Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json)
Hash identifier: twYuo4vu8CC7l5R46duDUMAUPYOUEjZKK1fQKi2ag9A=
Subject key identifier: B0:9F:9B:08:6D:03:E1:56:87:3A:82:B2:E0:4A:D9:3F:A0:D9:83:2B
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 019A552D4AEE66F8FE882C4449BD767A9351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
Manifest number: 6A
Signing time: Wed 05 Nov 2025 18:00:22 +0000
Manifest this update: Wed 05 Nov 2025 18:00:22 +0000
Manifest next update: Thu 06 Nov 2025 18:00:22 +0000
Files and hashes: 1: F8wvoV2Msd-SeHr6PBjzhXHOGKU.roa (hash: GfnGToHeyWjARTLRd2eGQHQuQH+P8p0dtRcm2xvmJe4=)
2: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: AAKXDr2Dzr09fTGHanFlSyNlq1kynD1kjgYArfVoi7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:4a:ee:66:f8:fe:88:2c:44:49:bd:76:7a:93:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: Nov 5 18:00:22 2025 GMT
Not After : Nov 6 18:00:22 2025 GMT
Subject: CN=b09f9b086d03e156873a82b2e04ad93fa0d9832b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3c:12:92:a3:ae:ce:22:1b:25:ce:0c:7b:d4:
07:c2:85:c4:24:42:e0:32:f8:4e:6e:b4:e1:cc:41:
12:96:82:74:48:38:d2:3d:c0:bd:fb:09:ea:8f:71:
07:a5:ba:e5:b2:10:07:76:a2:67:98:52:18:22:d6:
d2:2c:ae:fd:92:ac:b1:fa:cb:53:07:26:a3:eb:07:
21:a7:3b:b8:63:9b:35:fd:93:b2:87:64:7e:85:b3:
47:5b:60:21:5b:03:a9:00:48:f9:ed:41:ac:35:bc:
8f:b4:17:0c:be:55:0e:84:64:c7:ee:f8:b0:5c:fe:
e2:38:b9:55:25:90:4e:84:59:62:1f:fc:ef:65:af:
28:0f:0e:b2:35:1c:e5:69:1e:bd:7c:0c:ad:08:28:
33:0f:bd:26:de:b8:84:c3:0e:23:fa:00:f5:a2:7d:
28:85:8a:de:2e:b9:3a:dc:0d:00:e1:67:dd:b5:ae:
12:47:5f:82:f2:c7:8a:02:81:63:ab:c9:55:77:2d:
fc:ba:7e:aa:db:08:39:8a:af:ff:8b:ea:da:72:08:
4b:e6:6d:de:65:11:8d:84:d1:e6:29:d7:12:4d:cb:
1b:13:f9:93:82:2e:e1:0e:b7:e9:a9:5e:70:fa:f6:
af:cf:b6:5d:2a:37:26:e5:63:ad:e3:05:02:61:f5:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:9B:08:6D:03:E1:56:87:3A:82:B2:E0:4A:D9:3F:A0:D9:83:2B
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:46:0d:d4:66:b8:e7:65:f3:d7:71:04:31:be:e0:9a:29:9a:
f5:f0:70:90:67:e7:bb:5d:21:f7:65:95:00:2a:9c:9b:02:17:
58:30:80:ba:12:fe:2c:52:de:67:28:26:03:76:6c:77:db:10:
91:f9:86:bc:c3:3f:72:1a:65:e8:df:d4:01:e5:08:c8:8f:36:
22:46:57:2f:a1:38:24:71:86:07:48:e6:00:49:40:b5:09:6e:
76:79:f0:64:78:c3:9e:c5:fc:be:9b:25:bd:39:ba:3b:db:43:
ec:f4:12:5f:88:a5:f6:52:74:15:57:2f:bf:d7:e7:f0:08:07:
73:b2:0a:18:87:f7:45:98:25:b8:6e:a7:47:4b:a7:85:b4:21:
82:4f:0a:77:8b:dd:d6:33:49:34:3a:b1:be:8e:20:da:76:44:
7b:2a:b1:79:56:8d:85:6d:bc:03:7c:22:fd:e8:48:8f:55:17:
4e:45:80:d8:e4:56:e3:c3:26:77:b1:cf:20:1f:dc:cb:00:5f:
d0:df:d3:cb:d4:18:e7:cd:1e:5b:9e:03:bd:80:bd:d2:c9:24:
60:db:22:3d:a1:0a:ad:ac:18:c3:3c:b7:9e:c9:67:f9:37:f6:
10:ce:cb:59:ee:ac:8d:8a:fb:75:51:1b:3e:ec:74:79:64:9b:
37:47:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:43:20 2025 by rpki-client