Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier: nDmv14bcDHJz1nPMiVvUdBOrszQQTexpVU5DiTOBBVk=
Subject key identifier: 65:A1:E2:6A:9D:C5:B3:94:39:A5:FB:FE:A9:42:1A:3B:8E:D2:98:21
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 019A5187B76B918BCE231C52CC600CD3F81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 01:00:39 +0000
Manifest this update: Wed 05 Nov 2025 01:00:39 +0000
Manifest next update: Thu 06 Nov 2025 01:00:39 +0000
Files and hashes: 1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=)
2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: 1fNx17+iHvB7rncdD7j2eGGzJ31ujeAM2/oD203bZus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:b7:6b:91:8b:ce:23:1c:52:cc:60:0c:d3:f8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Nov 5 01:00:39 2025 GMT
Not After : Nov 6 01:00:39 2025 GMT
Subject: CN=65a1e26a9dc5b39439a5fbfea9421a3b8ed29821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:ae:bf:7a:7f:d2:bc:c8:e8:74:26:de:1f:
d8:f2:de:79:4f:93:0c:16:1c:f9:19:51:e0:85:2f:
8b:5b:a2:c1:c4:0b:40:21:a4:eb:93:e2:98:e9:0f:
97:db:7d:9d:67:40:79:e9:64:22:6b:f7:dc:a2:f9:
c1:49:12:5d:7f:d3:13:5b:72:4b:63:f0:35:8f:d3:
1d:38:98:46:3f:4d:4a:50:b0:b8:2c:7f:e1:fc:64:
0e:e5:87:ac:27:c4:86:f4:f4:e7:14:fe:1b:be:e1:
ad:f9:1a:ce:f9:66:ee:59:d5:02:39:09:2a:e6:98:
41:79:3a:43:f5:70:06:65:9a:89:24:f3:af:89:ce:
33:3e:8b:b9:ec:53:f5:81:cf:08:b9:cb:3e:42:a8:
96:ba:37:f3:72:39:62:bb:e2:31:1a:1b:35:74:2b:
dc:ec:87:49:b0:ae:0e:c3:32:2b:22:8a:b8:a6:d7:
fb:dd:45:b4:7c:01:84:8a:a8:4b:d5:14:9c:9b:44:
6e:43:3f:93:a4:ce:44:d0:7c:02:bb:bf:a0:19:a3:
32:7f:a5:63:c0:29:c2:f8:0f:26:41:ea:46:3f:ca:
c5:3d:73:c7:63:23:82:49:d9:3f:18:b3:8c:ea:f9:
47:fa:28:41:36:a4:57:3c:3c:11:e0:f4:35:1c:21:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A1:E2:6A:9D:C5:B3:94:39:A5:FB:FE:A9:42:1A:3B:8E:D2:98:21
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4f:a5:f4:63:bd:01:8e:46:84:c4:06:23:8e:08:aa:14:2f:
ff:b7:b9:84:46:f8:53:c1:8f:6e:88:31:a5:95:e7:8b:93:fb:
9d:b4:56:1e:40:dc:2a:d5:60:d5:f8:40:5c:d3:40:07:4d:86:
45:df:f4:7b:9e:7b:ca:e9:da:4e:77:ad:6c:28:f6:7a:c3:4a:
48:93:1b:c1:25:7c:fa:e5:0a:79:0a:3b:36:5c:ae:88:1f:79:
ee:50:d6:61:30:5b:e2:7e:f1:7e:2d:d4:ba:70:9e:23:c1:d7:
e2:4a:fb:d9:56:cf:cd:d7:c7:49:f7:fe:78:a5:15:9c:4b:57:
55:6c:0f:ea:f3:d1:62:87:18:fd:a0:c6:c3:3d:0b:4b:8d:68:
7e:a9:79:e6:99:de:d7:46:70:50:15:ff:bf:09:35:de:4e:c1:
24:23:bd:6d:7a:5b:29:ba:8c:25:63:9f:06:b8:df:5f:20:0e:
97:c6:e1:16:2b:11:4d:12:08:43:eb:89:6a:94:01:15:dd:93:
c1:ab:cd:ad:31:66:c3:27:0b:1b:99:3c:71:1b:92:d4:8a:dc:
82:91:0c:09:98:dc:fb:5e:15:7e:5b:bc:db:56:4c:ee:30:3d:
0a:07:c2:04:da:2c:a0:ad:02:b3:bf:dc:55:ff:16:5d:bd:55:
8a:cf:e2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:48:45 2025 by rpki-client