Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File: 06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier: p1x/dFdW/yOJSQvTFiiLVw4tzkWh0xI1BLgiLE3lmpE=
Subject key identifier: 78:17:6A:24:0A:1B:F1:9A:94:13:36:3E:D2:31:42:EC:6E:9B:B5:F2
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial: 019A4F62AC30741ED9B0B19A7D582B870599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number: 04FE
Signing time: Tue 04 Nov 2025 15:00:57 +0000
Manifest this update: Tue 04 Nov 2025 15:00:57 +0000
Manifest next update: Wed 05 Nov 2025 15:00:57 +0000
Files and hashes: 1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: ZPZc2jG0DwcNnhlf4FMntGuEd5B6LjHHQ+xRBnZPcXY=)
2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
3: rQUKCahIBhl3q6X_ssqHaslUPkw.roa (hash: oqWMNr1y2jXmtuppkY6LyFtpsdVUxnQjZycMv+hYavM=)
4: tFTfuySubfSrRVHUhxYeF1u80Zs.roa (hash: fQsA3U2f82hs7Bti4LUoQIz7rVn7qpzt4RTZ9jhDkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ac:30:74:1e:d9:b0:b1:9a:7d:58:2b:87:05:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Validity
Not Before: Nov 4 15:00:57 2025 GMT
Not After : Nov 5 15:00:57 2025 GMT
Subject: CN=78176a240a1bf19a9413363ed23142ec6e9bb5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:2e:70:fa:b9:19:3a:18:0e:44:15:7c:11:
60:41:58:7a:71:5a:79:8b:cf:35:c3:d2:c9:61:5d:
e2:d4:0e:32:ba:68:2b:6a:bb:b3:32:77:4f:c9:f0:
37:55:37:ee:6b:3d:b1:64:cf:00:54:9f:8b:9f:ec:
95:8c:de:cd:b9:b3:63:42:df:13:d6:d0:32:a6:3e:
f1:0f:3e:69:df:c0:5b:d3:5b:bf:76:ab:7c:68:17:
ac:79:c6:11:81:0b:01:b7:67:fe:4a:9d:90:8b:1f:
5c:69:a2:42:44:7e:19:52:5a:11:31:ba:e9:74:d8:
40:e7:6e:9f:a7:01:73:2e:e3:9a:bd:2a:d4:1d:55:
91:9b:c2:f1:72:e4:ec:86:4e:3d:a0:6d:df:b2:4d:
0c:7f:9a:ab:6f:f9:37:ba:c6:3f:e5:1d:59:27:2f:
00:25:63:08:71:af:f7:db:2a:c3:2c:18:6e:48:5f:
0a:a4:26:83:6e:3a:2a:29:37:02:35:6a:8d:1d:3a:
f8:7f:40:cc:d1:1e:b9:95:ab:ad:ed:ec:47:5f:25:
58:15:a1:2e:00:96:13:69:10:10:34:b3:e2:52:72:
cb:84:9d:e3:e6:b4:fd:29:66:f6:68:c3:e3:7d:4d:
f8:f9:5b:5b:31:f4:9e:f1:27:4c:a7:18:4c:13:c2:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:6A:24:0A:1B:F1:9A:94:13:36:3E:D2:31:42:EC:6E:9B:B5:F2
X509v3 Authority Key Identifier:
keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:85:72:ad:b7:b1:de:4d:ea:bf:4e:be:65:0b:78:c5:60:11:
c3:b1:1c:21:55:15:84:35:01:5f:09:73:d5:d8:36:59:20:af:
72:cc:e0:5a:52:52:d2:b9:35:c1:ef:9c:38:b9:52:ed:74:22:
30:e4:dc:4a:8b:d0:78:67:99:1e:00:b3:8b:a4:6d:ea:e1:5c:
7f:ae:8a:a4:22:ce:d4:27:77:25:e1:f7:46:1b:0e:40:7d:17:
5a:c4:e4:50:c4:47:0a:e9:6e:b8:20:fd:30:8c:3c:62:ea:c0:
fe:3c:99:37:8a:8b:9f:5a:d2:05:f1:06:2f:e3:fb:f5:72:1c:
c1:e1:12:32:00:ca:6b:13:f1:9b:17:76:0c:22:e3:19:18:c0:
ae:ad:e4:52:cf:90:39:fb:8d:d3:f6:14:e7:84:51:32:4d:42:
a8:f8:18:ef:92:1d:16:64:2d:1e:1f:c1:78:9a:0a:f5:15:c2:
2e:8a:ad:1e:0c:ab:d9:6a:c9:bb:30:b5:1e:a3:d5:ac:2a:3a:
83:19:87:79:ea:15:15:50:f6:72:8b:f0:5c:21:2d:e1:56:2b:
8a:c1:b0:e5:d6:4a:2b:b8:2f:f1:2f:59:c6:f4:6a:83:af:14:
43:56:c9:fc:f1:5b:d3:35:ac:fb:06:e9:c1:1b:e9:dd:99:35:
a1:8d:ab:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:13 2025 by rpki-client