Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: 5YXfiMQEpBLJOYU/7ZzPH8doRqHvakTtDLk/snpIttY=
Subject key identifier: 3F:43:BC:DF:E5:14:60:DC:D9:FF:73:2E:ED:89:32:2D:91:6D:D1:3A
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 019A4E18E845E203D448556278B827021BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: DSGr7vWxyL34P8afZkFepgW4aHQhhkTyFSeVgYN9HIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e8:45:e2:03:d4:48:55:62:78:b8:27:02:1b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=3f43bcdfe51460dcd9ff732eed89322d916dd13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:b4:2f:78:2a:53:dc:7f:2a:40:9b:64:fa:
a1:03:7c:93:18:42:af:aa:bf:db:3b:7e:46:cb:60:
ed:34:57:44:ce:9b:32:2b:5c:a2:c9:3f:7c:e4:7d:
ef:63:e3:a4:64:b9:48:48:79:5a:f8:9f:44:a7:32:
c5:a9:a5:ce:8e:86:7c:98:d0:a4:7c:ee:e8:b5:15:
08:5f:71:d1:5d:f2:dc:c2:ea:a6:89:11:a7:70:5e:
98:23:8b:3a:8f:30:c8:9d:76:80:f9:b1:b2:1c:36:
a9:75:f7:c1:97:c4:0c:07:13:4b:ac:e2:0e:d8:a7:
a8:e3:02:6f:d4:88:e9:22:4b:65:ed:8e:3e:3f:a1:
bd:9a:42:3f:8d:b3:8d:fd:42:e0:ac:30:c9:d1:b2:
51:85:ca:b7:73:da:5f:16:51:ef:16:fc:a9:64:95:
a9:6a:39:ec:e9:bd:17:9d:c1:b3:e8:c0:fb:35:12:
17:77:13:fe:38:df:d8:7f:24:a1:cf:bd:48:d9:2a:
b7:39:58:d6:b9:0c:a3:2c:76:57:e1:79:4f:ec:9f:
f9:65:4e:c0:3c:37:9b:ca:d4:0e:db:f4:f2:7c:cf:
c8:88:fa:19:72:03:d8:6c:4f:0a:53:10:a1:f0:28:
a7:0b:10:f7:21:2f:9b:1b:0a:92:88:6a:29:8f:36:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:43:BC:DF:E5:14:60:DC:D9:FF:73:2E:ED:89:32:2D:91:6D:D1:3A
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:18:49:ab:78:88:16:ba:4f:18:93:42:d7:f5:d1:ca:4d:60:
13:1e:6e:f5:7e:27:7a:ee:f3:20:dd:1d:67:15:6f:59:a4:eb:
c1:be:41:cd:26:04:2c:52:a3:f1:7a:1e:c9:22:1e:12:66:66:
27:cc:80:c7:f8:a7:c8:5f:4a:60:4d:42:47:51:04:35:5a:96:
62:10:2c:68:8e:e1:59:42:84:11:d7:1b:50:19:c8:a7:6e:64:
0f:e0:e1:04:45:96:00:3c:a4:de:8c:26:18:1c:9d:cc:9b:be:
0c:1b:a6:6d:91:47:b6:3b:32:10:0a:02:a9:4d:99:ef:61:76:
a1:86:f4:5a:83:93:1b:a0:3f:58:51:bd:58:1f:5a:cd:ea:3e:
14:1a:a2:3c:e1:20:80:5d:e2:7d:88:bf:31:45:40:f2:a1:a0:
cb:d6:38:78:11:07:62:30:f1:a5:93:9e:ed:9b:5c:bd:fd:51:
64:18:77:d1:a8:da:0f:17:fd:6b:40:19:10:0d:87:2b:de:2b:
b4:82:61:4a:d4:1f:ec:68:92:ab:ab:74:94:74:e4:79:93:d9:
88:55:6d:b1:ab:44:28:52:6f:f9:60:b5:ab:43:55:fb:35:4e:
1a:b5:f7:4f:38:3e:b7:71:25:a4:d8:36:08:71:4b:89:78:6a:
11:34:15:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:47 2025 by rpki-client