:15:05:4f:00:6a:fc:d9:ff:0c:35:b5:
91:fc:97:a8:bc:24:1d:82:a1:b3:1c:02:dc:14:0b:
7a:51:14:13:a4:3b:6f:e9:0d:24:f2:4e:87:ff:4c:
3e:f9:f1:0b:8d:11:e5:4d:e7:f5:a0:84:f6:2a:8d:
8e:83:48:17:bb:1f:e2:0f:5b:a1:73:d4:6b:03:c6:
a3:cc:b9:83:5e:07:ea:ba:23:72:93:f5:d5:20:e2:
e1:cb:1e:b4:2a:47:94:47:9f:ef:ad:16:ea:60:31:
2d:93:46:86:0f:c7:f5:db:36:ee:d1:e5:52:18:24:
79:55:0a:d5:58:74:1a:e2:77:11:21:ab:1c:9f:6f:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:37:84:FF:04:FA:D4:90:AA:6C:A1:BA:CE:B2:0A:69:FC:E0:5E:88
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2b:ad:93:b6:22:68:51:cd:e1:4d:f0:0f:e1:71:ba:ee:bd:
61:9f:c2:17:a0:76:b9:48:3f:cc:3b:d4:f3:c0:50:d5:40:a8:
e1:71:d3:fa:27:26:40:d7:81:ad:c1:f1:28:59:03:56:b0:ad:
8d:36:6a:eb:01:37:c5:1e:8b:8a:1e:e5:65:65:db:64:08:c5:
c8:96:c6:29:78:a8:67:5e:c1:b5:84:5b:16:4a:6b:0e:2b:57:
05:de:27:9d:80:dd:5c:91:1e:5d:94:30:69:98:3f:1f:eb:60:
18:01:0b:14:61:cf:ca:0a:c0:84:3f:26:d3:5d:95:4a:5f:05:
a5:25:ca:47:50:1d:4a:46:90:12:e8:ab:bf:db:b3:b3:86:ff:
5c:0b:19:39:cd:0d:13:9b:30:60:a3:48:de:a9:4d:45:ab:5d:
5e:ed:72:c2:53:bf:1b:40:3e:79:de:98:40:80:15:16:92:4e:
1a:40:e1:8c:dc:9d:1b:32:06:7e:cc:d6:79:3e:f0:0f:a4:70:
ec:ea:c2:59:7b:6a:53:87:0a:8a:59:63:1f:99:1f:d6:94:19:
02:bb:4a:bc:fd:9f:c1:f9:35:73:c5:5b:5c:4d:a1:be:f4:fe:
68:88:d5:67:d6:d5:7c:87:dc:89:ec:cb:fc:6e:62:5d:62:01:
39:f3:fa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:32 2025 by rpki-client