Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: nZxXdcHGNWVB4hLSDGiAjbJeSKhbznjkaLMRmz2lgJA=
Subject key identifier: D3:CE:48:5C:76:42:4F:52:78:03:90:68:93:87:FA:EB:51:8B:4D:22
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 019A52D26FD2B0B5FF65045CE15F9EE44F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 07:01:54 +0000
Manifest this update: Wed 05 Nov 2025 07:01:54 +0000
Manifest next update: Thu 06 Nov 2025 07:01:54 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: nt3H9wTqGisnOEx/39rx+Mf9RQnN54AbIk1K/A7fSYg=)
2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:6f:d2:b0:b5:ff:65:04:5c:e1:5f:9e:e4:4f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Nov 5 07:01:54 2025 GMT
Not After : Nov 6 07:01:54 2025 GMT
Subject: CN=d3ce485c76424f52780390689387faeb518b4d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:7f:51:aa:0d:30:35:e1:ef:af:e0:7d:4e:
70:39:23:54:00:d3:65:5c:58:d6:17:49:7b:16:2b:
dc:8d:73:87:2f:74:d4:88:31:17:7a:a1:fb:48:0d:
f1:54:66:df:10:55:4b:88:d3:55:cd:a2:af:72:f5:
77:8f:de:5c:2c:eb:a7:60:0c:af:b8:c3:3b:da:03:
91:cc:d3:60:c8:2b:f9:3e:47:de:43:71:a9:9d:ab:
44:ea:c6:f2:f5:b7:5d:a2:cb:43:92:b1:09:a1:c4:
ac:a6:7a:34:d4:9e:9b:1d:98:5a:8b:5f:e0:1d:17:
7c:17:4e:e0:c2:d6:9f:02:7e:0d:c3:7c:54:e1:3a:
52:97:5a:c1:c3:28:b0:05:98:7c:87:e2:5c:7b:69:
e7:38:85:2f:8d:b4:a1:3a:98:a4:d1:19:d7:bd:c7:
ff:17:8a:de:90:ba:3e:d6:6a:7d:1f:60:49:34:c1:
d4:49:9f:65:03:91:fc:58:a3:3e:a0:ba:ae:2f:cb:
7d:1a:49:a5:2a:86:7f:50:7f:27:5c:30:12:df:26:
e2:c0:44:e8:5e:1f:94:31:f5:61:fb:16:f5:4a:fd:
fe:68:81:8a:f6:87:c3:fe:20:d2:4d:7b:54:24:df:
47:ed:a9:97:4e:18:19:bd:48:8c:98:03:c8:fd:92:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CE:48:5C:76:42:4F:52:78:03:90:68:93:87:FA:EB:51:8B:4D:22
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:90:b8:ec:9c:f1:00:ba:2b:41:3a:b3:e7:8c:f7:e2:25:72:
11:ad:ed:d3:3c:3d:cc:fe:05:a8:89:dd:83:05:29:4a:d8:51:
c5:ba:e3:f7:16:b8:c2:b1:2f:7f:41:17:a5:79:f7:48:6e:c8:
d6:db:c8:6f:9a:7f:ea:78:c8:31:41:c5:24:0b:4e:c7:55:a6:
91:05:96:ea:23:6f:e4:bf:26:3f:1e:20:84:e8:5e:8a:c4:7e:
6e:0e:6a:0f:34:9f:23:90:d2:89:21:c5:6d:2a:82:c9:9d:58:
65:bc:d3:4a:5f:76:13:90:5a:da:a8:9e:3f:b3:b6:e8:42:6b:
0d:e4:a7:1a:5d:e7:7e:59:42:73:7e:c3:0c:2e:60:28:fb:1c:
f9:c6:bb:2f:00:42:57:94:6a:ba:1f:d2:16:6c:90:c0:84:d8:
a5:29:12:13:ca:d7:9f:17:7f:7e:67:c9:93:39:b4:fe:57:3a:
fd:4f:e1:fc:3d:ea:20:0b:b3:29:e0:45:4b:73:01:ed:5a:40:
84:93:61:a6:0c:d1:72:cd:b0:68:3f:31:50:39:2e:95:d6:d1:
39:4a:00:40:3a:3b:e1:16:5c:f3:4d:97:0a:93:68:c1:e7:24:
c5:43:34:df:0c:2b:eb:ed:eb:9c:e2:20:7e:19:9d:8c:c1:d5:
fa:20:b1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:03 2025 by rpki-client