Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: N4si+m1tefoNW3+C279rN5FDHsd/7Xk4hEvZY0T5sgs=
Subject key identifier: 97:33:29:B7:21:BD:B4:BB:40:E0:B5:36:00:AC:64:14:37:C1:B8:81
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019A4F2B4672B1EF651D69132D475C349940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0774
Signing time: Tue 04 Nov 2025 14:00:27 +0000
Manifest this update: Tue 04 Nov 2025 14:00:27 +0000
Manifest next update: Wed 05 Nov 2025 14:00:27 +0000
Files and hashes: 1: R0kpMB4FLa57YlT9gQTxUhUxTi4.roa (hash: v4gil0pPlLS8kPjffYF1yPMZ2JnOTspISeu5FIjRwfg=)
2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: 7aBgtid771knJ/4TRGtzIG6IEI2Uv7Pvx8HO0oQcnqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:46:72:b1:ef:65:1d:69:13:2d:47:5c:34:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Nov 4 14:00:27 2025 GMT
Not After : Nov 5 14:00:27 2025 GMT
Subject: CN=973329b721bdb4bb40e0b53600ac641437c1b881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:06:ce:13:de:4c:82:ba:41:1a:e7:9c:e2:
8b:86:03:80:c2:62:32:71:3b:fa:d6:be:5f:60:a3:
10:96:9d:5b:18:80:be:23:73:98:fb:6b:d4:1c:95:
82:21:e3:03:24:02:de:f5:2e:93:5a:14:da:e1:d7:
2f:bb:a1:4c:b6:1a:22:a2:d3:c5:8d:dc:8e:f1:30:
2c:dd:3a:93:45:b5:79:b8:a1:d2:6c:4c:0d:28:22:
d9:13:79:46:76:a8:c5:87:95:5b:00:1d:07:d1:1b:
26:28:90:ad:77:f5:a9:75:e6:a9:b7:69:ba:46:03:
c2:9f:cd:fd:31:f6:47:40:31:48:71:5c:9d:77:22:
09:de:b2:36:30:cf:e9:08:14:f3:5b:a8:7d:d3:aa:
a6:8f:bb:d6:49:1a:3e:ee:35:1c:f4:5c:06:e0:84:
02:a4:7a:2a:4c:0c:45:92:ae:47:46:e0:e4:a7:1e:
f2:55:15:eb:25:46:19:91:12:0c:19:45:7f:6a:c0:
7b:7d:a0:c0:53:be:0e:d3:78:3e:9d:3d:4b:34:68:
9e:1d:84:73:84:8c:79:ed:fc:aa:41:c9:8f:da:22:
c5:cb:8a:79:cf:64:53:4a:7b:74:15:f9:60:72:2b:
02:29:51:50:fd:4d:47:82:e8:9d:64:f4:42:55:17:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:33:29:B7:21:BD:B4:BB:40:E0:B5:36:00:AC:64:14:37:C1:B8:81
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:69:ed:89:31:98:a1:a7:36:d6:9f:32:7f:37:f5:bf:22:df:
15:88:c2:09:01:ff:6d:e4:ec:fa:cd:67:73:00:cb:43:6d:f7:
40:f4:a5:02:ae:b8:e0:13:7e:c7:ae:a0:43:6f:82:1e:10:31:
a2:fd:9a:9f:77:ac:aa:cd:88:56:cb:2f:ec:10:b7:f2:58:33:
5e:cb:7f:78:d9:c5:32:00:96:51:71:4c:cb:ec:05:25:cb:c2:
7e:46:a5:8a:32:ad:a7:4f:41:50:29:17:df:22:d2:f0:57:47:
9d:6f:9b:9b:40:74:1f:cb:db:5c:12:b2:a1:90:cc:44:b1:93:
a3:39:33:c5:98:1b:20:00:1b:e8:94:1a:0f:de:b9:70:26:4d:
5f:fb:c5:90:a4:3d:88:6b:e0:ba:03:1d:2a:5b:af:49:6e:6e:
5e:c0:21:7c:69:8c:46:e1:f9:16:09:c6:85:d4:30:b1:16:9a:
ca:e8:26:57:a9:1b:ff:88:ca:dd:3f:ed:6a:9f:25:eb:01:ec:
c3:e6:5f:38:a4:9b:c4:c7:3a:86:14:ca:61:3a:4d:ce:b8:d0:
2f:12:01:ec:13:02:67:65:bd:4c:58:81:41:be:b8:4a:b5:e2:
57:d7:09:8d:24:26:67:25:b3:5f:e4:30:35:a2:71:84:b5:44:
ba:19:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:57:45 2025 by rpki-client