Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: pbuAM+AWpe+DoJsygc3wg4YUutpOvq0Rjo9yeGT/YAE=
Subject key identifier: 85:28:BC:8A:99:6D:87:64:B0:50:71:D3:12:BC:49:18:D6:31:0D:52
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 019A4D744F0EC4F364B6CCEB860E3334D553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 072A
Signing time: Tue 04 Nov 2025 06:00:59 +0000
Manifest this update: Tue 04 Nov 2025 06:00:59 +0000
Manifest next update: Wed 05 Nov 2025 06:00:59 +0000
Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=)
2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: mp08y/4FwdLPLOegl9iQyU+zz2VmzFaZu+uW1PfWSjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4f:0e:c4:f3:64:b6:cc:eb:86:0e:33:34:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Nov 4 06:00:59 2025 GMT
Not After : Nov 5 06:00:59 2025 GMT
Subject: CN=8528bc8a996d8764b05071d312bc4918d6310d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:e5:cf:29:0e:6b:f7:56:97:7a:1f:23:ee:
e6:36:83:df:d7:45:15:f3:e0:c7:61:c7:6f:fe:d6:
fe:5a:c7:5b:c7:3d:ce:65:ce:69:e9:10:57:db:92:
3a:6f:55:50:bd:59:13:35:ed:9e:fd:12:8a:4e:99:
8e:d4:d2:57:19:af:83:07:f3:88:31:09:6a:50:61:
d5:7f:5e:4f:a5:a5:e8:96:46:2b:78:92:65:b5:b9:
f1:57:5d:ad:ac:79:a1:37:57:ec:6d:b8:af:5b:f3:
32:ee:4a:12:ab:d3:68:1a:e0:1e:33:30:74:55:17:
2b:62:b0:10:40:87:be:fb:d1:ee:2f:f9:f7:97:ec:
da:4a:87:85:58:0d:9a:f8:36:85:8a:f5:00:b8:bc:
fd:2c:58:27:98:22:a1:83:93:6f:d0:7f:ce:a0:f3:
94:3c:10:b1:f7:0d:db:9a:ab:a8:89:6a:7f:b2:a7:
89:15:18:1c:a3:3e:12:8f:5a:3c:c5:ab:2e:30:cd:
f4:03:24:c2:70:f8:47:c4:3b:15:9f:ab:5b:e1:03:
31:89:17:62:21:c9:b8:a3:68:52:ae:eb:78:bc:fc:
ee:01:b3:5f:aa:3f:52:d1:39:e5:a3:b0:34:80:86:
31:dc:5c:d8:d2:61:7c:4c:bf:cc:2f:72:c5:1c:3a:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:BC:8A:99:6D:87:64:B0:50:71:D3:12:BC:49:18:D6:31:0D:52
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:03:11:f9:55:73:dc:72:09:9c:1f:da:81:86:70:08:30:17:
04:79:13:28:f5:89:a9:74:ae:57:db:f8:ff:7a:68:8d:49:3f:
ca:30:3f:f6:aa:e7:9a:c3:81:4b:4b:0c:bd:8d:5f:84:c8:5c:
bf:70:50:50:c3:6e:96:35:3b:c7:db:a8:4e:37:d8:e3:6b:55:
5c:c3:5a:ed:9b:b4:b7:7c:4e:aa:57:41:32:e7:32:2b:c5:c5:
ae:93:c3:37:82:69:7b:a0:ed:29:50:c8:9a:7e:a9:f5:6f:c5:
b2:6c:f5:71:ea:bc:5d:4b:d7:cc:62:dc:03:14:2c:67:cd:00:
73:f8:d5:a4:f3:d9:cd:af:98:f1:63:eb:ad:a7:f1:d8:55:8c:
3f:8e:73:4c:0f:b8:26:ea:00:28:e0:29:a0:12:7e:0f:c6:9d:
85:29:78:c3:37:7c:a4:21:75:3c:38:d4:e7:06:55:48:bb:f9:
7b:8c:13:cb:17:f2:91:37:9c:78:b6:7f:85:16:52:40:97:a5:
1f:18:e5:37:1a:55:a8:97:83:a9:62:63:4f:a2:1c:39:db:02:
a0:d7:97:00:a4:81:31:6c:33:46:90:32:09:92:14:a4:7f:aa:
b6:70:9d:65:e2:6a:2d:a1:d3:a2:9b:fd:b4:1a:95:e8:f6:03:
b7:90:a9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:54 2025 by rpki-client