Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File: B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier: DQx97sWdMpcwDFacXMGr9otdhkcL1yz3qhkQVfN6hWE=
Subject key identifier: 53:35:DF:51:E2:69:AE:B7:66:02:41:2E:E5:B1:67:7E:2B:83:85:3D
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 019A5007172AFB683AD46E7B02BE4E14B406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 18:00:33 +0000
Manifest this update: Tue 04 Nov 2025 18:00:33 +0000
Manifest next update: Wed 05 Nov 2025 18:00:33 +0000
Files and hashes: 1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: RQmiojU2JjoI/hxNYHxlFv15TwJzONc1h5k2jbHEgTY=)
2: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=)
3: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=)
4: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:17:2a:fb:68:3a:d4:6e:7b:02:be:4e:14:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Nov 4 18:00:33 2025 GMT
Not After : Nov 5 18:00:33 2025 GMT
Subject: CN=5335df51e269aeb76602412ee5b1677e2b83853d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:25:7c:4c:47:95:7e:45:10:6e:48:d1:e3:
45:f3:3a:c4:0e:7a:6e:1f:ce:b9:ec:25:24:b3:69:
db:2f:04:ca:c6:a4:83:1f:f2:7f:94:63:2d:96:31:
d3:6e:f4:a7:8d:f3:45:4d:e2:89:72:8f:f9:3f:69:
9e:74:56:47:a4:de:6f:51:79:55:6d:c9:ce:4b:ba:
49:51:48:4a:ec:e9:ba:86:dc:18:69:a7:bb:8d:f2:
0a:33:86:2e:0a:53:89:b8:e2:10:43:74:03:72:57:
f3:b6:7c:b7:9d:7f:84:da:e8:13:24:cd:15:7e:d5:
92:b0:a3:e7:fb:a0:d0:48:67:7e:2a:20:60:3a:5e:
48:e8:5c:16:02:c4:1e:0c:e6:42:6f:74:60:a0:36:
cd:8a:30:9b:35:50:4e:7d:e6:80:5f:7a:d7:3c:ec:
ed:e2:b6:9f:1c:c6:18:46:78:c9:95:0f:7b:28:6f:
30:72:d5:7a:9d:8e:46:0e:10:6e:97:b8:b3:4d:dc:
44:3f:14:73:5e:a3:21:bf:b3:be:fc:56:82:ea:40:
ab:15:ce:56:98:b0:b8:36:97:44:e3:77:dd:34:dd:
82:2e:9f:2a:a7:e3:ab:b5:84:16:c2:9a:5e:16:74:
8a:52:74:3d:c9:e5:d3:dc:2b:ae:60:ac:77:9f:f2:
3d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:DF:51:E2:69:AE:B7:66:02:41:2E:E5:B1:67:7E:2B:83:85:3D
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:8f:6c:c3:76:2c:0a:13:55:cc:47:25:0f:54:bc:5e:5e:fb:
c8:a8:da:46:0f:5c:d0:b8:bd:f2:b9:91:d1:4d:ff:35:04:3c:
c8:24:6e:f7:e0:2e:2e:ea:86:4b:1a:f6:11:bb:65:3e:5f:c1:
04:2c:cf:20:2a:d5:e1:b6:b0:6c:e5:1d:d1:31:55:61:63:fe:
ab:c9:3d:fe:8f:e7:e7:31:ad:59:8a:14:e8:b6:7a:62:0e:6d:
61:66:56:82:b9:7c:2b:e3:22:77:97:9c:30:7b:f6:08:45:e4:
c0:be:a5:f1:db:a8:58:f0:d1:8a:34:07:3c:9e:d1:9b:4f:d1:
14:d9:28:1f:38:98:94:41:17:15:09:c4:18:df:81:e0:0b:f7:
e5:26:9b:24:cd:9f:60:e4:8b:43:54:64:e6:9c:5d:6b:0c:39:
7c:74:61:36:e4:d0:cd:65:7d:c9:06:fd:dc:2e:11:55:a2:15:
9c:62:e0:b2:2f:a8:17:03:ce:85:bc:d5:04:ba:ab:4e:63:55:
93:5c:b4:e5:3a:94:b9:9c:c3:d8:cf:c1:58:3c:fe:5a:d3:20:
f3:b7:42:b8:db:41:10:6a:ca:29:07:ff:c0:fd:45:25:e1:fe:
af:1d:78:e7:20:eb:8c:fb:b2:3c:56:98:8a:e9:9d:fa:2a:d0:
30:0b:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:58 2025 by rpki-client