Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: 1VED80AMP1G5O8FziRb+obqcfoIHDsUA9x7hYAMPmUQ=
Subject key identifier: 3E:98:02:27:37:5E:AF:71:18:C2:78:D2:83:13:91:BA:36:51:2A:48
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 019A54BFCDAF13A5A4B5FFC484C14A1682A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 079B
Signing time: Wed 05 Nov 2025 16:00:47 +0000
Manifest this update: Wed 05 Nov 2025 16:00:47 +0000
Manifest next update: Thu 06 Nov 2025 16:00:47 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: XUiqtUD0i2l902HXtno1VvmfgHeZby8HeeGoKe8zOdE=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:cd:af:13:a5:a4:b5:ff:c4:84:c1:4a:16:82:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Nov 5 16:00:47 2025 GMT
Not After : Nov 6 16:00:47 2025 GMT
Subject: CN=3e980227375eaf7118c278d2831391ba36512a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:a7:e8:f7:b7:5d:e1:d8:76:05:eb:07:3d:
79:59:b8:50:7f:e7:49:c5:06:9e:cc:f4:a9:b9:63:
2f:a0:6f:57:cb:d7:3e:df:52:f9:25:b3:a4:df:3b:
b0:25:39:e4:93:ac:20:64:ad:3c:86:57:8a:d6:25:
ce:a4:58:25:49:c7:7a:bb:30:57:93:a9:0e:b6:b7:
27:84:47:d3:e0:02:92:50:6b:45:b4:6f:f6:d5:a3:
13:f9:03:2e:f8:b0:b5:78:38:19:aa:41:d9:e6:c1:
b6:72:f2:27:8f:72:45:28:55:db:21:5b:d2:51:1f:
58:83:f2:a8:d4:6c:1a:32:89:de:17:db:8e:f9:46:
d7:bb:30:74:6f:f7:ad:50:76:b7:79:95:ed:18:8e:
0c:57:4d:6a:f1:a3:4b:3a:2d:96:89:5a:f4:bd:bd:
8a:59:76:26:44:1c:97:ef:ba:21:49:b1:4b:c6:49:
35:4d:f3:44:d3:fb:45:d2:8c:9a:bd:f4:a8:2d:d5:
ca:a7:47:5a:9d:da:07:46:4f:37:53:8b:41:4e:9c:
1f:18:a3:11:6b:6a:19:60:cc:34:01:f6:a5:bd:ac:
41:30:32:08:b8:c9:59:54:76:d3:1d:60:38:c1:c6:
cc:8c:55:2f:a3:32:9f:c4:4d:71:9d:f7:9d:14:eb:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:98:02:27:37:5E:AF:71:18:C2:78:D2:83:13:91:BA:36:51:2A:48
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:74:28:b9:7b:ae:55:01:f4:de:20:e2:c1:bc:99:b9:8c:3e:
58:6f:48:a3:ea:ad:dd:4c:49:91:e5:c0:d2:b9:c3:10:25:6d:
58:c7:e3:97:b7:db:d2:57:09:35:92:fe:ca:25:20:07:b4:e1:
60:91:13:a9:8c:34:1c:96:9a:87:bf:1a:af:4d:49:01:d4:da:
a7:6e:40:d1:9a:be:44:82:f9:1a:10:3e:fb:40:b3:c7:65:82:
cf:42:e0:5b:63:54:89:ea:ed:f1:37:73:eb:88:e0:34:5e:74:
89:bd:bd:f9:d3:ac:12:f4:f3:b2:e6:cf:50:e6:af:6c:ba:25:
08:0a:c3:c5:75:cc:99:1c:58:f9:cf:85:bd:7c:48:65:84:c7:
98:e5:18:51:1c:39:d3:af:4a:6c:98:cb:56:90:ff:b0:c7:6b:
9d:2b:aa:27:23:b0:61:9b:6b:d3:03:78:07:d0:3d:0f:c2:77:
ec:50:dd:33:e8:19:88:2f:d1:7b:3a:ae:29:9e:af:5b:f2:6a:
16:95:c8:81:3c:c1:9c:c3:dc:0c:ed:d9:60:ea:62:b8:fd:00:
a5:6f:64:50:22:4a:ea:36:d2:0a:a6:55:c6:14:ac:93:27:1a:
76:63:60:53:99:6a:f3:08:2a:10:4b:15:86:36:42:8b:b6:45:
d4:9d:f3:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUv82vE6Wktf/EhMFKFoKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0M2I2N2I5ZDRjOTljNzI1ZTM1N2Q4MTc0ZmI3ZTAyNGEx
NTAyZTIwHhcNMjUxMTA1MTYwMDQ3WhcNMjUxMTA2MTYwMDQ3WjAzMTEwLwYDVQQD
EygzZTk4MDIyNzM3NWVhZjcxMThjMjc4ZDI4MzEzOTFiYTM2NTEyYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJWn6Pe3XeHYdgXrBz15WbhQf+dJ
xQaezPSpuWMvoG9Xy9c+31L5JbOk3zuwJTnkk6wgZK08hleK1iXOpFglScd6uzBX
k6kOtrcnhEfT4AKSUGtFtG/21aMT+QMu+LC1eDgZqkHZ5sG2cvInj3JFKFXbIVvS
UR9Yg/Ko1GwaMoneF9uO+UbXuzB0b/etUHa3eZXtGI4MV01q8aNLOi2WiVr0vb2K
WXYmRByX77ohSbFLxkk1TfNE0/tF0oyavfSoLdXKp0dandoHRk83U4tBTpwfGKMR
a2oZYMw0AfalvaxBMDIIuMlZVHbTHWA4wcbMjFUvozKfxE1xnfedFOsAYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6YAic3Xq9xGMJ40oMTkbo2USpIMB8GA1UdIwQY
MBaAFEQ7Z7nUyZxyXjV9gXT7fgJKFQLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTIt
YzgzYjVmYzI2NTQ1LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTItYzgzYjVmYzI2NTQ1
LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3QouXuu
VQH03iDiwbyZuYw+WG9Io+qt3UxJkeXA0rnDECVtWMfjl7fb0lcJNZL+yiUgB7Th
YJETqYw0HJaah78ar01JAdTap25A0Zq+RIL5GhA++0Czx2WCz0LgW2NUiert8Tdz
64jgNF50ib29+dOsEvTzsubPUOavbLolCArDxXXMmRxY+c+FvXxIZYTHmOUYURw5
069KbJjLVpD/sMdrnSuqJyOwYZtr0wN4B9A9D8J37FDdM+gZiC/RezquKZ6vW/Jq
FpXIgTzBnMPcDO3ZYOpiuP0ApW9kUCJK6jbSCqZVxhSskycadmNgU5lq8wgqEEsV
hjZCi7ZF1J3ziw==
-----END CERTIFICATE-----
Generated at Thu Nov 6 01:20:40 2025 by rpki-client