Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: KZ+NjARPVUYlgmr46Uz/3/SINSXnLAHyubDiWXT/J88=
Subject key identifier: DD:33:82:D1:5A:47:88:6A:AE:7A:7D:71:26:56:96:E2:1D:65:37:AC
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019A522CA7FEB32E5602987D0C3E8914DB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 0158
Signing time: Wed 05 Nov 2025 04:00:49 +0000
Manifest this update: Wed 05 Nov 2025 04:00:49 +0000
Manifest next update: Thu 06 Nov 2025 04:00:49 +0000
Files and hashes: 1: YkbGKc-LGqIQZMDerpDN8XDOTbw.roa (hash: RY+DUa9ZajYzyfuzC6xFjBj7ICr29ESsVlrxpHdgeWw=)
2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: qW2es2xhdFcqV49GXOP8juu+E/HN+oqAUtQt8lfI8xo=)
3: zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa (hash: OEzd69K7Il75QSQW6UQvA0dRBfsE2azJdJL9XybJ68I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:a7:fe:b3:2e:56:02:98:7d:0c:3e:89:14:db:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Nov 5 04:00:49 2025 GMT
Not After : Nov 6 04:00:49 2025 GMT
Subject: CN=dd3382d15a47886aae7a7d71265696e21d6537ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:9a:35:83:ba:5d:93:7a:f1:24:82:9e:20:
7f:a0:4b:e8:05:04:07:70:73:0a:df:e6:80:72:bb:
f0:37:5b:d0:f8:d4:e8:b3:14:f9:52:b5:96:d8:29:
ee:a2:91:d1:2d:70:ef:5e:83:13:96:b6:c4:66:02:
a6:44:2a:63:5a:e8:a0:75:16:8e:20:51:34:eb:57:
f4:8e:0c:f5:85:3b:39:f6:bf:79:97:ee:af:a6:02:
b5:4f:79:6b:df:86:69:4d:a5:2a:78:30:03:54:be:
66:30:e1:ac:a2:a4:49:a0:93:34:17:75:ce:f8:f7:
e9:bc:74:4a:d0:c8:d9:37:93:56:0e:50:67:20:ea:
12:48:45:9f:2d:83:5f:2e:8a:ff:5c:02:a2:dd:59:
2d:be:d2:19:df:c3:56:78:88:ac:6a:07:88:56:b5:
4e:49:4e:9c:60:ca:2c:aa:e9:7d:d5:b4:47:20:cf:
61:6b:ef:dd:a9:d8:b2:bd:75:40:a9:a9:65:16:90:
90:d6:24:87:af:27:ff:c1:73:39:12:2e:97:4c:95:
71:05:3e:e9:e4:36:21:25:fa:f5:eb:32:fc:8e:80:
59:59:ce:61:13:9a:53:9c:ad:4b:8c:86:d5:d5:70:
06:0c:a3:8c:10:a3:2b:8b:8b:e5:22:83:29:54:7a:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:33:82:D1:5A:47:88:6A:AE:7A:7D:71:26:56:96:E2:1D:65:37:AC
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f4:b3:c0:9b:0e:aa:c9:57:b5:8c:29:45:5f:e4:ac:27:e0:
db:56:45:c7:c1:42:d2:26:80:0f:55:4a:c1:53:83:25:1c:87:
f5:f9:29:61:8c:27:b7:5b:c0:95:49:45:da:cc:2b:24:3a:01:
82:84:a4:b4:23:74:59:10:44:a5:c2:08:db:f3:0d:e3:1e:de:
58:c6:50:b3:4b:8d:f2:28:57:47:a9:9e:04:eb:8d:31:eb:00:
40:80:bd:2f:19:db:fa:20:11:f8:7e:a4:18:91:3b:28:24:dc:
3b:16:1a:89:71:b9:9c:41:c1:de:46:95:cb:da:20:90:a3:0d:
44:39:42:d1:be:93:b6:da:fd:af:32:2e:60:6c:fa:a4:76:16:
f4:a4:a9:9d:7a:ee:58:9a:45:ca:d3:9b:9d:da:e3:fc:78:a3:
39:09:dc:d3:c3:50:12:ce:96:aa:5e:b0:6b:8b:95:61:8b:28:
c9:6d:5e:bf:a0:af:19:b7:42:9b:ba:59:e0:03:9a:2e:23:04:
2b:91:77:c6:4a:0d:dc:41:b4:a3:f2:4c:32:05:61:6b:fe:fd:
05:22:8f:02:90:6d:94:b4:e0:a0:f2:8a:b1:58:29:90:32:d9:
71:7f:56:a5:d8:d8:2f:90:a5:1b:30:c3:f2:93:d4:ed:72:4c:
41:87:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:14:24 2025 by rpki-client