Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: RkGuCwmox8FMlKntv1u2PPc80RN8eqylKN/J/ubDqao=
Subject key identifier: 2A:B0:13:7D:B3:A5:42:B8:C7:FA:CA:2B:25:8C:AC:48:29:52:8B:11
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019A503E1EBFE201D0AA252C83636C1BDDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 19:00:39 +0000
Manifest this update: Tue 04 Nov 2025 19:00:39 +0000
Manifest next update: Wed 05 Nov 2025 19:00:39 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: GXTt/YsrKDfOXWe44H19BVzg9DG6GmSMdWW/uBxzxH4=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1e:bf:e2:01:d0:aa:25:2c:83:63:6c:1b:dd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Nov 4 19:00:39 2025 GMT
Not After : Nov 5 19:00:39 2025 GMT
Subject: CN=2ab0137db3a542b8c7faca2b258cac4829528b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:9a:72:fe:66:8f:bd:eb:89:c7:ca:0c:73:
09:f0:f3:54:a9:86:81:7d:f3:f1:dc:c1:35:b0:0e:
9f:d1:50:c2:ed:8e:9e:d1:42:5c:78:b4:ac:38:b5:
82:4e:5d:cd:8c:0f:68:46:35:1c:c3:79:df:e4:f0:
5c:ab:fb:c9:8d:7a:e7:1e:7b:59:4a:c4:08:ca:cb:
56:b7:99:fe:90:d2:cd:fc:e7:9d:b3:cb:e4:45:0d:
82:13:bd:d5:c3:c7:3b:13:38:35:aa:b3:00:7b:59:
c4:c6:af:d3:5a:2b:f0:f9:b7:7c:77:4e:b6:50:80:
da:50:5e:35:ef:69:6a:e7:ac:d1:4b:1f:21:d1:6d:
ad:b2:57:06:db:58:14:0b:13:eb:cf:89:81:01:bc:
ff:36:e6:94:0b:41:7e:24:16:22:ef:25:20:a1:3c:
8b:86:6f:da:ce:9b:da:4b:c9:85:31:19:8d:9e:c6:
c0:e5:88:9c:31:48:a7:1f:39:3e:9c:15:4c:79:56:
66:b5:b6:1f:6b:a0:47:dd:c9:28:56:65:14:14:d1:
29:f5:27:68:5a:86:5f:5a:bd:b3:38:60:e7:f6:07:
1d:72:58:82:b5:3a:6e:b0:64:47:f9:11:98:bf:a2:
10:9d:d9:9f:eb:bf:6b:1e:7a:c9:7b:a1:17:29:2f:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B0:13:7D:B3:A5:42:B8:C7:FA:CA:2B:25:8C:AC:48:29:52:8B:11
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6a:af:21:34:6e:20:68:d8:bd:c8:83:eb:ed:5d:fc:f3:40:
2a:7f:d1:88:86:71:3c:03:d0:01:35:38:f9:ab:7d:03:e8:09:
e3:27:37:12:37:ed:3f:07:f8:4b:28:12:25:44:51:1a:f5:86:
f5:ae:38:55:18:ea:c9:3b:48:c3:86:f3:78:3b:ee:53:e2:53:
05:7f:4a:54:18:09:22:34:d9:c0:81:c2:34:5f:6f:d0:99:49:
d4:30:49:93:a4:0c:bc:fd:7b:94:77:12:32:05:50:c2:20:9d:
1a:92:29:a0:1a:6c:7c:52:6e:71:b0:86:d3:a0:d4:d3:4b:e3:
1e:20:4c:b2:1c:89:17:86:54:bd:5d:4c:72:5e:e5:6d:83:2a:
e8:4b:19:78:3f:53:a3:1a:16:d4:01:eb:f3:fd:3f:13:e3:26:
f0:d5:17:38:27:1b:fe:0f:00:b4:2e:14:f8:e4:8f:38:f6:8f:
07:54:b8:78:b9:d2:e5:67:c4:12:a5:90:ba:24:f8:f8:d9:d2:
1c:d7:c3:50:9a:d3:11:15:8a:60:d7:a7:3c:fc:a4:3c:a7:28:
9b:f0:15:46:e1:c1:1b:b4:69:44:08:98:16:e3:19:b8:5d:7d:
86:24:84:63:51:04:0e:5b:5d:7c:45:53:28:18:0d:e1:e6:d8:
d7:cf:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:11 2025 by rpki-client