Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: Xdc0F8rgJ7VXn3jh2D3thHW2biHI8QRlFFhhfLlYRoU=
Subject key identifier: B1:FF:CB:05:DD:BA:73:D0:04:63:C6:C7:DA:EC:76:5C:8D:A9:AE:56
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 019A515071D59CAF609AD9F52E5B7018FB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 0DBE
Signing time: Wed 05 Nov 2025 00:00:17 +0000
Manifest this update: Wed 05 Nov 2025 00:00:17 +0000
Manifest next update: Thu 06 Nov 2025 00:00:17 +0000
Files and hashes: 1: 8LrCpJVZw00cB6v7Jxmu5danMVM.roa (hash: LkYRg4fRX+WYVMtQ+HSrUSifp72hGXmKbB4Mx1yLYEo=)
2: COurHBmKxKzA2XaP35V0TKv22j8.roa (hash: mOJRDgA4eGDtP6pug7iu4FVIpAjMDZJckmCB6cKfpOc=)
3: EEy6gJAmhpmEpToeahyxI211nao.roa (hash: bt34cvtSMhR5oe2u5pXbiTmmRNH/yvwh2lEhx2KoETw=)
4: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: V4GpFqzDj2LRA4TA2K2CYg+HQ5k4RqcVe5OIwwDCif4=)
5: is_2p9c72i9SqdHOdQECHoEj2KI.roa (hash: 68Pbkuya3pT0PDgvbPhuXTcECYTodGaR9wl/fj5QS8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:71:d5:9c:af:60:9a:d9:f5:2e:5b:70:18:fb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Nov 5 00:00:17 2025 GMT
Not After : Nov 6 00:00:17 2025 GMT
Subject: CN=b1ffcb05ddba73d00463c6c7daec765c8da9ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:0b:bd:77:da:9c:c8:82:38:f1:11:04:f8:
92:93:46:3c:c3:14:3e:77:f7:98:48:fc:71:bb:fd:
e4:6d:2f:f9:c7:b5:b4:48:95:84:dd:33:ce:07:b2:
93:0b:32:76:e9:17:db:29:83:4f:5e:4b:ed:35:26:
b7:20:07:4b:34:3a:d1:24:2f:01:b2:7b:29:fc:b7:
6f:ab:71:9e:26:38:80:b3:12:1f:52:bd:d9:78:1f:
d0:7e:21:f8:63:e9:e5:aa:18:e2:cf:d8:e4:0d:ab:
9c:9f:ce:6c:05:32:fc:03:7b:c4:ac:4a:25:94:76:
aa:c9:4f:f2:cf:1c:8a:05:cf:2d:58:cf:7d:5d:03:
8b:73:00:d8:47:59:3b:70:22:81:bf:c1:bb:43:0f:
eb:a5:d7:c0:49:c1:57:64:2a:e4:fe:35:30:b0:44:
a9:90:2c:38:cc:0c:dd:1e:0b:37:de:c9:fe:9a:5b:
c8:a3:ff:76:2c:94:f5:81:c9:16:02:a7:56:ae:ba:
99:24:54:ef:25:10:14:ae:d3:61:18:8d:a2:f1:a6:
75:b8:a3:2e:cc:67:c4:40:64:d2:8b:f7:13:01:9e:
a2:ed:72:27:66:10:2a:fa:21:06:61:04:fb:40:6a:
8f:10:6c:d3:1a:c1:44:75:3a:d4:b5:ce:8d:d2:81:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FF:CB:05:DD:BA:73:D0:04:63:C6:C7:DA:EC:76:5C:8D:A9:AE:56
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9a:e8:81:66:fa:5f:08:3f:01:cb:3c:39:e2:83:e7:6a:3f:
69:d5:ea:af:5b:fd:9a:cc:fd:14:ab:0d:16:92:67:82:e8:b0:
45:a8:0e:ea:2c:82:84:08:21:1e:5d:b5:6d:02:5d:76:bb:10:
d6:1b:b4:b8:44:6d:97:b3:27:80:2a:06:2b:b1:07:b5:b8:72:
2d:88:06:ca:21:89:2e:e2:55:76:5b:15:bc:88:0a:2d:57:ef:
df:ec:ae:6c:e8:d4:66:ac:9f:13:35:30:47:35:48:84:a2:49:
12:ec:dd:a6:79:f2:b4:76:c8:11:c1:e8:88:09:02:59:5f:5f:
4e:0d:ed:00:4f:a1:e1:10:3c:60:d3:2f:39:a6:17:05:f8:8f:
4f:47:f0:83:69:ef:fe:a8:da:1c:84:37:3a:ec:b1:31:dc:5f:
d6:eb:c3:bc:3e:4e:b2:d2:15:7a:1b:3b:d9:b8:d3:8a:c0:48:
b9:7e:6a:92:db:bb:fb:df:12:f2:f3:e7:80:66:b4:07:5d:e0:
6f:5c:10:e0:51:8b:85:5d:e2:72:18:06:ab:c3:0e:a0:9b:d6:
f2:0c:92:10:da:a6:be:65:a3:79:d9:c3:c6:a4:63:28:17:4e:
4e:e9:2f:18:55:aa:30:fe:c3:b9:d0:74:51:4f:7d:ae:07:d8:
32:35:f8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:48 2025 by rpki-client