Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: hINpN5+LyxNp8Oh9uTV9EDTwz/g/n5oG9JrXxnEgJM0=
Subject key identifier: 3A:81:CA:CE:DB:B7:04:33:24:3D:C2:8C:78:41:41:3F:29:23:D1:FB
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 019A4D0737B4C19D4071EACCBA60EA1F7517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 04:01:49 +0000
Manifest this update: Tue 04 Nov 2025 04:01:49 +0000
Manifest next update: Wed 05 Nov 2025 04:01:49 +0000
Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: gKosKfNbtmd7/IvQE8IKkrqbhys9vz7Z3K0RkrubcmI=)
2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:37:b4:c1:9d:40:71:ea:cc:ba:60:ea:1f:75:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Nov 4 04:01:49 2025 GMT
Not After : Nov 5 04:01:49 2025 GMT
Subject: CN=3a81cacedbb70433243dc28c7841413f2923d1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:a1:9f:87:c7:7d:f6:e8:84:bb:31:90:2c:
fc:8f:07:0e:4b:5f:75:d4:1e:8a:be:7f:cf:b9:e9:
41:cf:29:47:0e:31:31:b2:0d:93:e1:7f:63:38:a9:
71:5a:67:22:2c:71:87:89:e2:94:05:61:7b:2b:ec:
6d:ca:53:c9:b2:42:4b:82:37:7c:fa:ac:6e:24:23:
eb:27:f2:e6:5b:6c:bd:12:c3:40:9b:2a:14:38:c8:
25:be:cb:c0:52:b6:ef:36:c0:12:bd:77:a5:f7:85:
b5:ee:e6:19:74:bf:18:a3:9d:70:31:5f:e2:f9:5d:
e6:49:ad:26:f1:8d:fd:93:e3:37:64:c5:8a:99:85:
b6:8f:92:16:9a:18:93:24:31:9b:8d:de:ea:b0:de:
fb:22:5b:24:8e:4d:f8:cd:66:80:e2:1a:46:36:8f:
20:80:42:62:58:be:de:05:7f:e6:34:dc:ec:02:51:
13:c7:b0:67:e6:b8:f8:65:cf:d0:02:08:8f:f4:73:
e3:fe:c4:59:06:7c:d8:97:a7:70:67:cf:db:1c:3e:
60:81:4c:98:1b:c8:b0:65:25:4d:3b:2d:db:d1:9e:
f5:aa:ee:df:99:c7:34:4c:b2:e5:97:82:36:02:a0:
b5:19:4e:01:c9:b8:f4:3e:b5:42:83:44:8e:46:79:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:CA:CE:DB:B7:04:33:24:3D:C2:8C:78:41:41:3F:29:23:D1:FB
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:35:0d:f9:62:be:a0:e9:61:b0:3f:c9:d8:64:51:67:d6:
9b:0d:d4:71:c2:89:55:4b:03:98:69:65:75:02:cd:76:70:0d:
a0:ba:7f:93:ae:7f:a0:01:f3:3d:b8:21:26:a3:a1:2f:9d:83:
1e:d0:27:d8:e4:7d:50:a4:41:21:a9:40:63:a1:9f:32:ea:92:
11:12:04:6e:34:9b:d3:62:44:58:30:95:ac:6f:be:44:fe:79:
61:1a:03:60:ed:5b:94:47:45:e4:44:4f:e9:b4:a1:06:08:81:
e8:33:ed:7b:83:be:43:9c:a0:c9:a6:23:9c:82:eb:c9:f6:fd:
fa:3a:3d:5b:95:4a:64:f4:84:99:8d:3b:46:b9:3e:cd:c2:b7:
85:c4:cd:43:64:3e:11:25:b0:1c:fe:97:be:e3:09:e8:71:d5:
aa:08:ac:b5:92:cb:d1:e4:9b:d5:e6:09:53:2b:97:8e:ae:bb:
1e:a0:7f:c2:22:7b:67:b6:dc:6a:12:5b:87:f5:b1:f4:6b:35:
79:06:0a:b4:b8:cf:29:df:ff:5b:bb:e3:45:7e:6c:dd:71:58:
44:3c:a7:d8:0b:a8:7f:c7:3a:b1:d4:18:73:dd:4b:e0:20:f1:
e4:b5:bc:92:10:2c:5a:2b:df:07:76:c8:0a:a9:48:d1:39:e6:
8d:cd:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:38 2025 by rpki-client