Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: 9YbAYeqkZ/Wy5f5zzNJT+kN09NkwS4rRa9yzLlKPJGg=
Subject key identifier: 32:EC:13:06:9B:21:05:B3:74:9E:FD:13:9F:C5:03:90:CC:CF:38:D8
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 019A51BE43CEDD96EF4A36F2BB5CD6BE5A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 1433
Signing time: Wed 05 Nov 2025 02:00:14 +0000
Manifest this update: Wed 05 Nov 2025 02:00:14 +0000
Manifest next update: Thu 06 Nov 2025 02:00:14 +0000
Files and hashes: 1: BIbyN6MobH1STyCEPdXKcXxO-0I.roa (hash: Os4l0m9oxr0hmnuszsL7ZwnRaiayTTQWv9r3AFurnXg=)
2: Bbz0bBQb7OvBUdzdUU2fR0aTHW0.roa (hash: oXnG95uJE4GWCusPMitN/8TOoOTM8j2qb4pX4QMQ5u0=)
3: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (hash: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=)
4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: bTpK+QwJyO5wAx1je+NjW4D58wxmnkSNCz6hfS67+oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:43:ce:dd:96:ef:4a:36:f2:bb:5c:d6:be:5a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Nov 5 02:00:14 2025 GMT
Not After : Nov 6 02:00:14 2025 GMT
Subject: CN=32ec13069b2105b3749efd139fc50390cccf38d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:70:dd:65:48:91:65:5e:37:9a:55:0c:bc:
be:10:d7:d9:f1:08:72:4f:78:94:f6:5d:74:45:25:
fb:bb:78:07:f5:c3:6d:20:da:a5:1a:bc:ec:c2:43:
7d:be:ff:59:db:03:1e:e8:6f:32:f7:66:9f:41:e4:
a7:8f:e8:b0:cb:39:f4:c2:23:e0:83:ef:59:c2:85:
66:d6:3e:9c:0c:c0:f3:82:5d:df:82:3d:b1:15:0e:
96:37:da:4a:17:48:27:08:0f:05:4a:92:66:28:ae:
77:64:d0:94:98:8f:43:05:02:80:ea:da:85:49:db:
ea:1c:27:13:53:cd:20:27:4e:98:1c:e3:52:82:ba:
a5:4f:fe:55:7b:d0:41:75:85:b3:3e:ab:a6:e6:97:
9e:68:63:0c:56:8e:39:63:e0:96:8d:1a:c5:6c:96:
d7:8b:70:6b:65:18:d0:6d:80:20:f0:e4:cb:2b:e6:
eb:13:2e:53:91:80:44:a8:bd:1b:9a:0b:76:60:5e:
41:dc:22:86:f3:2d:fa:9d:42:ce:ca:d8:f3:a7:07:
7f:9b:d8:ff:2d:a9:5f:98:df:94:3c:ff:90:b9:dd:
85:13:23:f3:d6:68:e3:23:5a:59:09:f2:d1:b7:cd:
b4:ee:c7:4b:61:be:7c:a2:ae:67:eb:20:0f:75:ce:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:13:06:9B:21:05:B3:74:9E:FD:13:9F:C5:03:90:CC:CF:38:D8
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e0:08:34:51:97:73:f3:bc:a3:3c:5d:27:24:81:67:8c:d0:
3f:8e:38:99:e4:6b:86:15:38:ae:f9:77:42:f2:8d:33:bd:7a:
aa:7c:1f:6b:24:fa:c9:73:9e:3a:50:12:15:0b:cd:88:31:c3:
d9:58:f0:21:a1:3b:21:30:69:f3:86:43:03:b1:a2:68:e2:47:
94:be:bb:96:2b:bb:bd:68:5f:46:24:6a:ce:f0:93:b3:74:d8:
37:99:01:08:10:9a:38:12:71:d5:e1:78:ab:29:0a:43:19:2e:
ea:09:56:28:a3:38:15:31:3f:f0:e0:d6:ef:ac:07:91:1e:55:
6d:a2:20:38:0c:00:1a:8b:e2:b3:14:22:2b:51:36:82:ef:ae:
88:0b:8e:74:00:fe:3e:ab:cb:25:3f:dd:5a:99:52:b6:0e:e3:
6c:1e:fc:e7:83:6a:92:0a:30:fe:eb:68:5d:27:c3:92:7d:e7:
3f:fa:8c:5d:5b:bb:1f:d7:0d:3e:40:13:c6:df:57:cc:a1:f4:
c6:60:25:a8:b1:49:8b:f3:0c:8e:94:56:a3:58:9f:01:79:21:
16:37:1e:e1:bf:63:73:08:48:ee:3a:a6:9c:7d:9b:57:13:40:
b3:be:20:a3:d8:2d:e5:b0:30:b2:b1:92:9d:73:08:65:44:d5:
44:81:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:44:07 2025 by rpki-client