Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: O7E3rRjOr3wk4xfBP3G8hzEr1468Y03uugT2ur61kYo=
Subject key identifier: E3:25:CD:67:2F:51:46:8A:0B:08:41:75:51:73:A0:16:9B:49:C3:02
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 019A52631A3ADF510ABA37A1DEBC73CB257C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:17 +0000
Manifest this update: Wed 05 Nov 2025 05:00:17 +0000
Manifest next update: Thu 06 Nov 2025 05:00:17 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: Hl7SfJ0vf5z/4QnC83iEYFsh/Fx3JFMj796jjJxtAMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:1a:3a:df:51:0a:ba:37:a1:de:bc:73:cb:25:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Nov 5 05:00:17 2025 GMT
Not After : Nov 6 05:00:17 2025 GMT
Subject: CN=e325cd672f51468a0b0841755173a0169b49c302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:d9:3f:75:45:60:30:0d:07:53:e2:08:e4:
3a:48:5e:23:5b:04:44:5b:ae:51:4e:74:b9:68:22:
28:e0:8b:3e:d8:17:ca:a6:8e:52:4a:7b:2d:14:d4:
f6:21:f2:8c:ea:a7:b9:bd:84:81:21:a8:52:dc:ad:
38:9e:ad:36:03:71:f6:cc:7b:12:00:bd:f7:39:a4:
dd:1a:6e:1a:9e:6a:1b:e9:4b:c4:18:2f:36:30:ac:
92:52:74:6b:45:09:5e:d6:15:c7:81:aa:3e:56:ee:
87:cf:58:fb:4d:28:5e:c2:40:0c:da:19:e3:f7:d9:
d5:24:36:ec:d3:12:fa:38:5a:d6:2b:45:77:93:ed:
db:3d:e3:d0:76:f2:2f:7d:9d:61:ae:c5:80:2c:67:
e6:c0:09:d3:32:f5:37:16:7e:72:f0:e2:6f:9a:f0:
80:ab:16:38:91:be:5a:ea:9e:49:32:ec:d8:db:6c:
f6:e9:65:ab:b7:00:73:8a:83:d4:0f:ab:1a:1d:0c:
f7:83:9c:77:d0:a9:69:0d:88:f1:37:b3:4e:29:59:
e6:64:d4:c4:27:aa:17:79:9d:97:d9:f3:7d:0b:ed:
7c:0d:fe:f2:b6:bc:e8:1e:08:ec:3e:99:7c:64:c6:
60:c1:a9:da:24:3c:33:69:48:f2:97:93:31:78:75:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:CD:67:2F:51:46:8A:0B:08:41:75:51:73:A0:16:9B:49:C3:02
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f0:eb:7a:1a:62:7b:bc:be:17:e3:85:cb:fc:92:44:ae:2f:
3b:91:09:1a:c6:d0:1e:98:37:a9:e4:af:2c:35:0d:35:0c:eb:
c1:4f:fd:6d:bb:0f:77:57:78:be:9b:ab:82:fb:a3:c9:29:05:
a7:03:41:46:0b:9c:ba:22:25:ad:1f:a5:17:e0:19:22:8a:46:
dd:88:b9:82:3e:9f:58:af:6a:ae:a0:7a:5b:54:71:ed:cd:b5:
8a:8a:30:d2:d9:1e:72:f7:0f:f4:96:97:76:fc:6a:41:a7:6d:
0f:1f:99:32:bd:27:64:a1:40:4d:af:e1:ed:bc:d5:1f:60:53:
a2:02:c4:7e:00:fc:1c:5c:77:d0:34:e1:dd:d3:08:c2:12:72:
e3:03:21:b1:84:9b:fa:28:90:49:c3:86:a2:8e:99:b5:ac:6e:
9f:e0:7f:81:cd:c5:82:cc:66:db:46:0b:72:5f:36:1e:24:3a:
70:4a:dc:5e:d8:7d:aa:42:f9:d7:f2:63:17:17:d8:08:f5:9c:
fd:b1:1a:e2:bb:12:b4:23:e2:73:77:f0:a4:ba:0c:d1:3c:aa:
f2:e3:2c:f0:9e:fc:a1:09:bc:2a:04:e3:be:f0:4e:91:f3:37:
be:ce:f6:f8:78:03:5a:68:33:dd:63:32:1a:8b:cc:9c:e0:d3:
e1:d2:25:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:56 2025 by rpki-client