Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: PLVUzRpBIwH1rY7IWrJaOBL5DfFd3nuLLoz4X9H+k7U=
Subject key identifier: D3:06:CA:47:B6:DE:8D:44:C4:89:73:E4:52:17:C5:CA:61:87:80:E1
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 019A4E1899DA40F190107C9EB7A9C2011F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 056D
Signing time: Tue 04 Nov 2025 09:00:26 +0000
Manifest this update: Tue 04 Nov 2025 09:00:26 +0000
Manifest next update: Wed 05 Nov 2025 09:00:26 +0000
Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: L3VD2IiNgTgPG34nIINaUcqwpMZIsmam2IXfBfcGrE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:99:da:40:f1:90:10:7c:9e:b7:a9:c2:01:1f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Nov 4 09:00:26 2025 GMT
Not After : Nov 5 09:00:26 2025 GMT
Subject: CN=d306ca47b6de8d44c48973e45217c5ca618780e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:45:7c:ff:c2:5a:d1:f6:c3:b0:4b:e5:b9:
a5:c6:38:c0:49:94:ec:83:22:bc:a1:21:cb:26:ab:
18:b4:11:6f:88:64:21:c7:86:ca:c2:b1:64:d3:ec:
00:db:39:ce:4e:18:11:e9:4d:32:29:e4:6d:1f:fe:
0c:2a:a8:6a:82:58:c4:7b:1a:2b:aa:7a:28:c7:5d:
1e:70:b6:44:1c:22:01:f6:a2:82:64:58:be:cf:3f:
5b:ea:be:3f:af:7d:29:65:fd:bd:75:6a:8b:b5:42:
ad:36:ee:4e:35:7d:f4:51:02:5b:8a:cc:c6:0d:db:
80:75:5f:75:0f:b6:f7:9e:de:62:c9:c8:24:db:6d:
5b:28:16:c4:78:54:d8:6c:d4:38:bb:77:99:b6:3f:
ec:97:b1:5a:9d:88:aa:cc:c3:25:bc:ee:76:a1:b2:
6a:cd:8a:c5:39:61:f2:b0:39:9c:e1:1a:bf:6b:f9:
5b:4c:b3:5e:b5:68:6d:0d:ff:33:88:a6:ff:8e:e1:
ac:31:20:bd:76:47:8a:c3:b8:e2:05:2a:37:68:23:
a4:9c:66:02:dd:cd:26:5e:58:b3:d1:d7:84:bd:51:
9b:df:29:be:ea:93:49:6d:6d:79:58:03:a4:d2:c3:
5f:36:eb:43:24:70:53:2f:6a:90:31:56:8a:f2:68:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:CA:47:B6:DE:8D:44:C4:89:73:E4:52:17:C5:CA:61:87:80:E1
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:87:ae:7a:87:c9:8a:f7:17:f2:64:ee:88:75:09:d4:61:e8:
b6:6f:b8:be:eb:6f:64:a2:13:3e:22:aa:de:23:ef:70:2e:84:
16:76:20:64:2b:d3:86:03:66:cb:f8:60:4a:ac:9c:a7:ea:ae:
0d:68:23:24:90:9d:52:b1:f6:bd:dc:77:b5:2b:1c:81:a5:cc:
a8:7a:f9:92:00:79:24:9f:d9:15:3c:d4:17:78:b4:9a:13:62:
29:2d:52:65:a4:99:c8:20:fa:d5:fc:2d:49:9b:b1:9d:d0:27:
14:7c:d8:7c:a2:6c:9e:c6:eb:0c:72:f6:08:b0:a2:f0:34:32:
f0:3e:65:d4:06:3b:d3:db:fd:3e:34:54:6b:3a:b5:10:35:b7:
02:73:2a:36:01:fd:21:39:ae:1f:aa:2e:b2:43:83:bf:e3:2e:
6d:1c:08:5f:d3:a3:64:67:4d:ff:cd:27:18:ad:a0:fc:45:61:
dd:77:35:20:64:d2:95:18:bc:49:4b:a1:26:ff:89:08:68:15:
87:5e:b7:02:2b:30:00:c2:f9:f9:76:80:f1:ad:b5:6b:25:29:
03:6c:2d:92:29:df:f9:8d:6b:b4:fa:0f:0c:8d:fb:47:8e:ef:
a0:69:da:13:36:08:28:80:fa:cf:40:d8:7c:7f:ad:37:45:eb:
5d:93:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:52 2025 by rpki-client