Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier: iYWKXKqC+Gx85LPD5x85I/Ot1IKUHJgI12dwiT3t0Iw=
Subject key identifier: 7A:C2:63:CB:84:49:54:1E:A5:82:98:87:D9:AB:FC:BE:69:E2:21:E2
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial: 019A4D73F5FBCCB070C5E7F9230EFA1867FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:36 +0000
Manifest this update: Tue 04 Nov 2025 06:00:36 +0000
Manifest next update: Wed 05 Nov 2025 06:00:36 +0000
Files and hashes: 1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: ILBrwgJLp1lXI+7CsXvyyiF7Z8s9hxK9LmfY5ZQeVvs=)
2: sndMGN9hrwytu8M86g8e17_E-wk.roa (hash: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f5:fb:cc:b0:70:c5:e7:f9:23:0e:fa:18:67:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Validity
Not Before: Nov 4 06:00:36 2025 GMT
Not After : Nov 5 06:00:36 2025 GMT
Subject: CN=7ac263cb8449541ea5829887d9abfcbe69e221e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:fa:6c:5b:3e:8e:4c:67:ab:9e:e1:12:a3:
8f:c7:0b:41:3a:01:5a:21:7c:53:60:3d:8e:81:1a:
f4:60:86:00:87:8f:c5:a5:5b:71:ef:55:28:22:34:
94:f2:0c:97:5d:f1:4a:28:d3:82:87:5a:1d:13:ed:
ef:9e:3e:56:e0:d8:64:59:e1:72:f8:8e:ec:bd:87:
fb:9f:1a:95:01:24:67:be:40:8d:bb:79:5d:4e:6c:
1c:69:cd:3e:8f:ac:af:86:b9:04:75:a2:f7:a2:a9:
fc:d7:39:2d:7a:89:6d:8a:fb:8e:55:70:86:56:58:
b9:f1:e2:d5:be:f9:0a:f7:b4:28:1d:32:14:f6:71:
5d:0a:74:2f:c2:59:b4:ce:75:c3:23:6a:c3:79:0d:
5b:89:8e:41:eb:e8:5e:94:09:f3:00:4d:bd:b2:d9:
41:48:05:08:9b:f3:03:90:9e:67:5b:c7:e3:e5:fe:
a5:4a:4d:07:89:56:cf:43:65:58:72:f3:e7:08:e0:
9b:9a:ed:ca:cd:ba:e4:1a:72:92:91:2a:af:56:a4:
01:0b:a9:e7:88:60:fd:1a:91:13:d8:eb:9a:33:17:
12:7e:b2:05:92:ed:0c:fb:cf:ba:db:82:69:a7:fb:
9a:89:f8:8f:84:a4:bb:94:ea:a3:f1:d9:3a:2f:bb:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C2:63:CB:84:49:54:1E:A5:82:98:87:D9:AB:FC:BE:69:E2:21:E2
X509v3 Authority Key Identifier:
keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:47:79:7e:47:dd:82:e6:c4:1b:f9:30:8f:81:84:9b:e4:86:
2e:bb:8b:48:81:eb:a1:88:d7:56:1e:a2:55:7c:a4:e8:38:b2:
c5:77:88:9a:f7:c5:72:40:7f:78:04:f9:1a:0e:ae:f0:bd:a7:
07:62:cd:7f:03:88:97:e5:0a:98:73:ed:08:43:3c:7e:f1:b1:
f6:c1:4a:21:d2:44:cc:6c:e4:30:4d:63:1b:4a:2d:03:09:b2:
b6:1b:93:3a:8d:36:4e:e3:0d:f0:fa:dc:bf:d3:f5:9d:a5:b0:
00:c9:53:5b:44:42:88:d4:67:b9:40:08:4d:a5:d3:46:dd:37:
74:be:00:46:74:72:bd:8c:1e:b9:4e:09:a6:27:bf:68:73:68:
54:e5:63:bc:10:6d:a1:4a:b4:f9:1e:38:25:63:1f:77:68:f6:
f4:97:d0:3b:eb:1a:9f:3a:e7:e4:9d:68:d7:65:f3:15:e7:f5:
8a:9e:81:31:73:91:5e:a2:cc:e1:85:94:e9:b7:9b:fd:e4:d8:
20:f1:8f:5f:76:e3:cf:59:97:6f:4f:fc:06:1f:62:f2:ba:81:
15:4c:38:c5:59:5e:22:a6:6d:42:e7:4c:32:84:47:e5:a9:06:
2d:e3:c8:55:87:3d:61:f5:6e:41:83:0d:42:b9:f5:e4:3a:d6:
01:57:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:15 2025 by rpki-client