Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: BhkrjTYB1Jc1JwRfcG+bs+U9Qq8p7G6GXzOOSujH9/c=
Subject key identifier: 67:06:BF:5A:E8:08:6B:68:4A:71:CE:59:E4:9F:9A:74:36:74:E1:AB
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 019A4D3D49772AD3EC0A9D591A164D6A5885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:53 +0000
Manifest this update: Tue 04 Nov 2025 05:00:53 +0000
Manifest next update: Wed 05 Nov 2025 05:00:53 +0000
Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: lnkYBkOnEceu/f3244dO14Nx0+wIisQ991PeHmhwwf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:49:77:2a:d3:ec:0a:9d:59:1a:16:4d:6a:58:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Nov 4 05:00:53 2025 GMT
Not After : Nov 5 05:00:53 2025 GMT
Subject: CN=6706bf5ae8086b684a71ce59e49f9a743674e1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:f9:95:7d:91:6e:ed:66:71:00:77:8b:56:
26:1b:b7:0e:a9:02:39:81:a4:e8:9a:a2:65:b8:79:
4b:c0:0a:02:55:e3:d2:c8:18:2d:8d:cd:bd:22:23:
7c:e3:b3:a3:f7:fe:90:83:ca:2b:a4:38:35:b4:d6:
f7:21:8c:4d:fb:f0:c4:f6:22:a6:a2:be:fb:d7:69:
6a:a5:c3:5f:74:10:c9:15:42:51:d6:ea:16:50:96:
73:24:ae:87:73:0d:bd:ad:3c:40:31:7b:0d:65:52:
36:4a:ef:b8:12:73:62:a3:c8:12:4d:c4:11:3a:1b:
89:32:7f:b1:eb:71:d7:54:cd:a1:b2:f1:dd:a8:e9:
e6:f5:67:a8:e3:c4:97:26:8d:e1:21:7c:94:07:13:
58:57:ad:29:6a:0f:7a:6a:3b:2b:7d:23:b1:36:ca:
2e:bf:b8:a8:96:91:7f:d1:c6:fc:1a:de:ad:f2:7f:
ce:f0:4e:26:47:37:4d:fc:3d:03:85:e8:ae:a1:6e:
cd:39:56:3d:5b:68:53:34:6c:c3:a3:30:ad:ba:26:
7e:32:c9:c3:65:4c:ed:4d:29:c1:ce:e5:09:81:57:
ef:dc:bb:ac:79:34:d6:b2:a9:55:c2:f0:8c:33:05:
da:ab:18:b1:e4:52:8f:6e:7f:0e:e1:a7:0b:76:37:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:06:BF:5A:E8:08:6B:68:4A:71:CE:59:E4:9F:9A:74:36:74:E1:AB
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:7a:50:a0:fe:99:b4:ea:58:d9:b1:a8:3b:b9:67:ed:23:b1:
74:a9:c5:c7:e7:f8:88:87:6a:f9:e2:36:35:1d:56:dc:62:23:
50:f1:1c:74:f4:a9:e7:8f:29:36:14:dd:ee:f0:67:02:f8:3a:
7b:88:3c:44:6f:5d:e1:db:6e:61:0a:b6:9b:0e:e2:7a:8a:2d:
46:34:44:e9:49:68:4a:7f:db:3c:17:0c:8e:18:ba:78:ee:47:
76:a1:2a:b1:5e:4f:73:91:02:2a:5a:7a:ea:96:52:0c:1b:80:
31:29:e1:89:6b:42:eb:d6:af:7c:b0:94:f3:28:c5:ce:e7:eb:
91:ea:2e:3e:89:07:13:bf:e4:f8:8f:d1:6c:01:ff:57:bc:ed:
fc:77:7f:d1:69:0d:ae:1b:c7:ca:7b:cb:bc:bc:15:76:c5:d3:
ad:f7:b4:ec:d1:c0:1b:7b:d7:78:72:a3:51:2e:a9:23:f9:4e:
59:7c:4f:5f:a5:d0:9e:63:30:d3:55:14:6d:f7:a2:9d:54:de:
d5:00:a9:a7:df:fc:b1:54:28:04:ca:27:88:18:7e:43:ed:b6:
f8:d0:4e:62:e1:ce:ca:2d:7c:7e:d7:4d:11:7f:f2:fd:05:43:
c2:b7:89:e2:e6:8c:ed:dd:54:29:58:37:cd:39:ed:cd:fd:10:
c3:47:f8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:20 2025 by rpki-client