Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: AgRb4Qj3yn5Ktj6wYrwauC9R2ZEmJj4AOypiI8AA1Ls=
Subject key identifier: BB:40:02:E9:80:37:74:A4:98:8A:22:34:B9:31:B6:AB:DB:02:C4:C1
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 019A51BED65028311B083B9FE07C7A3D3612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 02:00:52 +0000
Manifest this update: Wed 05 Nov 2025 02:00:52 +0000
Manifest next update: Thu 06 Nov 2025 02:00:52 +0000
Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=)
2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: wQ4+9+Z56waqy0jS5YMbwmyODot8dGR294/GF5nwuuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:d6:50:28:31:1b:08:3b:9f:e0:7c:7a:3d:36:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Nov 5 02:00:52 2025 GMT
Not After : Nov 6 02:00:52 2025 GMT
Subject: CN=bb4002e9803774a4988a2234b931b6abdb02c4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:d6:ea:ec:f7:ef:8e:9e:6b:37:aa:ad:97:
03:e3:58:79:5c:f9:10:b4:05:85:3f:bd:d9:b2:fa:
52:e2:7a:39:49:11:d5:cc:6e:a1:e7:bc:b8:6c:ba:
17:f5:e4:f3:fe:6e:a7:91:76:af:77:f3:66:ea:29:
36:a4:5a:51:7e:8a:7b:36:2d:27:6a:d1:2b:bd:37:
94:68:34:d5:95:7e:89:3a:3f:da:16:2b:e7:8e:53:
4e:08:64:c9:d7:1a:38:0f:6d:6f:5d:08:48:fb:82:
92:a0:fb:7f:a0:33:e5:94:5d:f3:61:ef:21:cc:6c:
ab:a3:4a:a0:fc:16:5f:f2:85:6b:d4:7a:96:6e:e4:
5c:24:a4:7c:3e:d9:cd:42:2f:20:56:5b:d3:91:a4:
30:91:9a:4e:5f:32:87:9f:e3:e6:16:32:51:79:94:
41:c2:4a:50:25:5c:d4:15:9c:40:df:14:5b:6f:b6:
27:86:67:9d:37:d7:81:cd:84:58:ac:4d:7a:e6:4c:
f7:32:8b:5f:09:56:14:63:dd:91:1d:58:fe:f1:6e:
6f:55:19:00:1e:9b:5a:b8:10:54:6b:ee:d5:14:a7:
1c:a2:ee:38:f2:37:9f:b5:88:11:99:d5:5c:1d:52:
f8:5a:52:ce:be:d1:dd:fc:1c:f9:90:63:1f:9c:74:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:02:E9:80:37:74:A4:98:8A:22:34:B9:31:B6:AB:DB:02:C4:C1
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5e:7b:92:76:4e:91:d7:a1:e4:a2:ac:3e:e3:96:a6:95:79:
84:f8:31:34:ba:29:ff:6e:db:df:5b:c8:fd:93:d1:e1:81:25:
dc:1a:6b:10:d4:75:7b:29:a6:0f:df:c8:aa:ee:a9:ff:a8:2f:
16:ee:c1:38:19:d6:a2:bb:f9:7d:58:2f:50:9a:96:2c:85:64:
40:c8:1b:e6:77:97:29:02:0c:7a:16:6d:47:c9:52:84:22:60:
f6:70:95:e5:95:a7:31:c3:a7:3e:a8:73:39:ab:b2:c1:bd:b4:
2e:4a:56:b3:ea:cb:58:5f:93:7f:dc:99:34:91:fb:d9:79:35:
13:fb:3b:3b:52:32:09:94:17:ca:e9:0a:e4:56:ae:fb:d9:21:
75:94:85:6c:4c:7c:3d:20:9f:81:42:13:19:0c:6b:87:86:38:
60:86:11:1e:a6:07:09:66:7b:5f:44:08:64:13:c2:b5:43:23:
ea:ee:ae:bf:fb:65:2e:00:54:4d:c3:8a:10:10:e7:ed:5b:bb:
f9:b0:06:0b:6c:a3:f9:7f:9d:c5:5b:b8:f0:d2:69:70:ee:43:
d9:1a:11:7f:18:37:1a:4f:06:50:68:b2:4d:22:6f:44:0e:31:
47:e9:95:c9:cc:d2:7a:63:a1:3a:54:ce:17:f4:3a:6f:46:15:
2b:17:25:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvtZQKDEbCDuf4Hx6PTYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NzBkZmMwYmI1Y2UwNmQ4NmRmMjRmZTNjYWE0YjRlZjM0
MTc4ZjQwHhcNMjUxMTA1MDIwMDUyWhcNMjUxMTA2MDIwMDUyWjAzMTEwLwYDVQQD
EyhiYjQwMDJlOTgwMzc3NGE0OTg4YTIyMzRiOTMxYjZhYmRiMDJjNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym7W6uz3746eazeqrZcD41h5XPkQ
tAWFP73ZsvpS4no5SRHVzG6h57y4bLoX9eTz/m6nkXavd/Nm6ik2pFpRfop7Ni0n
atErvTeUaDTVlX6JOj/aFivnjlNOCGTJ1xo4D21vXQhI+4KSoPt/oDPllF3zYe8h
zGyro0qg/BZf8oVr1HqWbuRcJKR8PtnNQi8gVlvTkaQwkZpOXzKHn+PmFjJReZRB
wkpQJVzUFZxA3xRbb7YnhmedN9eBzYRYrE165kz3MotfCVYUY92RHVj+8W5vVRkA
HptauBBUa+7VFKccou448jeftYgRmdVcHVL4WlLOvtHd/Bz5kGMfnHSlfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtAAumAN3SkmIoiNLkxtqvbAsTBMB8GA1UdIwQY
MBaAFHRw38C7XOBtht8k/jyqS07zQXj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wYzYxMTEtNThmNy00Yjc1LWJjYWIt
OTBiYzQ2MjRjN2IyLzEvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8wYzYxMTEtNThmNy00Yjc1LWJjYWItOTBiYzQ2MjRjN2Iy
LzEvZEhEZndMdGM0RzJHM3lULVBLcExUdk5CZVBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOF57knZO
kdeh5KKsPuOWppV5hPgxNLop/27b31vI/ZPR4YEl3BprENR1eymmD9/Iqu6p/6gv
Fu7BOBnWorv5fVgvUJqWLIVkQMgb5neXKQIMehZtR8lShCJg9nCV5ZWnMcOnPqhz
Oauywb20LkpWs+rLWF+Tf9yZNJH72Xk1E/s7O1IyCZQXyukK5Fau+9khdZSFbEx8
PSCfgUITGQxrh4Y4YIYRHqYHCWZ7X0QIZBPCtUMj6u6uv/tlLgBUTcOKEBDn7Vu7
+bAGC2yj+X+dxVu48NJpcO5D2RoRfxg3Gk8GUGiyTSJvRA4xR+mVyczSemOhOlTO
F/Q6b0YVKxclsg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:29 2025 by rpki-client