Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: lTjy9AM9tLIDDgSZKbhaimCYhWPlVuzoFq1cZdFBOcg=
Subject key identifier: 33:56:95:BA:E4:3B:08:4F:BD:AE:89:74:81:33:9F:E0:B4:2F:8C:82
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019A4D3CDD4FB11329864FED3A523E240A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 11B0
Signing time: Tue 04 Nov 2025 05:00:25 +0000
Manifest this update: Tue 04 Nov 2025 05:00:25 +0000
Manifest next update: Wed 05 Nov 2025 05:00:25 +0000
Files and hashes: 1: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (hash: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=)
2: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: O3Pi0ju5uoQ/AeliFGiRaKmoMD/lbofH+EH6g6KK84Y=)
3: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (hash: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:dd:4f:b1:13:29:86:4f:ed:3a:52:3e:24:0a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Nov 4 05:00:25 2025 GMT
Not After : Nov 5 05:00:25 2025 GMT
Subject: CN=335695bae43b084fbdae897481339fe0b42f8c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:2a:9b:60:7a:02:08:e5:71:c9:2b:9f:b2:
84:cd:02:a5:8a:af:1f:fc:ca:57:b9:fa:6b:99:cc:
2a:ec:30:4c:5e:64:9b:f2:3e:52:77:e4:da:c0:3e:
89:be:57:b5:9f:15:a9:df:77:18:5f:31:e2:21:f6:
a1:f6:00:d3:c8:fc:54:92:18:95:87:8e:b5:4c:7e:
90:5c:ba:53:3c:37:f4:01:92:d2:db:4b:d5:27:6c:
5b:12:c9:1b:18:01:78:46:2e:a0:b5:7c:35:94:b9:
53:f7:b3:85:b8:e5:9d:1d:59:68:32:0d:9b:07:15:
ac:fa:8c:16:4e:62:a0:d6:9e:3b:cd:5a:60:d8:bf:
18:60:19:a3:c0:db:9a:9a:a4:b8:9f:6d:fb:be:6a:
1b:82:02:6a:37:4c:d2:70:fb:73:a0:ad:1f:49:f9:
17:57:db:ec:22:a6:dd:22:dd:34:41:cf:8c:dc:de:
03:3b:52:03:5f:05:9d:47:69:70:c0:37:04:3d:37:
19:14:50:59:31:80:ff:cf:48:cc:2c:3d:fd:bc:b9:
de:f4:51:5d:30:71:48:32:f3:c0:3c:61:60:98:7c:
38:93:60:3c:d3:61:53:b0:1e:72:8c:a6:3c:19:08:
ff:23:f2:32:05:43:20:3e:ed:b5:29:9e:26:1f:81:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:95:BA:E4:3B:08:4F:BD:AE:89:74:81:33:9F:E0:B4:2F:8C:82
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bc:a3:1c:bf:c3:68:3e:ad:4c:5b:eb:b1:3b:66:9a:49:ab:
41:a4:51:bd:ae:89:77:4c:e7:d1:fd:2a:e6:ec:50:19:03:ac:
aa:61:74:d7:b9:23:30:bb:5a:99:8f:a6:22:8b:de:66:e5:4f:
b1:82:04:82:51:4a:e7:64:aa:83:24:41:43:b0:80:d4:d7:35:
22:fd:67:fc:68:b7:b3:8d:b0:a7:05:11:6d:a8:95:71:9b:0e:
d6:89:2c:62:46:0e:58:f6:ba:87:d1:55:b9:33:98:ce:0e:ea:
dd:ab:16:9a:68:81:b1:a0:53:34:02:3f:42:75:dc:e7:7e:74:
21:65:62:a3:54:d1:8e:58:f9:59:d4:5a:5f:bf:19:29:8e:de:
2e:cc:49:8a:56:1d:0f:8c:78:52:01:c3:2f:73:29:4d:e3:96:
80:a8:0b:6a:4d:a5:fa:97:8d:2d:8d:c1:cf:d2:37:42:df:c8:
7b:fa:da:4d:76:fc:11:d8:bc:3d:e0:bb:a6:a7:e4:88:bc:19:
79:92:ce:4c:61:17:93:c0:80:bb:d0:5c:51:88:7d:e6:2a:93:
3b:73:22:e4:e0:53:0e:e8:33:1e:af:f7:b0:a9:2e:08:dc:3b:
d4:45:55:02:fe:7d:ce:30:c6:0e:8d:71:60:62:27:8d:82:dd:
19:dc:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:46 2025 by rpki-client