Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json)
Hash identifier: 0IGNiZuq7uVnpC558d8Eq43bMTIsB7w2geL5sne8PBY=
Subject key identifier: BD:39:20:44:9E:4E:20:92:48:6D:C1:35:08:CD:6D:9C:8E:E6:70:F7
Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Certificate serial: 019A50075809214438251C8E6D77B2742CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
Manifest number: 037B
Signing time: Tue 04 Nov 2025 18:00:49 +0000
Manifest this update: Tue 04 Nov 2025 18:00:49 +0000
Manifest next update: Wed 05 Nov 2025 18:00:49 +0000
Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: rUJKE7EB1UDz90aYB+qYclIVOV4LP4hqDRoz1ECxTWo=)
2: uMFOgPoc2NWCSxPiOG6b1D8E-ZI.roa (hash: R/unw2gN5aPMxs/UeuzYe+LHJKBGKVUf8WbT/53nntg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:58:09:21:44:38:25:1c:8e:6d:77:b2:74:2c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847
Validity
Not Before: Nov 4 18:00:49 2025 GMT
Not After : Nov 5 18:00:49 2025 GMT
Subject: CN=bd3920449e4e2092486dc13508cd6d9c8ee670f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:4b:74:ff:85:7d:98:56:7a:9a:da:c6:1f:
16:f7:fa:4d:a6:f1:9c:8f:9e:e8:5c:01:20:2b:1c:
81:d8:bf:6d:7d:fa:b5:80:c9:de:6e:6f:1f:8b:ef:
c3:2e:72:94:a7:fc:35:c8:be:13:c7:ec:0f:05:45:
b1:a8:a4:c9:7b:f8:9c:d7:df:2d:4f:6d:ed:21:2a:
0e:28:c7:c1:1d:c7:fb:8b:01:cc:e1:47:55:8f:ee:
f1:ad:f7:d9:68:f6:35:56:f8:52:5c:44:a4:96:31:
36:9d:77:70:49:c8:a8:c2:3a:fc:87:aa:e3:ff:d4:
06:2a:d0:a5:73:fe:25:9d:3f:ab:64:66:99:b4:86:
e7:40:1a:8e:d4:7d:8f:50:b8:6a:73:ae:07:dc:0c:
30:2b:ba:dc:b1:b5:8d:67:c6:8c:e0:e7:13:7e:91:
6d:c6:19:6a:81:d2:d9:2c:6b:06:15:93:99:ab:c5:
db:66:a4:60:aa:c9:9c:42:c2:7b:54:b8:85:70:a7:
c8:01:b1:8d:6c:35:7a:9c:bd:02:56:d5:16:b6:87:
dd:d1:4d:d1:bf:b1:00:6e:b3:5b:57:c5:72:03:7c:
e6:43:97:fb:34:74:9a:af:81:47:9d:73:af:43:86:
e7:70:e3:37:e3:77:b6:bc:67:f4:bc:61:ea:b4:64:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:39:20:44:9E:4E:20:92:48:6D:C1:35:08:CD:6D:9C:8E:E6:70:F7
X509v3 Authority Key Identifier:
keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:29:23:20:f2:2a:dc:ad:67:18:3a:f4:0e:42:0e:ae:e2:84:
68:6d:dd:f8:cd:64:98:e9:66:ea:75:9c:64:7a:2f:df:92:a8:
a8:8b:a6:53:59:cf:ba:a0:0f:d6:59:2d:c2:24:2e:c6:60:d0:
e5:2b:ec:2a:02:92:32:eb:d1:46:22:cc:ad:a7:49:3e:f4:bd:
1c:05:8a:dc:88:4a:ac:78:7c:60:52:dc:c5:db:4f:df:d9:04:
d0:3e:68:2e:1b:b1:29:02:5f:27:66:0a:3b:c6:62:b5:44:57:
e3:8e:c4:68:1b:f3:30:a9:bf:12:7f:8d:c6:0f:57:80:3c:97:
44:f5:46:a8:44:6b:26:84:b1:5e:71:d3:3b:48:81:cb:ef:c2:
ed:24:9d:d6:e4:72:9d:67:45:50:3a:4e:0b:74:fa:ba:01:d9:
da:f2:9f:73:04:e7:9b:a7:83:c8:a1:b7:e1:25:7c:bf:39:5c:
7b:b2:2e:40:59:e4:e1:28:53:f8:3d:11:50:5f:cb:f5:39:e3:
85:8f:a4:ac:a8:25:e8:da:62:db:e4:a7:1f:bc:6a:e9:27:1c:
77:29:89:e3:84:88:75:d9:6f:5f:b0:03:ba:d8:ce:d0:b9:9c:
ba:1a:93:35:3b:50:f0:75:dc:c1:fd:b9:b2:74:2c:4a:a6:af:
82:8e:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:31 2025 by rpki-client