Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: txsgW8QwZMdPOQQ/0+/XL2eGfaROuKlsHVKoIRF1gFM=
Subject key identifier: 4D:C7:A3:64:13:A8:C6:C9:65:1D:DA:BF:82:51:85:83:D5:6D:BA:A4
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 019A4E8677CBC54A1CEF97F47C0BBB9021EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 1721
Signing time: Tue 04 Nov 2025 11:00:26 +0000
Manifest this update: Tue 04 Nov 2025 11:00:26 +0000
Manifest next update: Wed 05 Nov 2025 11:00:26 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: SBSap5Ql1e7XBaAQLDi/NRRtSEl/LV1cY1/LNi6wWRc=)
2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:77:cb:c5:4a:1c:ef:97:f4:7c:0b:bb:90:21:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Nov 4 11:00:26 2025 GMT
Not After : Nov 5 11:00:26 2025 GMT
Subject: CN=4dc7a36413a8c6c9651ddabf82518583d56dbaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:f2:eb:81:4b:42:fd:c5:3f:70:f5:b8:d5:
d8:49:d0:23:ac:b5:76:31:d7:71:2b:7a:44:e9:21:
8d:6a:9c:88:7e:6a:b3:ce:94:78:1d:06:6a:3c:05:
a6:b6:09:11:62:18:28:4c:21:4b:6f:75:ba:75:3c:
e4:f7:3a:69:b6:22:c6:e2:29:54:be:fa:be:85:bf:
e3:c1:1d:1d:62:b9:d2:a5:62:06:19:ed:55:69:a9:
48:57:70:ca:aa:f5:65:84:9a:05:dd:46:6c:53:04:
f5:59:e7:ce:14:4a:51:f7:fe:92:38:21:e1:26:a2:
bb:6c:3a:2b:f2:06:15:3e:b6:09:9c:15:85:24:5e:
22:a4:33:81:89:57:0e:37:f7:f7:ba:50:13:60:bc:
6f:16:f0:58:a5:7c:79:da:6d:94:c9:21:11:6b:62:
98:11:ee:c7:cc:b0:2c:6d:a8:c0:e1:6e:ed:1b:5b:
fe:59:06:f3:34:b9:c1:96:cc:15:cd:e0:c2:e7:e2:
63:bc:cc:be:90:5e:90:75:f7:db:27:19:0b:fa:61:
f3:f1:c0:88:f5:f9:ec:04:78:24:19:90:51:63:fd:
a0:c5:fa:9b:55:ab:00:b9:f9:27:2a:c5:11:5c:54:
3f:da:04:f5:91:83:4c:5c:6e:e0:de:b2:c0:de:57:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:A3:64:13:A8:C6:C9:65:1D:DA:BF:82:51:85:83:D5:6D:BA:A4
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:98:83:08:91:ab:54:8f:b2:27:97:2b:11:9c:d8:40:75:47:
ef:03:2c:73:e4:f2:3f:0b:19:fb:28:d8:1f:77:e9:37:b0:2a:
01:dc:9f:f5:dd:42:c6:19:02:db:79:2e:bb:7a:0a:d0:71:f9:
8a:8b:9b:e3:5f:d9:ad:87:22:13:c1:a6:07:d0:94:70:bf:15:
3b:1e:8b:2c:0f:55:e9:38:7a:5e:bf:33:6e:4e:85:25:fe:ac:
c0:34:41:d3:d6:de:8a:1a:59:8b:12:33:35:8c:ea:5b:10:a9:
41:15:75:df:bb:46:3b:cd:84:ab:1b:b1:d5:5b:99:9c:cd:9b:
22:1b:0f:80:0e:4a:e1:82:2a:28:2d:86:b7:5d:b6:2f:39:76:
ec:1a:f3:10:c4:20:d9:a8:3e:36:71:3a:bd:76:16:fa:fc:fd:
21:68:cc:ff:a9:1c:ab:3a:79:78:64:2d:f5:07:ed:61:e9:7d:
17:35:15:ce:7c:d8:dc:ef:65:a7:c4:24:a2:16:c4:44:f4:2f:
e4:bf:f5:9b:8c:ed:a8:a8:08:90:30:c8:eb:64:3e:89:9f:85:
89:35:f5:af:5f:5e:1f:11:fc:fa:f5:40:3d:3d:58:ad:a3:31:
be:93:69:5a:1c:5f:77:db:c7:28:02:27:b3:af:8d:41:b2:37:
d7:9e:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:52 2025 by rpki-client