Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: s0TJ25Ilmy42s2iOvTabS7QTM7biOsQqztZwUIOhnXE=
Subject key identifier: F6:6C:4A:24:C3:BF:66:A9:81:7E:46:4E:D4:30:D8:6F:6C:3A:6D:AA
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019A4E18C4FDF03C4CF3B566506F63BEA96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 128E
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: 3VtLve5oiXPGTcpXAEnRQYaT1uCkrHtJimVQ1TyOzk4=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c4:fd:f0:3c:4c:f3:b5:66:50:6f:63:be:a9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=f66c4a24c3bf66a9817e464ed430d86f6c3a6daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:12:bd:fb:ad:eb:c2:95:d7:0d:29:a4:df:
67:4b:2e:91:d8:ae:69:82:bf:a4:0a:e9:ce:93:64:
b8:7c:a3:e2:a6:c3:93:d5:61:e7:8f:bb:1f:d3:91:
25:3c:2f:6b:cc:c7:1e:e5:95:77:41:6e:bd:13:1f:
07:6c:7d:3a:e1:cd:ed:76:ff:af:ec:bc:4b:d5:10:
ff:19:d6:28:b9:01:fa:cb:78:16:e5:fb:c9:6e:d4:
3b:49:45:ef:f4:b5:7a:eb:8b:57:5a:22:f7:4f:c8:
22:95:e7:52:e2:9f:2d:81:88:31:a9:e4:40:0b:64:
f8:d4:39:0d:8d:83:78:1b:1f:d8:72:46:d6:cf:33:
36:3a:ce:dc:74:c2:a0:4d:9e:23:7d:74:d0:a3:c1:
09:fd:21:4f:4d:fd:f6:26:35:54:99:16:46:76:77:
b4:55:42:1d:c6:5c:b9:25:a9:cd:4c:ae:af:12:c8:
25:e3:a8:55:3b:5d:92:45:3f:20:7c:ad:20:f9:ba:
6a:22:ef:ff:bf:dd:98:e6:fe:25:b5:3e:a3:94:67:
f0:08:45:b5:f3:9d:3e:df:00:84:41:57:f8:3c:67:
30:8a:e7:94:d7:24:37:29:91:bb:e0:29:0e:ec:66:
51:d0:6d:39:dc:65:7e:9f:22:ed:6c:00:25:ea:96:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6C:4A:24:C3:BF:66:A9:81:7E:46:4E:D4:30:D8:6F:6C:3A:6D:AA
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:6f:60:4e:2c:36:98:c8:75:1e:b0:fe:8f:f1:11:32:ea:e7:
55:b1:13:46:df:c9:15:64:6e:2d:18:4f:f1:88:7a:63:cc:1b:
88:e9:47:4e:e0:41:73:63:32:0b:16:fd:9e:a0:c1:80:07:8c:
42:9b:5b:20:ad:3d:d8:56:bf:35:71:a9:8a:1b:4d:36:69:6f:
9b:6b:39:c2:e3:83:7d:e3:53:27:90:df:d2:75:3d:b6:bc:f6:
ba:0e:e0:e4:46:5b:4c:44:72:2a:d0:da:eb:d3:6d:4d:d3:99:
df:c1:55:9b:c2:7a:b0:93:42:33:44:c3:78:36:77:38:cb:07:
5e:13:aa:cc:eb:61:5d:66:cb:e5:0d:44:a1:5f:88:c1:f6:d7:
8e:9a:d3:64:59:aa:d5:fa:f8:b7:99:d7:e9:ac:2e:fe:06:d3:
c1:74:92:ca:54:a4:8f:d7:c1:2d:11:18:72:b7:c7:45:aa:04:
8e:cf:4c:88:42:7a:00:4d:d6:a3:6d:70:54:25:e9:3e:44:c4:
a5:c5:ff:5b:cb:26:6d:9a:a4:80:83:e7:ca:c6:5c:e7:0f:e2:
42:91:cd:fe:59:7e:06:e6:0d:e0:b3:51:dc:2b:3a:50:3b:70:
45:b3:13:a5:e1:b6:02:4d:7f:20:73:f5:74:70:b4:8b:42:7e:
f6:a6:2e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:52 2025 by rpki-client