Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: jqoAxOoO030L8H6l8stbt2lHLXSPGLFhgsSfxD8cbQE=
Subject key identifier: ED:E2:D6:28:39:51:3B:F4:64:88:C2:CC:DA:8B:CF:D6:AB:B6:F1:C3
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019A52D1F555D97B78AAC7D9AC2715EC7831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:01:22 +0000
Manifest this update: Wed 05 Nov 2025 07:01:22 +0000
Manifest next update: Thu 06 Nov 2025 07:01:22 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: D4kOWEyGRTS74/yHBojjJzCrdKxA0Kn3ajEVSHyDi0c=)
2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f5:55:d9:7b:78:aa:c7:d9:ac:27:15:ec:78:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Nov 5 07:01:22 2025 GMT
Not After : Nov 6 07:01:22 2025 GMT
Subject: CN=ede2d62839513bf46488c2ccda8bcfd6abb6f1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:86:38:9e:9f:2a:60:cf:e6:21:01:ce:57:
a9:28:90:a3:1e:a6:79:2b:86:ee:98:8b:07:6f:69:
eb:59:ac:21:1f:38:ab:05:5d:84:06:22:09:de:7b:
72:75:62:d8:35:00:e0:05:67:7c:a6:b9:41:4d:17:
a0:b5:78:78:62:fa:79:ef:00:09:33:f9:ac:cd:8d:
f1:3c:7e:96:b9:ed:a3:db:6a:3a:bd:2e:7f:70:8b:
c2:04:65:fa:af:5c:41:51:3e:e4:aa:a4:49:e9:8f:
d7:ed:0a:f3:b0:c5:98:ea:5f:95:37:16:a6:bd:fa:
13:60:a7:65:c2:cb:55:c3:3c:ca:05:09:8f:c0:84:
0a:e1:14:10:1f:f0:c5:d5:a9:54:85:9a:d2:4f:42:
e7:56:b1:1d:2f:f8:72:50:17:6a:c9:1e:e6:40:e0:
90:e6:1f:2a:12:ee:28:f8:cf:1d:2b:f6:57:b4:b2:
39:57:1a:9b:0c:17:39:0e:2c:7f:be:c6:2e:da:85:
6e:8b:79:ff:59:83:55:1b:3a:70:c1:af:b8:4e:b4:
6c:0c:56:d6:0a:8f:31:dc:eb:d4:47:aa:90:25:05:
39:bb:bc:35:ed:61:d6:d5:c3:68:65:f0:63:df:be:
53:5d:7b:3d:21:7f:21:17:af:5a:39:e1:5b:ec:75:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E2:D6:28:39:51:3B:F4:64:88:C2:CC:DA:8B:CF:D6:AB:B6:F1:C3
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:47:f3:6f:18:b3:18:07:ee:ab:fa:18:2b:70:9a:85:df:05:
89:86:1f:a5:e3:b8:87:5d:9d:7c:2c:80:73:48:7e:0b:70:d2:
8f:23:b8:a4:2c:bd:30:d2:4d:e9:dc:1b:cd:13:2a:8a:89:4f:
9f:95:e0:e1:69:73:48:15:9e:17:a0:31:b7:27:df:88:f7:d2:
f0:62:26:5d:f6:4f:5f:a7:75:5f:9e:af:63:58:7d:12:ed:76:
63:30:2c:0b:5d:fb:00:28:51:ff:52:14:da:5a:08:d3:07:26:
85:5d:09:61:a1:d2:b6:3f:1a:c1:9f:d0:76:30:20:ad:01:5c:
17:9a:a9:cf:77:d6:0c:7e:61:8d:96:e7:59:cd:39:36:61:b7:
bb:b9:cb:be:93:be:21:88:70:36:c0:8f:64:5a:53:e9:07:fe:
af:e7:a8:93:21:b1:76:35:a8:2e:fd:aa:d9:2e:74:83:82:e6:
ca:48:6b:5d:b9:f1:a5:76:24:47:5f:c9:0d:a5:6d:79:d1:7c:
a7:c7:ee:cf:a8:82:30:55:63:58:63:e4:e4:75:4a:29:68:ff:
a3:18:df:1d:53:b5:57:95:27:5a:a6:3b:be:c6:fa:ca:d0:bc:
05:b1:68:28:18:0b:19:60:db:7d:d4:4d:1c:4d:b4:22:87:40:
36:61:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:45:24 2025 by rpki-client