Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
File: R7dw6sinNj9MuKiMLjbi1pSzkGg.mft (raw, json)
Hash identifier: G0fzZJqn39uyKmI1+9vzHrGSN6AwEssdi7bm2CQBaS4=
Subject key identifier: D0:9B:AF:43:37:4B:AA:82:AB:DE:0C:02:4B:49:E9:B6:B2:2F:81:08
Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
Certificate issuer: /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Certificate serial: 019A4D7449518BBC5F7129A63609C641DD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:57 +0000
Manifest this update: Tue 04 Nov 2025 06:00:57 +0000
Manifest next update: Wed 05 Nov 2025 06:00:57 +0000
Files and hashes: 1: R7dw6sinNj9MuKiMLjbi1pSzkGg.crl (hash: xECDC+0bczQo8Z+rRlsxTRJjF9dfFrudSsO0Hv/Dkbw=)
2: eUJqNeMrOG92tkRoE1eKe7bdKA0.roa (hash: ZH26TI2Lx95OhTyG7ufuoqyGvbD2mq8daN9NRoWVAZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:49:51:8b:bc:5f:71:29:a6:36:09:c6:41:dd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Validity
Not Before: Nov 4 06:00:57 2025 GMT
Not After : Nov 5 06:00:57 2025 GMT
Subject: CN=d09baf43374baa82abde0c024b49e9b6b22f8108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:7c:0e:7f:f3:47:5a:3e:6e:02:71:33:ce:
b8:64:f9:eb:34:27:0e:57:0e:1d:c7:ec:6e:0d:81:
73:e0:36:3d:3b:d3:cb:79:a7:cb:45:40:f3:c5:c0:
bd:18:af:33:34:3c:59:7c:7d:06:70:51:df:cb:2d:
69:ec:6c:c0:59:e3:8e:b8:9c:9f:7c:4e:0f:c9:d9:
71:25:30:f3:d1:bf:b5:30:76:a0:4d:b1:6d:b2:7d:
c0:f0:c5:48:9e:4f:5c:45:43:8e:52:8e:bf:1f:c9:
b6:0c:83:cf:63:f9:74:b6:60:56:25:93:98:ef:33:
91:bb:b5:30:07:52:98:67:b1:59:50:c1:c5:c9:15:
b9:16:3d:89:d9:51:0d:7d:73:a7:be:0f:2e:9a:fa:
73:ae:4a:ac:b2:d4:15:8a:a3:f5:bd:4f:4d:df:a0:
db:cb:0c:18:53:86:ae:12:31:e8:3c:f1:6a:f2:ae:
a7:b4:52:e7:0f:b8:8e:f9:0c:0b:3b:3a:c8:d5:b7:
2f:da:d4:6a:5e:6e:65:09:9f:31:91:45:72:76:52:
ee:1c:0a:8e:2b:58:ce:d1:9d:fc:93:e0:ae:57:e3:
f7:e0:8d:b8:ec:6f:6b:6e:09:e8:bc:32:56:15:fe:
3d:fe:cf:2f:56:c8:d3:0f:01:b5:c5:10:1f:a9:1e:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:AF:43:37:4B:AA:82:AB:DE:0C:02:4B:49:E9:B6:B2:2F:81:08
X509v3 Authority Key Identifier:
keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e8:b0:18:e0:67:06:9f:66:b8:41:48:fd:ae:cd:39:20:0e:
2b:71:0c:1b:93:5d:44:10:bb:94:f0:6a:7a:c3:5e:96:be:01:
5e:b2:fe:66:a2:48:ec:46:38:54:1d:c4:43:d6:5d:cd:02:52:
ea:78:af:ef:18:dd:60:2d:80:29:c8:8d:7d:a2:a2:59:31:d8:
38:ac:9d:eb:75:ca:25:f5:25:a0:54:7c:ca:db:4e:3d:7c:bf:
7d:c8:1f:9d:c3:60:f1:12:6c:35:f9:b7:5b:7b:38:67:39:0e:
6f:e1:2e:15:dc:9e:7b:52:f5:f3:8e:25:65:53:f9:25:2d:8d:
f0:e4:06:5f:87:91:f8:0a:7e:b3:b9:cf:62:39:8e:07:55:f8:
19:74:f4:9b:bc:fd:d5:dd:f7:e0:01:8c:f3:d8:95:82:9c:6d:
2f:ad:d1:ee:dc:6f:c9:24:00:2a:04:5e:7b:dc:d4:ce:68:3e:
ff:50:e6:b3:46:42:69:ce:45:1e:83:9f:8a:0c:9c:04:65:ba:
3e:fc:81:5a:ff:dd:56:d4:ae:46:64:cb:5b:15:04:23:39:84:
03:9a:a0:b5:fe:60:65:20:27:81:79:3f:89:ac:c1:2e:32:6c:
e8:f7:25:8e:dd:42:bc:4a:5f:7d:fe:60:c0:b7:00:4a:fa:a9:
c4:fb:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:42 2025 by rpki-client