Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: rYqHl2BqPaPDQ4MpURhfZUGJpOJVBjyUp8R+Bjioo8E=
Subject key identifier: 3C:09:70:E2:4C:DA:C4:7D:85:31:32:1B:D7:D9:02:E8:11:1A:80:B9
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019A50071E9105FA6F8C2154B9021031DDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 18:00:35 +0000
Manifest this update: Tue 04 Nov 2025 18:00:35 +0000
Manifest next update: Wed 05 Nov 2025 18:00:35 +0000
Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: zBUiANNQpcI4ZsorkuXz4wOUkPSDksAOhc4BeTDWeN0=)
3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=)
4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=)
6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1e:91:05:fa:6f:8c:21:54:b9:02:10:31:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Nov 4 18:00:35 2025 GMT
Not After : Nov 5 18:00:35 2025 GMT
Subject: CN=3c0970e24cdac47d8531321bd7d902e8111a80b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:e9:fb:bf:f0:54:47:e1:09:be:35:ff:2d:
d6:5f:8b:01:9c:b0:dc:c5:db:51:5f:87:93:26:2d:
07:4a:a0:fa:52:de:14:5b:15:76:48:a1:01:84:f0:
31:ae:f2:b2:12:cb:72:c0:13:9a:4a:01:4e:0d:15:
ce:9f:90:38:58:d2:e4:a0:8d:44:0d:ec:31:cb:33:
f2:6e:e3:c3:cc:08:3c:85:72:b1:8f:8c:1e:88:20:
38:4f:e6:3a:ee:cb:9f:72:23:2f:c7:18:76:4b:56:
7a:fb:41:50:31:88:47:b6:00:26:e9:53:1a:ea:c9:
81:50:60:34:02:08:df:26:bb:af:47:7d:1e:07:82:
92:ec:5c:c0:14:2b:d3:5e:92:45:b9:11:72:b7:12:
7e:64:1e:3d:4b:7b:4d:bb:a3:93:d7:4a:f7:c5:75:
2f:22:a4:c9:02:e3:fc:41:4d:59:0b:14:65:fb:4e:
2f:9c:5b:6b:fa:cb:c4:0d:6b:0f:0f:b0:a1:8f:82:
8e:d0:1c:e7:10:79:30:ff:93:09:6d:16:2c:bd:85:
23:28:02:d9:5e:64:e0:1f:a4:95:c6:7c:0b:a6:ce:
e4:84:4f:c0:a2:f4:3a:d6:88:ca:0e:0f:33:d9:0c:
28:69:91:32:90:d0:14:b5:41:ff:a8:72:85:db:d0:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:09:70:E2:4C:DA:C4:7D:85:31:32:1B:D7:D9:02:E8:11:1A:80:B9
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e6:78:f5:da:28:d5:3b:da:98:b5:cf:43:22:3c:6c:ab:b8:
5e:0a:23:1e:29:57:0d:03:b1:2a:2a:32:e4:fe:62:76:1b:33:
63:9b:38:1e:29:f6:0a:96:30:c9:f6:b6:96:0e:5b:98:44:4f:
b6:10:ce:4a:aa:3e:80:6f:45:89:d2:c2:5c:8b:d3:f5:f1:83:
d0:ce:f3:21:04:37:7b:d8:bb:10:fc:33:8a:12:91:28:2a:8c:
92:0a:15:3e:bc:32:18:be:46:a5:ca:11:53:fa:65:38:a0:79:
07:a2:26:3c:d9:67:5b:32:6c:6d:b7:9a:f8:50:f8:3e:c5:b5:
b3:f4:16:72:31:da:6b:0e:65:af:58:db:56:90:2a:ee:21:7a:
03:23:79:9c:0c:c1:a3:95:4d:37:1b:e2:8b:5a:5d:48:9a:a8:
33:23:5e:2b:57:d0:c1:f7:b6:4e:19:a1:52:fe:e4:96:55:0f:
64:58:b8:41:9c:f1:8d:ce:ca:a3:d2:ce:b9:d6:cc:d8:32:97:
e6:41:c8:23:47:dd:75:a0:e3:55:c9:d5:2a:81:b7:f5:0e:5d:
ad:57:16:cd:85:6c:8e:a8:ef:2c:a3:6b:d8:fa:26:8e:20:20:
d2:8e:80:8a:c9:6e:b0:05:73:82:b9:50:5b:56:05:e9:65:76:
54:56:28:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:18 2025 by rpki-client