Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: ZxOdpEsxbRCQPywmAQ5oZAS3sectBYdJ9KlB1FYmf90=
Subject key identifier: 58:17:65:39:D7:91:7C:77:17:A5:62:BD:76:63:C6:0D:D5:A7:B5:1F
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 019A503E11FE6AA5B793DA2E26B3BA87D26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:36 +0000
Manifest this update: Tue 04 Nov 2025 19:00:36 +0000
Manifest next update: Wed 05 Nov 2025 19:00:36 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: wJVkA+FfUPjHmEMnygBmZKuGukj4plJmTn9zeT4gGG8=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:11:fe:6a:a5:b7:93:da:2e:26:b3:ba:87:d2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Nov 4 19:00:36 2025 GMT
Not After : Nov 5 19:00:36 2025 GMT
Subject: CN=58176539d7917c7717a562bd7663c60dd5a7b51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:8c:5e:fd:10:cc:49:a5:e2:0e:8f:f7:26:
fc:18:f5:85:9c:d3:6b:40:a6:67:5b:f5:81:6c:cc:
11:1e:66:82:fb:2e:31:6c:6a:d9:be:ad:44:97:d6:
c0:79:04:e9:50:41:7a:5f:3e:aa:08:41:19:fa:a6:
aa:1b:30:ef:97:18:e3:5f:11:c2:ab:2f:31:12:64:
fc:9a:9a:cd:27:e6:03:6b:aa:4d:6e:f9:2f:8a:92:
6b:4f:87:4b:f8:f5:dd:ea:e5:d5:ff:68:4c:c7:2b:
e0:7b:ac:b9:c5:f8:ed:c7:55:d5:39:e2:14:84:8d:
ec:64:9a:c0:ab:5e:43:bb:a0:4d:b5:79:79:b8:a8:
e3:14:8a:39:ed:7b:51:c6:7d:31:5a:67:d2:f6:50:
9a:4b:f8:eb:03:aa:9f:b1:8b:f7:9b:70:4c:6d:a8:
82:20:f0:2d:ab:9c:7e:34:fe:f2:18:57:99:0e:51:
5a:29:a9:e2:11:9f:e9:51:62:08:19:ce:0a:a5:04:
e0:55:b0:78:8c:5f:1f:7e:8e:f8:28:9a:3b:b0:2b:
10:a9:08:6a:fc:53:ed:54:3d:08:fe:dc:7b:6f:0d:
61:7b:df:1c:6c:e6:82:67:5d:d1:51:f1:91:3f:fe:
1d:f9:79:b7:1f:23:68:0e:14:ff:f3:85:a2:2e:0a:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:17:65:39:D7:91:7C:77:17:A5:62:BD:76:63:C6:0D:D5:A7:B5:1F
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ba:af:81:e3:1f:69:99:a6:b7:9e:88:12:91:3d:75:8f:46:
8b:54:b4:e2:b4:c0:e0:cb:d4:cc:b2:8e:6c:15:f6:26:77:45:
46:a1:0d:02:53:3b:95:37:b2:ee:cb:04:82:76:9f:11:70:c1:
95:f5:e4:69:b8:08:cd:cc:ca:a4:22:0b:a4:69:71:24:ca:c2:
90:67:65:d9:fc:5d:21:34:8b:0e:11:71:da:fb:26:0f:b5:4d:
d8:5a:4c:e6:4c:3b:c3:b8:4e:ee:25:01:06:12:61:b1:e3:34:
3b:95:ad:11:71:70:25:d2:66:c5:77:9b:06:ca:09:72:2e:0a:
c6:98:bb:35:54:de:5d:dc:cc:de:7c:3d:cd:81:ae:c0:9f:ab:
28:d4:63:89:0f:5f:4c:87:81:5b:e9:bc:fc:63:50:0d:da:de:
b2:c5:ea:de:73:91:7a:cb:66:b1:9b:a9:c3:f1:94:53:8a:e5:
d4:45:43:72:bc:6c:49:28:1b:d5:67:e0:b8:fe:58:36:25:25:
08:11:f6:d9:db:7a:e0:dd:7c:37:1c:a3:52:4b:b7:29:2e:71:
aa:41:70:1e:ac:76:3b:7a:10:68:97:43:2b:35:48:90:97:27:
aa:a5:2a:d8:e4:19:49:86:92:c8:5b:63:2c:c7:b9:65:b5:ca:
14:16:ee:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:36 2025 by rpki-client