Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: SRCbMpfpYRJZ0kryCvv5Tiy0BosWzazOX/6a2fvsOJg=
Subject key identifier: 93:E6:EF:63:7C:2D:8C:72:28:15:11:9B:37:62:64:97:49:75:35:1B
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 019A4DAAE8E7382C75FDC9451FF458877415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0D38
Signing time: Tue 04 Nov 2025 07:00:37 +0000
Manifest this update: Tue 04 Nov 2025 07:00:37 +0000
Manifest next update: Wed 05 Nov 2025 07:00:37 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: vFipn+VcNaKRu5oWUcLxqEkv0VlSQdhb3ev6EVGLxBo=)
2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e8:e7:38:2c:75:fd:c9:45:1f:f4:58:87:74:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Nov 4 07:00:37 2025 GMT
Not After : Nov 5 07:00:37 2025 GMT
Subject: CN=93e6ef637c2d8c722815119b376264974975351b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:a3:32:7c:1c:c8:29:da:67:4d:fe:a5:6e:
5b:3a:85:22:6d:58:36:08:cd:c7:08:56:cb:c2:1b:
e9:a7:88:f7:60:72:bf:0f:77:92:38:3e:09:f6:17:
f3:af:73:a5:53:89:89:3a:d5:31:fe:e1:6a:3c:fa:
5f:57:18:73:7d:89:ff:af:26:c1:1e:bb:c3:19:b8:
e5:3e:6f:2c:04:77:29:47:50:01:d2:20:a5:eb:db:
f9:f0:54:fe:59:0b:38:bd:87:89:df:52:13:49:a1:
f6:9d:5a:9a:8a:f7:6e:41:1c:4d:cf:e3:21:dd:03:
f0:58:b6:9d:9c:70:d3:74:91:be:6a:a6:24:9e:46:
ec:d1:2c:1d:43:95:55:35:f7:4b:92:b3:7b:04:fb:
cc:5a:70:49:bc:83:55:f9:6c:bd:2e:9f:35:e7:8c:
ee:e6:e1:04:83:38:2e:94:33:79:2d:01:42:c7:8c:
36:fa:0a:28:7d:d1:dd:fc:84:fb:38:b2:31:ce:b8:
66:f3:cd:e0:e5:1f:77:86:a0:f3:72:41:0d:90:4a:
d9:95:60:80:61:59:25:29:72:be:c0:a8:77:35:35:
d8:7b:c1:27:a1:ca:36:c2:5c:a2:f9:33:6e:18:9e:
e0:13:e4:79:da:e2:59:7b:37:27:76:c4:c3:ef:94:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E6:EF:63:7C:2D:8C:72:28:15:11:9B:37:62:64:97:49:75:35:1B
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:24:d0:ee:09:f1:4c:bc:e5:24:80:05:d5:d4:b5:6c:c4:00:
54:97:70:36:4a:d7:d5:23:4c:be:9e:24:fe:ff:b9:9b:16:62:
c8:52:27:d4:c5:bc:d1:bd:1e:6d:c6:4b:39:a1:d4:cc:f2:84:
31:1b:0b:92:c5:9f:e2:c5:24:e6:a8:37:d4:7a:b9:db:f5:f4:
6b:7f:95:60:3f:88:3a:c0:7b:de:cb:02:b3:0f:66:47:19:0b:
e2:4c:45:cf:c4:b7:2d:64:26:18:b1:ab:8c:59:05:ce:db:a6:
8f:23:8e:bd:ed:94:9c:f1:58:02:01:a7:bd:be:61:4a:bb:66:
80:30:62:25:a6:fc:1a:ea:10:42:11:1a:e9:96:65:f5:6b:8b:
93:12:c4:90:ba:d5:d4:07:b2:1b:0e:cc:3d:b3:46:4b:ab:f2:
eb:b5:4e:6b:40:69:44:40:d4:84:44:dd:35:67:f5:d2:00:2d:
fd:e2:b4:db:23:fd:a6:ad:35:ff:14:da:75:8e:37:68:f9:78:
96:6a:f7:05:6d:09:eb:fa:d3:af:d8:8b:80:32:2e:db:7b:92:
f6:9c:84:e4:2a:ff:2c:b4:79:9a:8d:28:71:ab:e5:d0:bb:ef:
1c:e9:29:cf:88:aa:d1:d2:9e:70:f5:e1:fa:02:f9:0e:77:21:
e8:0f:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:39 2025 by rpki-client