Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: 7oTu+dSCyOib72SHRV+4SCFuxv8QB1uJrdN/Tt8s6RM=
Subject key identifier: 72:69:5E:0D:38:91:DE:98:33:E9:62:3E:25:DF:38:E2:F3:7E:DE:70
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019A503E3F0326518A045A8A4AFF187C8C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:47 +0000
Manifest this update: Tue 04 Nov 2025 19:00:47 +0000
Manifest next update: Wed 05 Nov 2025 19:00:47 +0000
Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: uWIa3A0BWTwmLynFleqGwDO/gfPKCeyqYIwl/1jG89w=)
3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:3f:03:26:51:8a:04:5a:8a:4a:ff:18:7c:8c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Nov 4 19:00:47 2025 GMT
Not After : Nov 5 19:00:47 2025 GMT
Subject: CN=72695e0d3891de9833e9623e25df38e2f37ede70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:82:de:1e:ba:39:c4:0d:e2:f5:53:af:e1:
8f:80:23:27:ba:94:75:14:2d:61:4c:68:11:d1:5d:
22:c2:2a:0c:0a:51:0f:30:3f:f7:3c:69:f9:46:d2:
b9:06:17:c2:32:de:3d:dd:8f:c5:e2:95:67:e6:40:
a4:ca:f0:9e:2f:d9:c1:73:bc:6d:06:a5:c3:d9:1b:
0d:ab:fe:df:c2:55:a9:55:51:c5:3b:61:b1:22:08:
58:69:93:a7:c8:c2:5e:5d:99:19:48:04:76:24:f9:
70:a3:98:e7:e1:5d:33:a6:1d:c8:31:3d:9e:68:78:
ab:09:e1:65:80:96:44:b2:10:ec:e6:fd:b3:56:a0:
87:99:ee:d3:c2:1b:b1:e9:4e:6e:e3:b5:49:b9:be:
5b:3a:fb:d8:dc:bd:fc:ef:b1:96:dd:1f:14:ad:f4:
3a:59:a1:26:47:fb:d7:a5:aa:20:42:3a:8c:1d:0a:
86:a3:c8:3b:34:b1:84:03:99:7d:70:9f:21:ea:6d:
3e:ad:57:de:41:ed:19:85:98:38:f9:f0:cd:80:e1:
16:de:f5:3d:16:2c:13:02:80:61:dc:68:59:98:86:
04:c7:f9:12:55:b0:c3:da:77:62:c8:2a:89:a8:60:
25:18:dd:29:be:60:29:20:4b:1b:a5:2c:56:2f:4e:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:5E:0D:38:91:DE:98:33:E9:62:3E:25:DF:38:E2:F3:7E:DE:70
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:aa:f4:19:01:56:bf:53:b7:5a:d1:40:92:89:14:9f:27:2f:
7a:0a:78:26:e9:53:60:7f:f5:e5:79:7c:60:e9:26:bd:fc:b0:
5d:3c:e1:f7:ac:30:88:ec:97:9e:f7:83:6e:cf:29:22:b2:dd:
35:a6:02:9f:7c:06:1b:af:1a:5e:69:54:12:7a:c0:a5:7c:60:
4f:4d:5c:ca:36:0b:a1:c6:6c:0c:52:19:1a:6f:54:34:f0:72:
e7:f9:35:b1:0c:bb:37:d7:1f:cf:5e:d4:ad:f6:ba:b9:e5:ea:
a4:dd:bb:c4:b6:80:96:f3:0f:15:a6:81:dd:dc:90:94:a5:ce:
47:d2:42:d6:c3:ff:c0:a0:33:b1:89:12:d3:25:5c:bc:12:da:
6d:1c:66:bb:d0:bc:3d:b5:2b:93:c6:8e:8b:bf:30:05:f4:25:
ea:fc:ae:50:ff:53:77:db:49:8c:10:1b:73:36:08:f7:05:0d:
05:be:b6:f7:22:6f:56:13:df:ee:ff:16:da:5e:be:e6:36:86:
11:7c:bf:45:83:0a:7b:19:50:66:6f:29:7c:d9:06:60:2f:af:
02:2a:be:6e:95:c5:ae:d3:8c:21:bb:1b:30:5b:c6:22:93:2c:
4f:1d:dd:37:3f:31:54:c9:86:5b:65:cd:9f:cf:2e:66:f8:e1:
84:b8:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:02 2025 by rpki-client