Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: 2R6bxnA6sdeU32gRYBgH6QMhJOQs1AH65ixAqxVtBeo=
Subject key identifier: B6:AC:7B:BD:C5:C7:CD:62:51:19:96:A8:BD:67:B0:25:37:D5:FC:65
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 019A4EF52FEF0DA4C13C0F28F10AEF48B867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0D0D
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: 3e6Y6ePLQTuap7DcOvkdM3QlbuHQKHLcoGIIZyWz/kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2f:ef:0d:a4:c1:3c:0f:28:f1:0a:ef:48:b8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=b6ac7bbdc5c7cd62511996a8bd67b02537d5fc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:5a:31:db:23:9b:40:c0:21:96:04:37:72:
f9:3c:83:a9:a8:db:ed:80:8f:e7:2a:17:2a:22:2f:
a7:61:14:f4:e8:c1:a8:9e:71:15:10:55:3d:a7:9d:
72:27:76:9f:f4:03:6a:7b:b2:eb:2f:7d:90:e9:f6:
4b:d5:3e:72:97:3a:8c:93:bf:e5:e7:93:ee:be:0a:
57:b0:d8:e9:75:ee:30:0a:a4:d1:05:00:c7:b3:23:
b0:4c:38:2c:d8:29:3e:a3:50:78:47:99:cc:5e:f0:
50:ce:0d:55:87:63:9c:01:15:a2:92:8e:f5:7d:85:
18:71:ae:ba:a2:a7:07:a0:79:04:07:ac:b7:c4:1c:
df:37:0a:bb:7f:dc:de:6d:93:45:07:21:84:db:e8:
78:85:bc:6e:4a:f3:31:8b:a9:2b:c7:23:42:af:12:
2c:dd:56:cf:8c:4a:68:bc:c9:f1:9a:74:2e:79:d4:
2d:73:1d:d8:6f:2f:84:1e:87:9b:3f:32:c6:b0:36:
b3:de:70:2b:54:c9:7d:7e:7b:e5:05:9b:a3:91:06:
1f:b1:78:2f:3a:d3:7d:c8:59:5b:9a:ac:b9:ee:95:
73:b4:0e:bc:ed:9d:32:db:90:7a:8a:ef:b5:bd:cf:
33:e4:b7:1a:37:8e:6f:21:5e:47:4c:ad:89:14:09:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:7B:BD:C5:C7:CD:62:51:19:96:A8:BD:67:B0:25:37:D5:FC:65
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8c:6f:f2:aa:c3:82:71:29:d0:d6:10:36:03:3e:d1:0a:71:
a4:0c:59:a6:bd:bd:d1:eb:d6:42:e5:f5:f9:24:4f:81:aa:5a:
0d:2a:18:f7:80:58:37:9a:4c:fa:b6:2d:c9:31:77:9a:ed:59:
34:fd:6b:cd:44:b6:41:12:74:4f:38:50:53:98:a0:94:47:5f:
f3:55:16:77:9e:bf:fb:ac:94:06:69:bd:c2:9b:eb:96:76:14:
f5:30:cc:46:8e:2f:08:13:e8:ac:0c:cd:61:7a:e4:6a:a9:a7:
7c:71:44:10:48:97:b7:c7:85:40:a8:d9:59:6d:ea:48:60:1a:
67:e0:89:68:c3:e6:06:8f:ee:b4:44:c8:67:76:d5:e2:bc:82:
cf:68:54:a0:01:34:7c:92:2d:83:6f:c6:e9:8f:ed:0f:71:72:
44:0b:a1:48:de:47:84:02:d1:e8:4b:9b:54:7a:16:fa:75:81:
48:51:43:44:a4:67:1b:49:8e:67:96:c9:52:14:78:43:30:0a:
dc:56:f0:b9:17:27:ff:26:7c:5a:a1:b1:37:5e:e7:e9:f0:76:
f2:d2:e5:e7:2e:c9:24:1b:4f:50:dc:63:a7:b6:e6:ef:25:25:
4d:75:33:1c:55:27:ae:74:3a:2f:f3:8b:e2:b5:b7:08:5f:2a:
fc:28:ee:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:28 2025 by rpki-client