Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File: 0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier: im/CWnt19ORdkOcn4FWfosX3frUKnptyimz7PsqA93s=
Subject key identifier: D0:CE:63:25:AD:D5:16:20:9F:BB:24:10:FE:84:02:47:60:7E:BF:A2
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer: /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial: 019A503DEB5EFC8AE48784D6CF6CE53670E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number: F3
Signing time: Tue 04 Nov 2025 19:00:26 +0000
Manifest this update: Tue 04 Nov 2025 19:00:26 +0000
Manifest next update: Wed 05 Nov 2025 19:00:26 +0000
Files and hashes: 1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: HrVnQDVOp1ma+F0doxjyTFn9q2J8lV17F1Op2KpxELU=)
2: 1-7rqPeApfWB5OeXme1R2dxaURkI.roa (hash: G1AfCo2TRIj0s8Iv4o94YSbEJ+sCCm2M5yCwI2QU6Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:eb:5e:fc:8a:e4:87:84:d6:cf:6c:e5:36:70:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Validity
Not Before: Nov 4 19:00:26 2025 GMT
Not After : Nov 5 19:00:26 2025 GMT
Subject: CN=d0ce6325add516209fbb2410fe840247607ebfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:bc:80:28:11:49:15:87:11:f8:90:48:1c:
9d:83:f8:04:2b:9c:6d:71:d1:92:9c:96:d4:63:12:
5c:52:32:2f:d7:db:9b:f9:b6:19:81:42:1d:33:b0:
f5:85:59:e1:8c:2f:e1:af:e7:8f:a5:9d:36:3e:a3:
8d:29:36:fb:8f:b9:fe:c5:cd:10:5d:a3:9a:a4:e9:
43:31:86:b9:3d:1a:0c:2a:5d:77:e7:b7:b2:0d:1e:
ff:47:7d:6b:97:ec:28:e2:a2:f8:eb:63:e1:11:f9:
bc:7e:f5:0f:e3:d5:50:b1:c2:a8:a7:01:d5:01:87:
50:31:c8:79:df:4e:3e:74:65:80:b2:e5:49:33:8c:
f5:ba:f8:b4:ee:77:f8:4f:9c:c5:ae:bd:3f:29:fa:
66:1f:a4:ca:39:a8:fd:50:1c:4f:b2:0a:61:68:d4:
7c:f8:79:9a:ea:e7:24:2d:73:f1:28:87:d6:9e:ab:
c1:c1:16:12:8d:0d:40:d4:8e:2a:e4:bb:c9:b9:ac:
73:9b:a9:f3:fd:7a:52:64:10:25:bb:e7:4f:36:55:
5e:7a:77:86:49:e7:3c:07:e9:90:2b:3c:fa:6c:5c:
f8:cc:d7:ef:a3:fa:2b:4b:e0:13:b6:f4:d9:60:da:
f6:56:59:74:3a:d4:8c:e6:0b:73:68:31:4c:27:16:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CE:63:25:AD:D5:16:20:9F:BB:24:10:FE:84:02:47:60:7E:BF:A2
X509v3 Authority Key Identifier:
keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:15:0b:25:f6:5d:05:26:be:69:7b:c2:5f:b0:c6:5c:ec:b3:
dc:48:7a:2e:55:e0:66:b4:25:89:9d:eb:66:a7:00:eb:54:c6:
b1:cb:36:e5:98:e6:23:9a:e5:ae:95:1c:cf:3c:e0:50:26:42:
ad:7f:90:08:89:16:be:d1:9a:e5:e5:c7:51:cd:ff:ce:21:d2:
36:34:82:19:4d:ae:7d:2b:36:01:2d:f7:3d:b1:a4:4a:b0:03:
77:b2:f3:c3:ab:3f:64:34:2d:e0:74:b2:ab:7c:03:ae:f1:8e:
31:f0:8f:5e:52:64:6c:54:32:45:bb:37:c9:3e:ad:ef:85:f6:
1a:1b:07:e2:0d:03:56:38:8a:b5:d2:c8:e2:4c:94:48:05:f7:
36:25:e4:07:b5:ea:6f:1d:f1:7e:91:1d:34:f3:f0:98:0e:c1:
24:89:a6:4a:38:8e:24:d6:15:c2:83:36:17:6f:2b:e3:31:62:
cf:31:25:2a:19:cc:d1:7b:74:80:a8:29:36:a4:93:64:c1:09:
9c:78:f3:fc:65:c2:c8:f1:d4:49:51:e6:23:00:b3:37:a3:09:
c1:ce:df:4d:49:f4:90:da:59:01:d6:a6:43:85:da:98:f5:35:
75:45:e8:88:25:89:0b:3f:32:14:9b:0a:0e:7b:81:ce:91:e7:
7e:c1:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:19:14 2025 by rpki-client