Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: 6gCm4WaPZUdLydw9HSsOulXSH0kTJIBp8tWPNDs5G1Q=
Subject key identifier: DD:4D:DB:49:AD:12:4B:C9:C8:07:E3:94:9D:65:12:F2:0A:1A:83:60
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 019A50E30DEC6E7FA8269E681DFEE4B382A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 22:00:48 +0000
Manifest this update: Tue 04 Nov 2025 22:00:48 +0000
Manifest next update: Wed 05 Nov 2025 22:00:48 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: LVqUkcPkP74OJwdWR4Q/sP2MV+fuXU+3vicKcZSAzjM=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:0d:ec:6e:7f:a8:26:9e:68:1d:fe:e4:b3:82:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Nov 4 22:00:48 2025 GMT
Not After : Nov 5 22:00:48 2025 GMT
Subject: CN=dd4ddb49ad124bc9c807e3949d6512f20a1a8360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:87:30:c7:63:04:b2:a5:03:3d:37:d8:00:
41:9e:8a:4e:bf:8e:7f:41:fb:91:ee:4d:e9:e8:55:
95:fb:e1:9a:6d:51:a6:2e:93:82:b6:67:5f:b8:43:
99:89:ab:e4:0f:29:cc:1c:90:4a:6b:6d:8e:c0:09:
ef:c7:94:1e:7e:2b:82:87:34:71:7e:95:09:bd:c3:
28:3a:94:4c:f9:65:b5:f1:9f:48:7c:2e:f3:ab:e8:
61:46:6f:73:6a:e9:f8:22:02:39:38:c0:9d:e8:61:
18:a7:43:ea:0e:e3:8d:41:9e:2b:7d:31:02:31:2b:
ae:b8:0a:ab:c8:d3:2a:3b:d5:ed:2b:be:23:f1:87:
23:6d:eb:cf:4d:28:0e:f1:71:32:64:20:b8:da:57:
fa:38:45:81:d6:88:96:12:98:ff:83:18:dd:a4:19:
03:09:b4:77:6f:ec:de:ae:d5:46:07:5e:43:88:20:
b9:e4:4a:eb:13:35:ad:8a:85:d0:f4:a4:cc:aa:5f:
7d:51:af:ad:b2:ee:db:ba:37:e9:0f:cb:88:44:4f:
30:8c:84:7d:ba:ff:82:88:32:bb:83:ae:7b:52:d9:
35:1a:79:28:c5:e9:62:00:d7:7e:51:93:05:c0:3f:
25:04:f4:32:4f:81:54:24:40:d8:99:f6:67:e1:ec:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:DB:49:AD:12:4B:C9:C8:07:E3:94:9D:65:12:F2:0A:1A:83:60
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a5:38:b0:dd:d5:2d:14:a3:04:cc:fa:e3:f7:35:7e:71:29:
56:63:4b:c5:52:1d:7f:1e:7e:a6:98:53:e9:62:7b:31:00:69:
7f:b6:2d:3b:56:43:ca:84:e8:1a:0c:48:bf:fa:06:26:ff:81:
f0:5b:46:b7:fa:49:6a:80:b5:d4:c0:b8:cb:38:e5:43:71:dc:
bc:a4:ac:b4:b7:42:66:c8:cc:f0:12:dc:b7:2b:c9:e2:7b:df:
09:31:28:69:00:23:85:8a:e9:cb:85:3c:77:60:5d:53:41:d6:
8c:38:d5:18:e0:85:68:d1:cf:00:05:8f:c0:47:b9:3b:3c:b8:
ed:04:83:a9:18:1e:df:8a:a8:51:b8:2b:14:9d:bb:6e:7d:37:
6d:89:30:a2:96:39:65:04:7f:e8:3b:21:dc:2e:07:48:76:d2:
40:72:ce:a6:d2:4e:5c:d6:0a:3d:ca:39:11:07:ee:41:22:f1:
99:8b:06:70:2e:01:1b:00:62:68:c8:c0:99:48:b6:c6:ff:3f:
62:a0:9d:28:f6:90:5e:ce:05:98:e7:40:f3:ae:7b:c8:23:65:
ec:b0:81:39:bc:f7:7e:85:1b:0b:82:d3:9a:fa:c8:e4:e1:8f:
db:77:3b:75:37:b7:c9:31:03:ce:41:d5:9e:a6:5a:ec:32:1b:
b8:ad:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:44:01 2025 by rpki-client