Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: R7OFy/QE0unz1YP2t95NJiT5Hcpxcn05SDcefmDuh0o=
Subject key identifier: DB:7B:1B:3D:7B:D2:E6:B1:79:B4:AF:D2:C7:70:5A:AC:F2:A3:3C:01
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 019A51874F304BDA9C6F3CA621D8B05B843F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 01:00:13 +0000
Manifest this update: Wed 05 Nov 2025 01:00:13 +0000
Manifest next update: Thu 06 Nov 2025 01:00:13 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: +3ubvka2lnBr8B6qYFzGkuZ3Baq8ct6CsxOB9T81mmw=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:4f:30:4b:da:9c:6f:3c:a6:21:d8:b0:5b:84:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Nov 5 01:00:13 2025 GMT
Not After : Nov 6 01:00:13 2025 GMT
Subject: CN=db7b1b3d7bd2e6b179b4afd2c7705aacf2a33c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:01:d2:8d:8d:d2:8f:25:35:28:6e:40:a9:
e1:3c:bd:29:aa:83:f4:cc:70:6d:bf:75:9a:a6:15:
09:9e:a0:bd:e6:0d:81:64:a8:2d:be:70:34:da:80:
25:76:20:d7:d6:67:fa:bf:3a:03:54:dc:9f:a7:dc:
18:02:7a:55:1c:db:b2:59:64:d1:ca:24:13:6f:aa:
3f:a4:2a:29:47:cf:2b:17:72:18:27:d8:d8:64:d0:
a0:e2:f3:e4:89:b6:8d:27:1b:ef:20:f8:0a:04:9f:
ee:6c:5f:ab:fe:12:98:b7:73:49:4f:2c:2d:53:a5:
8e:5e:4c:01:88:ad:af:fe:6b:f5:0c:66:4e:26:d4:
e3:67:2d:6a:4f:b0:04:e6:13:cd:09:4d:16:f5:45:
cd:cf:33:18:3f:e4:e9:81:10:b8:fa:92:13:15:e5:
81:48:55:2f:5b:21:48:b5:99:dd:2d:2d:89:84:d1:
01:d0:07:bd:17:a6:d8:70:f9:9f:c9:b8:80:c2:ad:
47:9d:0e:48:da:95:56:a6:43:c4:cf:3c:f6:3e:24:
26:6b:ff:83:6a:d2:01:c6:34:eb:a4:78:0f:bc:20:
04:63:ff:fd:f6:08:4b:5e:84:35:f7:38:2b:f9:45:
36:36:40:4b:e5:ea:da:d0:5f:2e:5f:3e:5c:6b:8d:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7B:1B:3D:7B:D2:E6:B1:79:B4:AF:D2:C7:70:5A:AC:F2:A3:3C:01
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:25:e7:d7:21:d8:2c:56:cf:b1:ae:9a:68:5a:31:00:70:f8:
6c:c2:e2:29:0e:7b:f4:19:85:41:43:7b:74:bc:7a:b1:53:23:
9b:a5:80:76:4c:cf:06:03:eb:5b:68:15:1e:2a:fe:32:30:fe:
a7:52:e8:6d:21:dc:65:29:41:44:b0:e8:05:f7:d6:35:4c:a0:
f1:6f:c1:bc:cc:eb:a4:e2:a6:95:5d:5c:d9:f3:bf:e3:03:e9:
66:65:e6:1b:40:9a:e1:bb:a5:78:ba:ff:2f:16:72:12:ba:69:
4b:5d:4f:73:c7:a7:e4:ce:b4:90:d0:a8:1f:3d:c9:e9:4e:01:
52:ba:e3:38:d2:90:d0:a1:61:70:fb:4f:84:26:f1:43:40:ea:
67:96:0e:1d:ad:e8:58:22:ef:71:e4:32:38:de:be:9f:c7:54:
78:17:ae:f5:46:f8:60:ec:09:61:b5:3e:a7:16:43:90:a0:70:
69:54:77:30:f7:07:b4:96:28:e2:0b:f9:36:30:fa:81:e1:65:
0e:78:5f:c5:be:ec:3f:a9:66:65:b7:77:db:46:81:18:f9:4f:
dc:51:aa:6c:a6:71:81:dd:c5:5f:d7:42:be:e3:20:e8:39:3a:
d2:15:5a:7b:f5:22:a2:45:25:8e:57:fa:83:3a:78:98:0b:ea:
cf:e0:e8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:03 2025 by rpki-client