Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
File: 156keuFhy7Pa75d4lzDXDEy6idA.mft (raw, json)
Hash identifier: Ut6+f3Eo1k2rkK4ze22KT2/wJR59P9MEWnTssBa9R6w=
Subject key identifier: 59:86:72:99:69:58:09:F0:86:7F:6A:17:A2:15:5B:40:B4:0A:4C:0F
Authority key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Certificate issuer: /CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Certificate serial: 019A4E4F6CD01252BD8883883BFDC448D30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
Manifest number: 0DB4
Signing time: Tue 04 Nov 2025 10:00:19 +0000
Manifest this update: Tue 04 Nov 2025 10:00:19 +0000
Manifest next update: Wed 05 Nov 2025 10:00:19 +0000
Files and hashes: 1: 156keuFhy7Pa75d4lzDXDEy6idA.crl (hash: cR4CIsTkMraj3/k/de39g0kXUS7QBrwo2SHgfWTvXkY=)
2: BYLPzOMe1DxWdpXNE62DtzO9Fb0.roa (hash: SqdsHTomHrhRooCsvxMkFhbSdd3KRws8NQEmMcUSL9s=)
3: L0_IW031V8glRQi2qCV5oPEf9Ro.roa (hash: AA7xAguXYqxswXW6tTMsC/xh3FPMqVeiLIYHUXm73pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6c:d0:12:52:bd:88:83:88:3b:fd:c4:48:d3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Validity
Not Before: Nov 4 10:00:19 2025 GMT
Not After : Nov 5 10:00:19 2025 GMT
Subject: CN=59867299695809f0867f6a17a2155b40b40a4c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:ac:80:46:dd:0e:77:37:22:0e:ea:4f:dc:
67:52:b8:31:26:48:13:85:54:43:2d:ae:6a:08:11:
51:8c:6c:c0:fa:13:f0:9e:55:5a:8d:c6:89:a1:b1:
ae:77:2c:83:59:25:a3:1b:e0:ef:a4:bb:dd:d7:b2:
e6:98:63:ad:e2:05:0e:49:0e:af:2c:be:ad:c9:42:
73:ef:03:cb:85:1e:99:46:5a:c8:07:ca:10:35:0d:
cf:a1:02:2d:25:11:ec:a5:e7:a0:97:19:cf:67:9d:
a5:0a:5f:28:b5:21:bb:a4:9b:68:e2:25:13:42:0c:
95:ba:83:22:06:44:88:04:42:e3:0f:ed:b1:16:8f:
a3:05:b6:6a:bf:76:e5:81:58:64:dc:b6:f8:9a:03:
6f:63:81:83:74:e9:ad:7e:2d:d0:7b:84:b1:3e:76:
b2:8f:e9:4e:9b:27:71:da:15:0d:07:54:0b:c9:bf:
06:37:2a:08:87:72:7a:55:42:24:c4:83:cd:ff:df:
e9:00:6e:d3:8b:8d:75:3b:90:6d:29:cf:8e:c9:2c:
15:3c:79:92:cf:98:af:af:6c:4c:30:99:a4:0a:e0:
42:00:03:f3:99:15:a1:46:22:29:97:3b:a0:aa:7e:
c3:ff:95:f3:a0:12:d3:29:6a:13:b5:e9:60:d4:47:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:86:72:99:69:58:09:F0:86:7F:6A:17:A2:15:5B:40:B4:0A:4C:0F
X509v3 Authority Key Identifier:
keyid:D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:81:a3:2d:d2:e6:34:b3:6e:2b:27:63:a4:bf:d7:2e:b8:40:
f6:6e:fb:66:f1:09:a0:61:b4:24:ec:29:dc:9e:b7:fe:10:69:
96:26:fb:11:4e:b4:c3:8b:0b:93:3f:e3:4d:25:ee:3d:65:95:
f1:15:82:31:0f:24:f5:94:a6:3a:bb:e1:65:f6:39:7b:88:11:
64:d3:85:37:55:59:c6:20:4e:ca:7b:34:9c:b2:82:c4:fd:8c:
6a:ba:2f:60:e8:50:9c:d3:2b:be:8f:61:a7:af:3f:0b:e4:23:
41:a4:03:61:c9:a3:0a:3c:02:b7:26:19:78:ec:e0:17:a4:4d:
52:fa:e1:e8:4e:34:ab:6d:ed:f4:37:a8:9e:7d:e6:0e:ab:29:
87:02:7d:78:46:ae:0d:ea:ba:9b:50:d7:bf:e6:f7:df:95:84:
e7:b3:e7:03:f8:3d:eb:fd:f9:db:4b:da:a8:d1:c4:43:d3:83:
26:da:3c:22:74:5e:95:3b:ee:78:bb:20:3e:62:b4:a7:f0:38:
c7:cf:fc:5a:45:e8:16:23:b2:fc:2e:64:8b:18:61:f5:0b:6b:
6d:2b:79:dd:41:13:76:0f:db:68:4e:36:c7:68:95:dc:69:8b:
ae:6a:83:fb:a5:3b:7d:a4:b5:7e:d1:5a:24:38:4d:56:0c:f6:
3a:09:fb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:37 2025 by rpki-client