Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: xJr2gA3ZdDrpckLCbUuK0blERiv2C9kWL624cfEtFOg=
Subject key identifier: 11:CC:04:32:4A:2D:4C:05:A2:C8:22:EB:C6:F2:DD:2D:FB:36:CD:FA
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 019A4F2B05BABEC755B286076409C110A776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=)
2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=)
3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: M47YuOYh+Z/34zWbAbRdjNPfkvO559Pfr/my/5xBlyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:05:ba:be:c7:55:b2:86:07:64:09:c1:10:a7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=11cc04324a2d4c05a2c822ebc6f2dd2dfb36cdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:7d:be:f0:0d:0b:86:19:7d:9c:1e:a3:7d:
49:60:a8:fe:df:fe:a0:f1:5f:ca:2a:b0:d7:f0:7f:
27:d9:94:91:ca:af:43:7a:00:a6:15:4f:ed:3d:33:
9d:d5:27:23:23:21:59:a7:8e:c6:e7:55:22:09:87:
45:d1:74:20:9d:f7:07:f5:5e:9a:73:43:a5:68:8a:
ee:92:a1:44:d5:e2:ca:8c:cd:7d:17:37:33:90:b7:
87:bb:1e:8f:42:0b:91:b9:05:5d:0d:3a:e9:d9:37:
ff:53:fc:ac:a6:a9:fc:27:03:7b:5e:fb:6b:80:c0:
d0:40:01:9d:de:7d:4b:39:91:39:53:89:fb:40:cc:
a9:36:56:a1:3b:ce:d9:b2:70:49:a8:57:9d:73:6b:
84:0f:42:be:7b:7a:fd:91:d1:78:7c:75:2f:ca:0e:
c7:8c:ff:8c:e6:03:e1:52:74:45:d6:0c:48:31:23:
9a:d0:95:a0:6c:f9:54:90:c5:4e:ca:05:c0:18:3d:
a4:c0:f9:17:c5:3c:a6:19:57:1d:5f:84:63:ed:0e:
b4:a4:0a:1d:a0:44:d3:a4:8f:e5:02:13:e6:73:c4:
07:67:bc:82:f8:c8:3f:c0:0d:8b:c7:76:77:e0:0f:
54:13:38:0a:d9:da:ed:db:cf:d4:de:4b:56:35:63:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:04:32:4A:2D:4C:05:A2:C8:22:EB:C6:F2:DD:2D:FB:36:CD:FA
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:97:15:0a:6c:ae:0b:c7:ef:5b:2f:a0:b0:06:52:a0:27:40:
c4:5e:d9:a5:a3:f8:e6:ba:97:3a:fa:b2:a0:f3:78:d8:af:a0:
34:77:4f:61:20:96:e1:21:01:fe:03:98:8c:4e:65:94:e0:54:
62:f3:04:1c:84:d4:e6:a4:be:2d:a4:3f:17:3b:b9:57:09:d3:
ac:cc:18:10:19:d0:37:59:ee:51:1e:17:d5:0a:76:fa:f1:54:
5e:b5:2b:ab:05:1a:87:ca:37:1a:61:bc:41:5d:07:7f:34:b0:
cc:7e:be:9f:28:c7:54:2f:00:58:ca:5c:7f:e9:39:d1:53:04:
fb:8b:eb:f9:c1:4d:f2:62:79:c2:5c:27:b0:44:c6:33:e4:a5:
96:47:5b:62:34:93:a3:fa:0c:4d:d5:13:d2:94:99:1d:05:df:
66:41:58:21:72:ec:c0:96:b7:b4:95:6a:f5:86:f3:5d:e3:d0:
fc:df:bb:9e:7c:4b:57:d3:e7:64:31:88:1b:bb:50:e4:e3:2a:
4c:b1:fd:73:3f:ed:e8:40:c0:bd:b5:08:58:94:e9:eb:47:6f:
cf:ed:d2:b7:29:34:dd:71:11:96:8c:65:1e:3a:99:ed:14:b5:
b7:07:2c:4d:dc:ce:d5:2b:43:2a:dc:94:92:86:fd:01:6b:29:
c8:59:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:44 2025 by rpki-client