Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: DtyjD+boZFZB7frqjxb4dTmAkSX3er9JKvDYthnzv4w=
Subject key identifier: 2D:6D:0D:5E:F9:82:36:EF:C0:72:53:87:E2:9B:8B:58:BD:D9:59:7E
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 019A4D73950B1E1EDC6103D63E78A7EC2C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:11 +0000
Manifest this update: Tue 04 Nov 2025 06:00:11 +0000
Manifest next update: Wed 05 Nov 2025 06:00:11 +0000
Files and hashes: 1: 0CzKrrdUvnNWtnCdr4geJQUloCY.roa (hash: JOOcnO9fPU3J8wcDUIkF0BM15ZCXJdWIZSdrxwMIcgk=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: wQEh8QGYV6irpBOKmEd+RkQNJwolO7G7dFRMPIxGrjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:95:0b:1e:1e:dc:61:03:d6:3e:78:a7:ec:2c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Nov 4 06:00:11 2025 GMT
Not After : Nov 5 06:00:11 2025 GMT
Subject: CN=2d6d0d5ef98236efc0725387e29b8b58bdd9597e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:c8:5d:5c:31:b8:64:25:a3:0b:21:0d:d3:
b1:d0:10:91:9a:ad:f8:63:7f:3e:bb:ea:c2:c9:7a:
1c:d0:c3:c9:0f:91:74:8b:2e:f7:91:ab:c2:b1:68:
15:d8:07:52:82:02:06:7c:67:d6:90:94:ed:27:97:
d7:2e:f6:d4:06:cf:fe:14:19:48:d1:d0:76:6c:4d:
71:68:e5:ad:9d:9d:46:9c:a4:0f:da:8e:82:b9:ee:
6d:d6:48:0a:1d:c1:68:76:4c:3a:d5:37:d8:ac:a7:
36:9d:25:3d:43:ed:a9:43:be:ed:71:01:13:5b:36:
1d:80:aa:6c:14:ed:96:41:d8:3b:4b:20:99:f0:1e:
4b:17:09:90:61:dd:4b:20:65:fa:65:67:3e:08:13:
78:8d:bc:08:69:04:71:41:47:8f:91:6f:ae:50:14:
1a:53:3f:c1:bb:06:96:b8:70:4c:d5:66:1a:01:20:
dc:0b:6f:b6:d0:10:11:e7:41:8c:c0:9d:ed:23:f7:
67:73:00:45:36:3f:15:c4:84:fd:bb:80:43:08:d2:
4b:43:dd:82:a0:29:ac:8f:f7:f5:3f:15:b1:9a:70:
dc:4b:c7:6d:63:a4:55:cd:6e:9d:6d:25:9b:14:14:
0d:c1:f4:82:36:e2:f5:eb:27:5f:08:4c:ed:6d:49:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:0D:5E:F9:82:36:EF:C0:72:53:87:E2:9B:8B:58:BD:D9:59:7E
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4b:44:60:40:5b:de:c2:42:15:1c:1e:28:29:8a:dd:0b:a4:
5e:b7:d1:b8:b4:1f:c9:75:9e:e4:76:de:31:08:e6:86:d0:54:
8d:ad:04:05:c4:07:6c:c8:87:c1:02:4b:39:e6:1f:2c:18:f1:
28:a4:3a:4e:80:d7:ef:62:59:ef:12:3b:a1:bd:7c:c6:f6:02:
20:b1:1b:23:a3:fd:dc:09:ed:ea:5f:d1:00:e7:be:91:55:4c:
f7:a3:87:fb:d3:bc:d5:f3:42:5d:93:0b:2c:fe:2e:9f:8f:f6:
43:fc:1d:6f:df:16:1e:a1:43:da:55:57:4c:6d:17:ea:0d:95:
c8:03:0e:41:13:0b:79:c4:46:a4:1f:98:35:8b:48:ba:c7:8a:
9c:29:ef:87:a7:19:29:31:03:04:09:26:22:93:40:9f:d2:e1:
f0:13:a3:2a:80:d2:0b:97:3d:9d:75:c5:68:56:04:19:45:6b:
87:58:66:28:46:9e:5f:d8:f8:23:a1:66:70:ea:b4:06:dc:0c:
f1:f3:68:0f:04:3d:45:8e:cf:49:c0:9b:4c:ae:af:95:43:2d:
ea:77:fb:c0:2c:cf:d6:3a:74:4f:87:50:11:a9:11:ca:35:00:
bf:c7:d5:0c:8b:32:82:7d:76:43:1a:d8:a4:fc:28:ad:8d:3e:
0c:56:66:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:44 2025 by rpki-client