Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: qdMbg7CXMS7dDRWvgHOqF/bvqkwWVjT6bjdRafc5Ozc=
Subject key identifier: 22:D2:CB:47:5A:03:4E:9D:E9:DF:D4:DC:64:98:47:16:F6:EB:6C:52
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 019A4DE2089DEEBD8940B2D37C88523B3174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:50 +0000
Manifest this update: Tue 04 Nov 2025 08:00:50 +0000
Manifest next update: Wed 05 Nov 2025 08:00:50 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: Pd/s4pMWnXlE55DV1E1/KBhwgtKYjHIio8HSBcuUc3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:08:9d:ee:bd:89:40:b2:d3:7c:88:52:3b:31:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Nov 4 08:00:50 2025 GMT
Not After : Nov 5 08:00:50 2025 GMT
Subject: CN=22d2cb475a034e9de9dfd4dc64984716f6eb6c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:f2:91:67:0e:3e:f0:19:a6:75:35:aa:d9:
cc:ac:db:6d:32:f6:26:6d:e5:3a:01:f8:30:de:3d:
34:0a:cc:03:f2:a2:7b:67:d9:0a:90:4c:3e:07:d9:
ab:8f:e9:08:1a:62:22:b1:43:10:40:a2:8c:a0:cb:
e3:9a:2b:a3:b6:4e:1e:56:da:35:f2:23:cc:76:32:
b5:c3:ba:33:87:fd:4e:17:99:e9:bc:a4:76:62:68:
75:8b:44:d1:31:16:90:30:9b:8a:d8:29:ab:2f:9e:
54:bf:70:84:bd:21:b8:53:c2:4b:df:47:56:1d:27:
81:34:0c:a7:89:c0:47:94:d9:f8:f4:6c:e2:5a:05:
33:25:05:e8:e8:9d:17:b7:b3:0a:6f:fb:9e:24:39:
93:fd:03:31:82:00:27:36:cf:9c:79:01:6e:52:57:
79:ad:b4:f3:86:0d:1d:a0:17:45:11:48:7f:5f:d5:
d1:d2:33:df:11:6d:a2:43:4e:c9:32:92:55:04:40:
4d:af:79:eb:05:da:b4:c1:ea:20:01:b5:52:19:bb:
3e:ea:31:35:70:77:8c:d2:42:8a:41:d5:f3:97:0b:
6f:1c:59:4e:38:72:e1:4e:ad:60:c3:0e:51:8b:87:
de:7b:15:ec:80:fa:bf:af:5f:b8:1e:14:47:39:b0:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:CB:47:5A:03:4E:9D:E9:DF:D4:DC:64:98:47:16:F6:EB:6C:52
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e3:50:4d:dd:e8:59:d1:a4:5b:69:32:1f:f8:82:24:10:3a:
82:41:32:88:8c:21:8e:46:6a:be:74:b5:59:ed:52:1f:f4:56:
83:61:b6:0a:8b:72:a4:34:ca:65:93:95:fd:b5:c5:73:2b:3f:
ad:12:8a:fb:67:43:a4:b0:09:06:ee:d8:7d:8a:9f:fd:c3:66:
78:e4:a5:62:99:0d:97:e2:32:1b:09:db:18:20:87:ae:d7:ac:
ec:c7:e0:12:b0:30:01:74:71:23:1e:44:03:50:4e:78:61:30:
89:6b:3e:4b:fd:ca:d7:73:62:dd:dd:c4:4a:52:96:0e:7a:1a:
99:20:39:46:ad:e8:2b:87:87:67:4d:8c:24:5d:12:de:de:4c:
79:74:21:78:66:22:4f:6b:b2:29:8f:77:20:f6:0c:8f:42:e3:
df:80:f1:54:15:e8:95:49:92:f7:bf:5a:45:2b:a2:87:38:45:
d0:50:bb:d6:7a:7f:7c:e9:92:d7:9a:8c:4e:a1:a7:90:bf:18:
66:1a:df:93:23:50:55:1d:08:38:29:6e:f5:50:69:6b:dc:4c:
22:f6:0a:a6:15:75:ed:22:bd:a2:a8:f3:5c:3b:b0:be:96:1c:
59:5c:99:5d:86:19:2f:46:a9:00:cf:1f:d7:15:d5:54:8b:94:
0c:2a:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:24 2025 by rpki-client