Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: BVFNTzHu1EOYXM4VZvHWooeG6d2uIyOSC3pfXYHPz3g=
Subject key identifier: 5F:81:75:92:53:1E:86:22:01:EF:15:2C:FC:3C:F5:89:E9:49:49:D3
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 019A4E4FB765EAD50BA4267AAC7CB2075FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 10:00:38 +0000
Manifest this update: Tue 04 Nov 2025 10:00:38 +0000
Manifest next update: Wed 05 Nov 2025 10:00:38 +0000
Files and hashes: 1: NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa (hash: iAmQ4V4JG26ummlLKO90sg6lAyK0jGsDeoSWyDoF0l4=)
2: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: NzdLdjsIjp5PnFrCA6eiWN+9VK9jYqkSx/vEKHJ5W3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b7:65:ea:d5:0b:a4:26:7a:ac:7c:b2:07:5f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Nov 4 10:00:38 2025 GMT
Not After : Nov 5 10:00:38 2025 GMT
Subject: CN=5f817592531e862201ef152cfc3cf589e94949d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:b9:db:ce:93:9c:75:0d:77:1d:be:24:86:
1d:e2:60:a8:20:9b:05:94:b4:40:15:e0:7e:a2:4a:
3b:96:f3:bc:3e:a0:bf:73:88:1d:64:0c:f9:2b:52:
ee:70:d0:9a:4e:5f:d8:6d:0d:68:23:08:f2:7b:e6:
30:43:0e:08:95:6d:c5:23:70:06:f3:44:9c:f0:e9:
e7:9b:54:00:17:dc:af:6d:02:60:14:d6:e4:27:92:
c8:33:cb:9c:6b:f1:a5:39:21:45:96:df:79:92:92:
56:ba:c5:53:04:bf:41:1c:e6:57:aa:da:c0:c3:68:
42:c0:75:a3:d0:3a:00:59:c5:8e:51:3d:00:e9:43:
1f:2b:86:89:27:19:68:d4:3b:7f:cd:b6:ee:f8:ff:
b5:97:0b:29:20:f5:01:58:df:cf:15:b3:84:44:97:
cb:f3:e8:f9:85:91:d1:2c:bc:63:cc:f2:c3:31:29:
d7:93:6a:0b:9a:4d:10:40:db:c5:99:b7:b4:97:84:
a8:9f:23:c4:6a:1c:66:a3:98:8e:07:ab:a2:60:d0:
a1:71:03:8f:a9:3a:a7:4f:49:f8:2c:f8:da:35:fe:
fe:89:ea:31:44:b3:cf:ec:77:8e:36:05:25:0f:c5:
66:3b:90:52:b1:47:aa:a5:a3:f2:14:a4:3b:5a:aa:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:75:92:53:1E:86:22:01:EF:15:2C:FC:3C:F5:89:E9:49:49:D3
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4e:35:ba:96:98:f1:d2:b9:e7:0e:77:37:e8:8b:f8:20:e9:
4a:94:8b:cd:9a:5a:42:b3:8d:7f:89:41:5a:eb:98:0d:58:89:
18:9c:a9:e0:ea:37:29:82:10:42:06:0f:12:d6:3d:5a:fb:a5:
fa:a8:4f:90:cb:2a:a1:16:11:4b:6e:f8:77:b2:60:73:ba:48:
d4:c9:84:cb:93:6b:b2:4c:99:85:b4:dc:25:e4:3f:fe:a7:ad:
c9:3a:94:b7:20:fa:4d:eb:e6:da:79:a3:b1:a5:d2:76:d5:96:
75:92:09:3c:c9:f6:70:14:27:f3:5a:fd:7c:2d:77:3c:16:54:
7b:4c:34:e4:49:51:dd:c0:8f:82:88:be:87:05:7b:df:29:76:
3b:a3:a8:ec:68:8d:85:9d:1f:14:ed:83:8d:cc:ad:3d:9b:e5:
e2:80:0b:5c:4f:de:03:cb:87:6f:1a:9d:d5:5a:7b:fb:1f:d7:
06:dd:55:c1:1c:5f:25:99:1e:7f:41:00:7f:52:e9:cc:18:1b:
19:19:8e:bd:93:ae:43:5f:65:7e:dc:2a:6b:32:c4:22:43:ba:
32:c9:a9:fe:7d:90:26:01:88:11:4b:33:1e:31:bb:83:79:ba:
11:6f:d5:cb:5f:ce:1c:e4:ac:55:9e:00:db:bd:73:ff:9b:cb:
6c:5b:f2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:05:25 2025 by rpki-client