Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: oSYjzYZ1im0BHxM9azWOfR3Qj7m+kZFsXB+ftA6xJiQ=
Subject key identifier: B0:D2:7F:5D:82:2E:5D:D9:FA:69:FB:DA:1C:17:48:57:47:FC:08:79
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 019A4E188C70408C24AD8C9D39D93B6CF33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: Z2V/isGwlZNUZ6LYulRwhFWY5ptkX++BSYOlbebG0Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8c:70:40:8c:24:ad:8c:9d:39:d9:3b:6c:f3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=b0d27f5d822e5dd9fa69fbda1c17485747fc0879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:2a:8b:41:cc:80:7a:22:63:fe:39:95:7b:
d6:0d:97:56:7e:25:f5:31:a1:7f:7d:2f:95:c1:73:
51:5f:f3:91:27:ae:7e:d4:5c:21:61:b5:51:bb:39:
af:4e:a3:ce:a0:21:37:29:a1:b4:e6:b2:f5:a3:e5:
4e:f2:2d:d8:c1:bd:90:7e:ae:fb:e1:75:1b:3b:2d:
58:96:3a:f5:67:4d:6a:e1:fd:d6:2a:8f:46:3b:40:
fb:c8:a3:61:ff:ea:d6:f7:d5:48:f9:9b:e9:48:60:
15:ab:8b:34:2e:3b:0d:83:44:2a:96:58:83:b3:2c:
d7:16:10:19:00:e3:8f:99:3f:b9:de:66:be:3f:ab:
7e:62:3e:86:4e:e6:4a:b1:3e:52:33:eb:2f:1e:4f:
00:5b:6d:ed:8c:82:d3:98:4c:ca:0b:c4:15:19:0c:
32:ce:9c:8e:60:af:25:e9:67:e8:a0:b1:26:bd:f4:
41:51:bf:32:1c:29:72:89:89:50:60:0d:be:c7:70:
51:74:c7:7c:aa:a9:ef:64:e7:97:8e:8e:a2:ba:41:
99:14:00:29:a0:20:71:4c:14:c7:23:66:7a:58:66:
2c:4d:22:32:2f:29:3f:72:8c:7c:68:84:3e:96:c0:
a3:1e:1c:0b:0e:32:9e:3d:24:07:21:84:fb:77:e5:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:7F:5D:82:2E:5D:D9:FA:69:FB:DA:1C:17:48:57:47:FC:08:79
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:29:08:08:8a:4f:69:6b:1f:07:78:3e:81:e0:09:2d:57:
7f:58:af:64:14:86:ca:ce:b3:cb:2d:2b:b3:07:27:e0:b5:0a:
4b:59:b7:ad:4f:07:ba:3a:14:8c:be:61:4a:0a:98:1c:56:1f:
73:02:05:bb:47:8f:83:43:64:87:9b:f6:71:fc:a3:87:64:0b:
bc:71:d8:68:15:69:8a:13:4a:f7:6e:93:17:85:b6:0d:94:8b:
8b:e0:fa:df:19:3d:10:ab:45:69:30:ae:de:24:7e:8a:85:87:
bb:6a:d0:92:96:a1:52:3f:f3:86:7a:5f:9f:63:aa:59:16:64:
cd:26:9a:c0:99:80:11:b8:49:69:c6:68:98:40:44:04:c1:30:
41:be:09:c4:cd:36:82:15:86:e6:75:c8:d8:57:19:4d:4f:79:
0d:ca:8b:d8:59:02:81:f1:18:6c:61:db:fd:d6:1d:a9:b4:d3:
15:83:fc:39:a1:d4:81:93:73:bc:20:60:eb:14:ec:3c:ca:48:
78:a7:7d:cf:0b:ce:2e:ab:42:d6:8e:b1:4a:76:9e:d4:93:df:
04:db:04:01:38:24:2d:9f:bd:ca:c7:96:42:4d:b6:ca:15:7a:
5b:b5:2f:e7:85:11:69:e5:ab:90:ea:06:b5:03:f2:f6:ad:e1:
63:96:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:24 2025 by rpki-client