Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File: p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier: rZBXJPDtXjCM1H/Rvc1RQcDyvfSq30ErT7stkQk+PLw=
Subject key identifier: 11:28:5F:56:6C:21:FC:95:6D:31:C7:A1:94:A5:CE:55:D0:EB:C2:64
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 019A4E8651D80BA5C75EB290C54EA23FC6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:16 +0000
Manifest this update: Tue 04 Nov 2025 11:00:16 +0000
Manifest next update: Wed 05 Nov 2025 11:00:16 +0000
Files and hashes: 1: Wh_K5Ot0PdOltJAZbDMBxaT8CJw.roa (hash: VIjWDHn3J2RwnBzOCzHWLW6nGxWdyzjrSq+KdnZiOMU=)
2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: DrIVTC4rcNSiJPAXtdnIabhgzbAcY1xQmk7xiZPnR7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:51:d8:0b:a5:c7:5e:b2:90:c5:4e:a2:3f:c6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Nov 4 11:00:16 2025 GMT
Not After : Nov 5 11:00:16 2025 GMT
Subject: CN=11285f566c21fc956d31c7a194a5ce55d0ebc264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:c9:0f:72:46:86:ec:67:c8:3d:f6:c9:41:
20:b9:d5:a8:2c:f4:f4:30:5e:28:a0:c0:75:f2:97:
f9:32:93:ee:67:00:49:01:7b:97:82:6f:9d:09:2b:
9e:f3:c4:9c:29:c0:5c:f3:86:91:ea:f2:51:2e:50:
2a:db:5f:a0:ca:41:41:40:ed:a8:11:9a:ad:f2:98:
7d:b0:c4:a7:f4:6c:96:8d:84:9e:76:79:1f:f0:42:
06:e1:64:d8:ab:d6:2b:9d:84:05:a1:36:87:e8:7e:
fd:42:82:f7:a7:64:3d:de:ab:65:48:a8:1d:cb:6c:
77:3b:bb:c1:5c:43:a5:d1:a0:b3:42:ec:44:50:8b:
a8:67:ba:55:99:94:b3:3d:40:e9:30:25:c6:29:de:
b1:39:04:35:cc:69:a3:5f:86:a9:99:55:3c:1f:9c:
41:f5:b7:b4:20:97:f7:49:bb:74:f2:0d:31:95:f8:
7e:09:0d:0d:2a:c7:55:f2:3a:c7:16:c7:6f:37:0c:
74:ec:76:8e:16:f2:fb:64:15:54:1d:c1:1c:c8:91:
17:ae:76:37:5b:3f:ea:95:12:c2:c3:bd:f6:f7:95:
c2:85:8d:33:e3:e7:04:82:de:c9:52:5d:2f:43:1a:
9a:96:e8:ca:98:09:61:2a:da:12:bd:4e:c0:9e:17:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:28:5F:56:6C:21:FC:95:6D:31:C7:A1:94:A5:CE:55:D0:EB:C2:64
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cc:e0:7a:87:03:1c:fa:3a:45:68:2b:c8:0b:df:bb:97:61:
03:26:b2:5b:39:03:78:4f:78:73:ed:cf:cc:f4:2c:83:be:17:
0d:0f:ac:49:67:fb:7a:55:c8:50:a9:7b:7e:98:81:04:42:df:
77:92:34:fd:1c:b3:d2:61:36:69:9d:b1:12:67:d5:f4:1f:b5:
f1:ba:8f:75:d2:21:0a:ea:2b:14:51:a6:f0:3c:3c:e6:2c:ce:
f1:97:58:0d:21:23:eb:93:3f:0a:00:45:70:88:77:6f:96:b1:
e1:a7:d6:84:ee:65:b2:db:f6:8e:f6:35:02:34:09:9e:c9:cc:
07:3b:8b:e7:a5:85:7a:14:59:7b:a1:a8:7a:bc:07:13:a8:a9:
30:46:b4:2b:38:f0:69:43:d6:4e:ad:a5:2b:88:da:c5:73:82:
0e:10:0d:36:2c:9f:1a:83:39:fe:14:1a:a5:ce:4f:25:c6:2d:
95:8b:33:05:4a:83:fe:f0:73:3c:af:38:e2:49:e7:6f:52:d5:
43:38:dd:f2:8a:84:68:62:4f:5a:7d:ef:3e:83:81:28:27:f9:
4c:98:1a:18:07:71:50:4d:ef:c7:e9:15:87:9e:ef:88:ad:03:
af:21:5a:c2:89:da:76:23:24:91:81:18:ec:d8:99:7a:07:89:
48:67:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:49 2025 by rpki-client