Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
File: dXFLWBraGW41UcCM52JDvgWLROs.mft (raw, json)
Hash identifier: LgL/ULH92wksOM07uOBTs0ltzn954UV3GuhkNReyYnw=
Subject key identifier: 55:52:ED:FD:BD:3F:98:CE:0F:60:DD:81:98:AC:A3:D6:F6:22:0B:22
Authority key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
Certificate issuer: /CN=75714b581ada196e3551c08ce76243be058b44eb
Certificate serial: 019A53E4259CCB372AC852616FF230639DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 12:00:52 +0000
Manifest this update: Wed 05 Nov 2025 12:00:52 +0000
Manifest next update: Thu 06 Nov 2025 12:00:52 +0000
Files and hashes: 1: 0dwLJQRpdsuNfuiofPA4PjO0U8c.roa (hash: xvhwiBzc6sj9frR0O87jctOS5dj3sqKjh7OcpHO4MQo=)
2: dXFLWBraGW41UcCM52JDvgWLROs.crl (hash: ZbsloJTw7esZYSH+YamMyRmi8dOioJhkQHND/mbYaJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:25:9c:cb:37:2a:c8:52:61:6f:f2:30:63:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75714b581ada196e3551c08ce76243be058b44eb
Validity
Not Before: Nov 5 12:00:52 2025 GMT
Not After : Nov 6 12:00:52 2025 GMT
Subject: CN=5552edfdbd3f98ce0f60dd8198aca3d6f6220b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:dc:9a:29:e6:d9:57:99:67:83:5b:3c:15:
62:77:0f:bd:32:08:32:00:5c:54:47:ab:ea:ec:6f:
4e:00:2e:5b:8d:16:5c:21:d0:1f:6c:a7:27:3f:36:
38:e8:a7:b7:ac:66:74:ef:8f:e0:ed:f9:f8:17:42:
71:de:7f:72:41:37:9f:44:b8:f9:63:05:28:99:20:
f0:a4:cb:e8:5a:c5:30:41:c2:20:76:f4:6b:bf:6d:
f1:ab:bd:72:6a:ca:a7:ea:3f:95:5b:86:8c:2b:dd:
4c:2b:ec:55:e1:8a:51:8b:ec:5f:8f:2a:c1:1d:15:
5a:e5:60:d0:22:64:12:d9:3a:80:82:88:ac:d0:fe:
0c:35:e8:10:ea:e2:4e:ed:34:eb:b3:16:44:0c:f9:
da:1d:24:b6:3f:2d:ad:f3:10:6c:6d:57:f8:f8:9f:
ed:90:50:be:18:3a:53:79:10:b2:37:de:73:6a:0b:
20:57:eb:0c:5b:aa:d5:83:a1:b2:68:83:96:98:f9:
96:ba:75:45:a8:1a:3f:15:54:53:a3:a5:bc:a1:a0:
96:b7:50:80:69:7b:ca:10:1c:83:3f:40:e3:2f:44:
87:d9:78:f4:10:d2:ec:f3:aa:05:74:22:fc:7d:e9:
a9:83:fe:48:6f:56:05:11:ac:36:13:ea:87:ad:44:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:52:ED:FD:BD:3F:98:CE:0F:60:DD:81:98:AC:A3:D6:F6:22:0B:22
X509v3 Authority Key Identifier:
keyid:75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cf:8c:69:29:7d:ad:00:c8:08:a5:2a:7f:70:8d:14:2e:6b:
a4:4b:b0:20:ee:9d:59:d9:75:38:a2:6d:5d:6a:6a:bc:13:11:
c4:7a:40:7a:4b:a3:c5:47:9d:fe:ca:27:42:79:fd:ca:04:56:
f7:4f:de:49:91:db:8d:4b:e3:08:ef:d4:7d:8d:e1:5c:e9:ee:
de:10:f1:47:d2:78:8a:d0:41:74:55:e8:8a:de:2c:fb:43:12:
7f:3e:2d:d4:62:50:0e:cf:9a:70:59:2c:db:72:3a:1f:41:78:
4c:a1:59:c4:fd:fc:13:58:b3:8e:cb:5f:5e:80:42:0f:e7:0d:
b0:8a:b2:c2:9c:78:d9:9a:40:91:6d:64:fb:6d:22:9a:39:87:
55:da:dd:99:c4:7a:f3:66:61:05:a5:87:b9:78:70:3a:bf:50:
31:93:45:0e:ee:0c:39:49:ac:0d:68:04:54:ce:28:dd:df:4e:
75:81:04:bb:9b:47:44:7c:19:71:63:f5:7f:39:74:68:b8:c1:
c9:d9:66:2b:90:62:42:24:3a:a1:54:bd:bc:94:9b:36:e6:6a:
0b:48:cf:dc:96:48:7b:a9:28:37:53:5a:17:ac:11:13:29:4c:
dc:4e:85:47:2b:b2:9a:8d:31:eb:99:ea:7c:f8:61:ca:19:05:
0e:d0:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:34 2025 by rpki-client