Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: zv+Nok65GqtiAZ5QAKjDS3NVINKLIb/cVGas9soUGW8=
Subject key identifier: 9F:05:52:B4:E5:BE:8E:1B:30:EA:1D:EA:7C:53:24:9D:F8:E9:50:06
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 019A4F2B48918222941221826EC06E92C781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:27 +0000
Manifest this update: Tue 04 Nov 2025 14:00:27 +0000
Manifest next update: Wed 05 Nov 2025 14:00:27 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: a/jSVk302PhPEH07Tj2r5kdo4tBmGEdEWfB6nBsTmeY=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:48:91:82:22:94:12:21:82:6e:c0:6e:92:c7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Nov 4 14:00:27 2025 GMT
Not After : Nov 5 14:00:27 2025 GMT
Subject: CN=9f0552b4e5be8e1b30ea1dea7c53249df8e95006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:88:dc:34:91:82:02:2e:18:2f:c2:92:5b:
2d:dd:8a:cd:93:0c:50:3e:b4:67:65:52:5d:e7:ab:
a4:77:87:fa:3c:84:85:e9:7b:62:32:3b:2f:aa:83:
dc:55:8b:90:b5:eb:b8:85:e3:a7:20:54:d1:f4:49:
b8:a6:4b:54:8e:11:e3:a1:bd:55:29:61:d8:e6:d8:
08:56:f9:a0:c6:99:93:50:29:23:08:dc:92:dc:c6:
65:54:01:56:fd:71:85:37:07:b5:be:e0:b7:77:b0:
e6:93:c2:ed:4a:c1:cd:f9:7f:1e:95:22:6c:9c:37:
59:a2:d7:dc:06:09:07:66:15:7c:15:d3:fb:41:7d:
80:9c:79:84:d8:94:b3:f9:77:3a:5e:05:e1:dd:18:
8d:6f:cc:cc:1b:4c:bb:c3:6d:55:44:73:c0:81:2f:
2a:ef:31:d3:37:47:f0:cb:e7:c2:ca:96:6e:95:2d:
d7:4f:3c:79:aa:b9:42:2c:bd:97:a6:dc:e2:71:6c:
9b:80:a3:cf:a1:9e:5d:f9:1a:88:1b:68:2b:bc:ce:
1b:63:0e:41:37:33:dd:bb:29:6f:1a:87:43:af:b4:
46:a7:2a:ae:5e:9e:8e:0a:14:11:00:e7:5b:9a:59:
6f:60:53:6d:bc:cf:09:f0:f4:e7:62:56:64:7a:ce:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:52:B4:E5:BE:8E:1B:30:EA:1D:EA:7C:53:24:9D:F8:E9:50:06
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:14:4b:4e:bf:43:a0:2e:b6:f2:bd:bf:fd:0e:44:e1:90:a1:
1e:32:0d:41:24:3a:8c:3c:6d:67:43:27:25:4a:eb:3f:e8:53:
17:25:ae:1b:73:64:78:a8:c0:74:01:40:c3:10:00:83:77:b5:
8f:fb:38:9e:8b:df:b5:cc:e5:b0:7a:78:2c:73:a5:ce:88:4b:
f5:ed:6b:9e:a7:48:03:7d:e5:db:52:0f:40:3d:db:96:ad:3f:
e9:09:97:d4:7f:48:df:a1:a3:3e:98:82:62:49:4c:93:4c:d0:
21:68:de:2a:43:b3:b9:2c:04:10:db:5f:14:55:44:a9:24:8a:
00:82:91:d3:eb:6d:8e:a7:fc:3f:5a:a2:29:9a:42:e6:67:36:
9f:d4:93:ce:21:a2:92:22:6a:91:82:16:3b:d5:b3:23:38:97:
37:bd:5d:03:15:aa:53:bb:d2:9f:74:0f:0f:4f:36:34:10:9e:
61:27:82:2c:99:fb:85:49:6a:86:a0:2b:11:09:a3:db:13:a6:
d7:32:29:fb:50:b3:2f:31:4f:c9:fa:32:c5:1f:73:ce:c4:36:
22:53:02:45:cd:4c:e0:ef:80:2c:8d:8d:e5:50:a2:d7:5c:2d:
66:34:08:8a:6d:f1:51:c9:8e:5b:69:46:60:57:2b:a4:f2:e3:
fa:a9:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:25 2025 by rpki-client