Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: nDCReJgcdqN6vZBTFzcLutz7UFzkaTo/uXrdycUe8aU=
Subject key identifier: F1:84:9D:0D:14:37:80:3A:62:2F:CF:F4:15:C4:BB:2E:97:3D:8D:02
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 019A4DE16C11D5CE8F13C2952AF08E6F2BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: xcz8JRQ7O5B85SevX6DTbosSpXzyLr1V0VSVI2IYk48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6c:11:d5:ce:8f:13:c2:95:2a:f0:8e:6f:2b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=f1849d0d1437803a622fcff415c4bb2e973d8d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:e5:f4:4c:1d:6d:eb:8f:9e:c1:e5:e0:82:
be:76:42:b5:2e:4c:15:15:55:58:b3:0f:cf:72:81:
ed:fc:37:2b:0b:36:58:cc:ed:db:b4:b5:e3:e8:89:
87:da:d0:bf:19:b5:d4:37:c6:14:33:67:59:43:08:
cd:66:38:1a:36:1f:ea:97:ef:86:cb:bc:32:fd:9c:
15:0d:50:ba:48:90:ba:57:f6:89:49:bd:d0:f1:02:
18:46:3d:1a:b1:bc:0a:9a:66:c2:dc:b9:69:de:97:
ef:b7:c6:f3:c7:32:87:0f:03:78:26:58:76:7a:f7:
49:20:35:ee:d6:0b:3b:a8:2a:4c:30:f6:c8:54:99:
4c:42:d3:2c:75:4a:3c:06:57:ce:fd:eb:26:79:48:
1c:42:53:8f:33:e2:2e:99:65:b7:04:51:c5:47:51:
6d:42:35:72:2f:88:2c:b1:ea:3b:32:95:97:dd:da:
ce:11:88:74:78:70:94:67:5f:f9:61:27:39:5d:34:
e3:4b:5a:5b:45:a8:0e:87:77:40:41:7f:20:a2:39:
20:70:3b:5e:e3:5f:e3:b2:66:dc:54:25:97:fa:5f:
81:ba:60:19:98:d5:00:27:ce:79:92:9a:69:82:a8:
a5:3b:7a:de:fa:65:12:9c:f6:7a:a1:31:ea:4e:c9:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:84:9D:0D:14:37:80:3A:62:2F:CF:F4:15:C4:BB:2E:97:3D:8D:02
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ba:21:c4:ff:61:2a:35:81:63:4f:a9:af:fc:15:75:7b:ab:
a6:d5:5f:6f:bc:90:fc:ff:0c:26:38:32:57:f1:62:f7:2d:da:
66:c2:5b:f9:70:5c:b0:6e:6c:d4:21:d9:4c:d1:b7:a8:6a:0e:
e2:39:88:34:ba:f3:26:8a:6d:d2:e3:39:2c:57:79:8f:d6:20:
2b:7d:dc:67:95:a1:ae:0c:b7:e4:a5:35:01:69:3e:78:ab:fe:
33:4e:e8:80:b2:e9:5e:3f:e8:bf:76:90:e3:79:7d:16:d5:b8:
c5:bd:10:0d:d8:73:37:dc:c2:97:c9:86:2e:fc:35:0f:fd:75:
e9:cf:62:f2:65:2b:6f:32:8f:d3:34:b3:c2:d8:0d:28:a3:37:
bd:43:94:a7:e7:72:3b:16:2c:9b:7b:b3:d6:a7:84:1e:e4:09:
cc:a3:e4:bc:f4:03:27:5d:5f:ca:dc:43:bb:5f:1e:d0:bf:2a:
20:9c:bf:37:ce:f3:5a:3f:9e:40:95:98:66:c0:66:7e:58:2e:
d7:20:f6:8f:7c:79:19:e3:e7:28:bb:65:1c:fe:ba:43:4a:43:
1f:fb:a1:a3:33:9a:8d:67:64:1e:83:5a:37:96:35:93:2a:bc:
61:0c:fb:ac:5a:0e:3c:a8:f7:70:be:e5:de:21:81:89:c6:83:
2b:93:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:50 2025 by rpki-client