Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File: dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier: EabBTfAkMzpjRuQ1zAM8O3rFXAIl4USB0ILr932FS5U=
Subject key identifier: 6B:5D:18:AD:CF:BF:9B:1B:13:19:B6:1E:5E:9C:92:E8:48:EA:D7:24
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 019A4F995655FFCC41ADB60C07A2F31CDF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number: 09BA
Signing time: Tue 04 Nov 2025 16:00:40 +0000
Manifest this update: Tue 04 Nov 2025 16:00:40 +0000
Manifest next update: Wed 05 Nov 2025 16:00:40 +0000
Files and hashes: 1: RbCZ4FuBiM5bQVW3sP5PrxSE_ic.roa (hash: heyjJE1M941WJSvHrhTQkBoLwbj5RIQs9kFiPjSVnUw=)
2: VgQVNXTLznzmHsP79v3Zsr2IWwU.roa (hash: V8Zv8ak7cEH62i1TGjfWmCMowy8kun9bTSlwi87+E9s=)
3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: EtSnGsG+aQnUdG4UXYV6rK0FZvxGterXJTT/iO4LksQ=)
4: rgad5_QrqjzIqPuzW_IRWvVFFb4.roa (hash: CW37KfuVvlCtejt5YGCTadY3jiqhfL5iQfoIqu008Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:56:55:ff:cc:41:ad:b6:0c:07:a2:f3:1c:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: Nov 4 16:00:40 2025 GMT
Not After : Nov 5 16:00:40 2025 GMT
Subject: CN=6b5d18adcfbf9b1b1319b61e5e9c92e848ead724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:9a:09:e7:b8:02:f0:b0:b6:ad:d5:1d:48:
31:43:25:4e:17:18:f4:04:2a:53:84:37:75:c6:2e:
c9:b4:2c:80:28:63:06:db:85:20:28:fa:05:49:08:
b2:cf:3b:bd:aa:be:d3:2e:a3:c6:a4:13:f3:6a:df:
a6:30:f6:50:16:7e:19:f7:77:ce:83:0a:b0:a2:f4:
14:b5:17:e1:9a:24:f0:e7:38:aa:72:6d:86:c7:9d:
ca:84:c5:83:d3:dc:2c:b4:57:ef:46:9a:b8:92:3b:
cf:57:51:a1:7d:85:9f:1f:6f:4d:80:31:c8:d5:33:
ab:cd:81:7d:2b:df:42:c9:b5:76:ae:70:36:a8:28:
fb:b6:ae:cb:37:1b:fb:54:84:6d:44:f6:cb:5d:29:
63:b1:43:04:2a:7e:b8:b9:ae:80:12:46:56:36:85:
4d:79:58:70:66:b6:45:25:18:55:2c:a4:c0:57:35:
3a:ca:28:ca:42:25:ba:c7:91:6c:47:8c:da:14:42:
ed:d2:18:09:78:a1:fc:75:b0:3f:fa:0d:c1:b9:79:
79:9d:e7:88:22:ef:f0:b7:cf:28:08:f1:c0:1c:d4:
71:fc:ba:d8:78:c1:07:ba:12:b9:27:91:0e:c4:d1:
64:03:be:4f:e8:8b:76:cd:ae:15:2e:70:18:84:6b:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5D:18:AD:CF:BF:9B:1B:13:19:B6:1E:5E:9C:92:E8:48:EA:D7:24
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:95:78:72:3d:91:76:bf:91:1f:d4:73:52:29:a1:61:17:b5:
d4:cf:72:75:a5:5b:d3:3a:07:e9:ea:93:0d:2a:92:9e:6a:4d:
23:2a:e8:37:29:72:c2:93:8d:90:5e:de:45:d4:e5:78:65:c8:
f5:ed:2a:3c:aa:0a:b0:27:ab:cd:35:85:c9:74:b6:42:16:37:
f0:e2:75:2f:29:9a:38:cd:04:c2:da:61:e7:45:37:e3:c6:ea:
c2:40:2f:38:47:ba:16:19:19:c0:cf:9f:00:6a:86:cf:c4:a1:
a6:1b:67:8d:a0:9c:08:9a:c4:66:30:50:29:97:b9:0f:f0:94:
45:fc:db:84:b3:14:6e:74:d5:90:7d:22:fa:70:70:0e:42:56:
8e:20:71:5d:44:5c:c1:2d:2f:5b:d2:17:7d:de:4e:8f:ee:47:
6e:8c:23:50:12:a7:9b:64:56:5b:de:7f:de:90:b0:8d:ad:ad:
9b:24:bb:9a:63:1f:c2:88:73:2d:2c:44:6d:64:0c:7f:51:8e:
90:17:2d:05:40:80:f8:80:66:16:ec:e8:f6:b0:67:d1:5d:0c:
19:ca:90:d4:5c:33:f5:66:5b:6f:76:df:0e:db:11:94:1d:0c:
ea:38:0a:19:01:e7:36:33:9a:35:ba:f1:31:84:c2:bf:9c:b8:
db:ca:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:22:00 2025 by rpki-client