Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
File: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft (raw, json)
Hash identifier: tCJq1n/m10TnQmJFEEhYdXzomar8O0lq8s4ZPmfF14k=
Subject key identifier: 17:54:42:A9:36:B5:B3:CB:D7:40:7E:DE:CB:71:CB:5D:2D:58:21:68
Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
Certificate issuer: /CN=ac328756dece8f29f97f41b81a087db524e159b7
Certificate serial: 019A4D3D112F2DD83FA1FE85B7600F761D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
Manifest number: 1357
Signing time: Tue 04 Nov 2025 05:00:39 +0000
Manifest this update: Tue 04 Nov 2025 05:00:39 +0000
Manifest next update: Wed 05 Nov 2025 05:00:39 +0000
Files and hashes: 1: KhThgn0FLgtxgLmV5WuQd88UjJs.roa (hash: UVyvP36EKpZylxYZtY94LC7cB1Xoy48Pim7visCwDUs=)
2: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl (hash: 1M5we6nQg76sF/62KO7aOQCVLhy6ggH1Ws9v19jNqK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:11:2f:2d:d8:3f:a1:fe:85:b7:60:0f:76:1d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7
Validity
Not Before: Nov 4 05:00:39 2025 GMT
Not After : Nov 5 05:00:39 2025 GMT
Subject: CN=175442a936b5b3cbd7407edecb71cb5d2d582168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f5:3e:3c:d9:1a:ca:ff:dd:48:8a:70:ce:ab:
63:37:f3:e0:ad:f3:79:e1:c4:81:a9:0a:2b:af:f8:
f4:dd:bd:e9:67:da:d1:fb:d2:af:3a:98:1b:a2:42:
fc:69:b7:86:29:6a:f5:f7:9f:24:03:ff:ef:4b:ef:
56:2a:01:f0:bb:e5:07:b7:c5:c9:76:03:ad:51:ce:
86:2e:63:48:b8:ce:c3:89:93:04:e0:1b:ce:6c:f8:
ef:c7:e8:21:93:24:1b:72:4a:d9:9c:b4:fc:a2:23:
01:68:94:fc:46:f9:5e:01:28:1f:43:a6:19:e3:bf:
0b:30:6d:6c:61:69:3a:2b:69:12:89:45:a6:89:78:
8a:9d:cb:29:50:37:81:97:60:07:e0:48:39:73:77:
7b:14:44:7e:ac:7e:c7:fe:23:ab:43:a1:27:88:ce:
f6:93:c2:80:56:0a:20:04:88:04:69:43:d9:95:30:
9c:65:9b:61:35:ea:e6:83:14:e6:d7:8d:67:86:87:
6a:2f:aa:ef:8f:8d:95:19:07:89:6d:cd:c8:a9:80:
69:bc:c8:dc:6f:46:49:2f:cd:21:97:55:7d:1a:71:
9d:4d:7b:84:63:b8:a3:48:16:96:d6:02:0c:3a:6c:
0e:6b:51:60:2c:e4:00:11:56:5e:e9:65:15:ca:55:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:42:A9:36:B5:B3:CB:D7:40:7E:DE:CB:71:CB:5D:2D:58:21:68
X509v3 Authority Key Identifier:
keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:88:ba:cf:1c:f5:86:39:6c:70:aa:6d:9b:6d:ea:5a:d0:a8:
e9:93:3f:84:02:33:2c:ae:d6:f6:41:92:e0:8c:cb:14:d8:29:
bf:28:c8:36:e1:9b:50:21:7a:70:62:02:cf:89:c4:87:d2:c8:
f5:3f:ec:5a:90:2f:bc:5c:b5:b1:3e:66:e2:8c:4c:8e:87:99:
4a:6f:d9:02:39:4e:34:4f:15:6f:f6:e0:a7:de:da:bc:ca:00:
b7:e9:9f:ba:3b:b3:87:23:42:dc:9c:90:53:bf:4b:db:2b:ff:
ad:78:1e:97:70:ec:91:57:29:5b:25:de:d8:88:46:35:a6:9a:
a5:58:51:a1:55:5f:67:ca:a2:bc:9c:0d:be:65:97:50:e7:bb:
ef:b4:c9:fa:a0:a2:12:c8:00:e5:3e:10:c4:f8:0b:46:6f:4e:
56:d4:97:c1:18:a9:82:11:6c:8f:95:c0:a2:82:38:23:8a:fe:
1a:e0:ac:b9:95:0d:2a:5b:fb:42:e8:21:9f:8a:91:5f:cf:ed:
9a:0b:98:4f:f7:62:e8:fe:43:0a:f5:c0:ce:7f:69:b1:69:2e:
3a:da:0e:62:fb:a6:fb:a3:a7:43:67:50:a1:3d:03:eb:6f:9f:
c9:3b:0a:ae:31:ef:27:ac:59:13:b2:52:a7:a3:8c:76:82:16:
af:92:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:26 2025 by rpki-client