Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: 1Wys0VhFxlsnq9oEahYgL07Wm4/uPm/Rrj1JoDKj5lY=
Subject key identifier: 6E:C9:6E:CD:A2:37:25:79:9D:15:ED:A2:E1:CD:F6:88:74:3E:B1:43
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 019A5307D8B8A7CA488428772D2CFAFD3F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 08:00:14 +0000
Manifest this update: Wed 05 Nov 2025 08:00:14 +0000
Manifest next update: Thu 06 Nov 2025 08:00:14 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: fB508R2O8Ik16Zf6IBXPgHAHBO3Rs4xsFgOQ0/ONDtQ=)
2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:d8:b8:a7:ca:48:84:28:77:2d:2c:fa:fd:3f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Nov 5 08:00:14 2025 GMT
Not After : Nov 6 08:00:14 2025 GMT
Subject: CN=6ec96ecda23725799d15eda2e1cdf688743eb143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:26:ed:bb:46:d3:83:72:ee:64:55:e1:e6:
ee:19:5a:84:c9:20:9b:28:92:f4:38:eb:99:7d:96:
40:14:8a:d2:fa:bb:e1:1b:32:dc:fd:d6:1f:58:a9:
a7:53:86:75:67:af:a0:85:c7:ef:12:6e:9c:cf:e4:
3a:c5:8e:41:8a:df:68:92:f4:14:a6:9b:74:9d:30:
71:f9:fd:b5:2d:40:d5:f3:e3:3b:e6:60:39:98:c8:
d5:b1:d0:6a:4c:7b:c6:6b:27:d3:24:16:e1:42:60:
6f:1f:fe:de:dc:2a:d1:b1:bd:1b:6b:c0:88:39:42:
c9:d5:4b:f7:b2:b2:d6:3c:dc:de:88:c2:9f:40:cf:
0d:60:35:30:a7:9c:b0:18:e6:9c:46:b4:91:bd:23:
93:7a:0f:4e:cc:3f:9a:a3:2f:51:7b:b0:db:ab:86:
a2:26:42:ce:eb:a5:71:eb:d7:ad:75:0f:ba:ce:43:
16:76:fd:a7:5e:39:ee:56:bd:15:57:7e:43:3e:0a:
51:6e:80:18:83:d9:f1:0f:48:e5:01:8f:ee:a8:8d:
f8:4e:9d:2c:47:6e:5f:e2:73:cb:66:14:2f:81:ff:
63:9b:cb:29:91:48:51:12:f2:5d:3a:d1:35:b9:2a:
b0:cf:11:85:b1:f7:ae:00:1b:76:c5:07:a4:ae:b8:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:6E:CD:A2:37:25:79:9D:15:ED:A2:E1:CD:F6:88:74:3E:B1:43
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8b:3a:66:92:49:30:33:70:de:d2:64:cf:3c:d8:e6:dd:2b:
63:c8:10:cb:0f:0b:94:6d:d2:6c:a3:d9:5b:03:14:00:8b:5d:
2a:77:59:46:f3:b5:f1:25:df:5d:1a:0a:e8:cb:0b:f1:d2:0e:
73:11:a9:93:88:a3:73:05:64:ca:a9:dc:b8:74:5e:fa:dc:71:
f8:f1:8b:28:65:f6:15:32:d1:c6:36:19:a2:9d:f0:90:cf:8f:
96:0e:71:09:e9:22:29:ac:cf:8d:6f:b3:59:37:7f:49:f3:77:
05:ad:11:e2:18:de:ee:da:4b:2c:bd:36:9b:04:65:ed:ba:36:
00:1d:a6:76:24:39:33:26:92:97:38:57:dc:a3:56:81:75:c1:
74:56:9c:32:38:fd:af:33:02:0d:54:a3:ed:e8:71:78:de:a9:
30:46:02:49:6b:e4:51:82:db:65:08:22:a3:32:a0:2b:74:b1:
fe:91:ad:c6:40:7e:22:3a:03:de:f3:04:48:37:3e:a0:0c:0f:
a3:49:e1:17:0b:c1:82:e0:f2:cf:df:80:59:ca:13:6b:be:b2:
4c:2a:05:64:48:58:b3:78:b5:58:a9:c4:9a:9c:7a:a9:91:e5:
a2:73:9c:37:46:99:17:d5:f3:5e:ee:8c:79:dc:ef:25:53:8f:
39:6e:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:00 2025 by rpki-client