Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: F46M6+l2If66NbQ9XnpCQ806nUV4YPtW8QhBoR+SAxI=
Subject key identifier: 47:B9:D4:F0:57:B9:5D:6C:08:29:FF:F4:83:BF:B3:D2:45:A8:70:80
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 019A4DAB0B5097B65115D2D3189BA1D5651A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:46 +0000
Manifest this update: Tue 04 Nov 2025 07:00:46 +0000
Manifest next update: Wed 05 Nov 2025 07:00:46 +0000
Files and hashes: 1: 808eb-9aLu41roSMSaHO8r-sCJ0.roa (hash: rCM5eGiyr6wuq7y0i6XZdzgH6YJOrFxOSIfhu9ZqAu0=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: 0YkuTeY6zPi+2dv7Rm6rBQMb/mIjCZRneIlkqRhYMWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0b:50:97:b6:51:15:d2:d3:18:9b:a1:d5:65:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Nov 4 07:00:46 2025 GMT
Not After : Nov 5 07:00:46 2025 GMT
Subject: CN=47b9d4f057b95d6c0829fff483bfb3d245a87080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:2d:09:c0:94:f9:1f:31:59:86:d8:3f:47:
5f:ce:d8:ed:cd:e0:f7:f4:3b:2a:e6:4e:0d:41:6d:
d9:27:dd:2e:b1:e6:65:43:53:46:c5:69:b8:f9:89:
f9:25:d9:b3:26:fa:e3:0e:e4:5b:61:22:de:32:f7:
07:eb:39:75:e8:35:9c:3f:d1:1b:41:b7:32:d8:18:
c1:cc:56:30:1e:9f:d9:04:19:f4:c6:cf:cd:23:23:
68:00:23:df:11:94:bd:96:59:b8:27:e1:03:f3:bb:
64:8b:48:06:02:ef:77:34:f3:f9:14:66:64:f6:23:
e7:a7:c0:6c:9e:a4:cf:74:1a:f0:5e:72:cc:3b:a9:
00:bc:d4:e2:96:6d:e0:0e:3d:bb:87:33:93:e6:e3:
fd:90:cd:a8:a0:18:dc:35:f8:b8:59:21:0a:f6:c2:
ab:7a:39:c3:3b:c3:b1:61:42:4d:32:97:0f:c0:05:
f4:d5:01:c1:b7:42:d0:fd:a1:06:4b:60:be:8a:f7:
1a:63:30:a8:37:df:68:31:db:5e:78:83:99:b1:50:
50:e3:2d:c4:bc:86:d1:44:34:be:0a:ef:c2:9d:48:
84:bd:47:24:72:0b:32:cf:5a:1a:0b:ec:92:ab:62:
bc:a1:e6:17:26:9d:8d:f6:10:c2:ce:c3:96:bb:1d:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B9:D4:F0:57:B9:5D:6C:08:29:FF:F4:83:BF:B3:D2:45:A8:70:80
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ae:35:d9:b0:f7:73:d4:ca:3f:41:6d:01:92:98:e3:0d:ed:
6b:da:bd:58:f9:75:be:be:9a:79:8e:3b:55:e5:f2:45:70:08:
b5:3e:d5:18:94:fb:7e:be:e8:b7:4d:54:7f:d4:b4:f9:c0:13:
24:dd:dd:22:71:c5:32:6a:d2:e0:aa:32:33:aa:86:1b:99:93:
9c:81:45:9f:87:6c:e7:51:94:ff:76:bf:92:80:d7:35:b1:9e:
ba:ae:e7:86:d2:01:bf:0f:81:e2:40:50:af:27:67:7b:91:ed:
79:8e:f6:cb:75:71:7d:bf:47:bc:42:e1:7a:71:97:c8:73:5f:
06:37:75:5e:aa:04:63:24:60:86:24:a9:9f:7f:6b:ef:4d:a8:
48:b6:6d:3f:96:36:d0:c5:7f:bd:d7:a4:06:e9:e8:00:71:ca:
f9:b3:67:7b:75:e4:37:e5:78:1c:e8:55:1d:bc:15:a9:0d:47:
1a:19:22:15:20:27:f3:ae:77:67:fa:a9:2f:d7:8d:99:1f:11:
e9:fd:f6:c6:0e:68:3f:ac:18:45:cf:86:b0:62:57:78:d8:15:
12:bf:39:9a:e9:80:e0:d0:70:83:a4:3f:8a:98:c6:18:56:94:
29:27:a6:40:50:db:50:6b:c4:2a:57:3e:b8:b9:80:04:72:3b:
5a:fc:79:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:25:58 2025 by rpki-client