Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier: AOEgWV/MZErKZG8sWEBwfTa4YypdWGHffbMvHLQP4Ho=
Subject key identifier: DA:1E:13:33:74:70:8E:CA:DF:1C:15:FA:7C:A6:A1:C6:C2:F8:F7:AD
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial: 019A4FD0496B7C231A5CD9998EB2D9D5C2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number: 0FDF
Signing time: Tue 04 Nov 2025 17:00:41 +0000
Manifest this update: Tue 04 Nov 2025 17:00:41 +0000
Manifest next update: Wed 05 Nov 2025 17:00:41 +0000
Files and hashes: 1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=)
2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: 5ZbvQPAj78YHuvWbof5mDSPFMmXLLQraFqCS0ay6kso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:49:6b:7c:23:1a:5c:d9:99:8e:b2:d9:d5:c2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Validity
Not Before: Nov 4 17:00:41 2025 GMT
Not After : Nov 5 17:00:41 2025 GMT
Subject: CN=da1e133374708ecadf1c15fa7ca6a1c6c2f8f7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:83:f8:6b:15:a4:37:cf:3d:46:dc:3a:4e:
c6:0e:f6:48:e3:cb:50:c9:f2:f5:28:60:d5:44:6a:
6b:3b:ab:aa:04:5b:80:b9:5d:34:d9:7d:21:e7:e6:
52:01:ae:9a:98:4f:4a:c7:39:92:4d:6c:19:45:19:
fe:3d:0b:6f:ed:8f:ee:b5:3e:c1:4f:5c:10:a3:53:
02:1c:3f:23:42:27:10:1d:59:f4:10:e3:61:42:91:
de:5d:96:b5:c3:5b:e2:23:3e:8e:54:e1:36:38:7e:
48:e4:01:03:9a:f9:96:89:40:ab:a0:8b:91:ed:66:
00:31:31:6d:d8:94:d7:e8:b9:bc:ce:29:b6:44:0f:
80:e2:97:6b:b1:60:10:a8:9f:e5:77:79:e3:4a:ec:
d3:84:57:3e:49:5e:26:48:8c:0e:b6:fd:27:39:65:
b1:38:5f:d8:13:60:d3:c2:3c:b6:f4:83:16:4b:08:
52:05:45:17:18:a2:5e:f0:91:61:86:fa:5f:bb:e3:
3e:bd:67:21:45:c0:36:d4:6f:9b:fc:73:e5:2b:00:
9f:bf:16:86:e5:8d:81:7b:67:93:62:ce:4a:3c:bd:
1f:5b:2c:60:72:eb:c7:3d:32:ec:fc:27:88:4a:6b:
2d:04:0c:74:70:9d:fa:92:4e:ca:fd:16:b2:c2:ad:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1E:13:33:74:70:8E:CA:DF:1C:15:FA:7C:A6:A1:C6:C2:F8:F7:AD
X509v3 Authority Key Identifier:
keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c7:d7:e1:27:ff:ba:d8:47:1a:5b:63:9b:9d:28:e0:14:39:
07:0c:de:34:d6:b5:29:b6:de:74:6a:3b:5d:3b:ed:df:e2:62:
a3:c0:43:50:66:70:ca:1f:4f:d9:10:25:52:3a:9c:fa:7f:45:
16:40:53:61:9e:a4:9e:f2:b2:4a:dd:f4:ef:7b:a6:89:d8:be:
7a:55:0b:db:c9:81:1d:d1:48:f7:14:c7:5d:c7:94:2e:eb:2d:
45:56:f1:ea:45:b6:65:7c:64:c5:f6:f4:ab:fc:28:34:04:2f:
73:1a:45:cb:32:8d:9f:0a:3e:86:5a:cd:fb:aa:2e:78:6d:63:
44:d8:fe:59:77:17:ad:68:01:cd:06:05:9f:b2:9c:50:e0:d8:
cf:f1:70:e4:49:2d:37:c5:8e:ab:55:0d:2d:93:e1:49:4d:32:
6e:86:20:22:65:25:df:49:b3:89:34:f7:7e:b8:d4:87:87:84:
a0:47:06:4c:d2:fa:49:e9:bf:23:fb:0f:34:66:ab:fa:b0:08:
e6:1b:1a:7d:11:08:29:b0:af:d3:76:7e:82:1f:d3:6e:07:7f:
23:0c:fe:64:ba:ea:fd:d3:2b:20:2f:1d:0e:62:ab:ed:29:17:
84:15:57:3e:91:52:50:ef:b3:4f:c8:75:88:e6:ce:ec:18:9e:
54:74:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:45 2025 by rpki-client