Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: SvcfzWG8nJtVJOerqI0iJmcW52jPaYDVtoSUzmvP6ck=
Subject key identifier: 62:89:4D:9F:C9:AE:A5:49:0E:C4:24:21:62:53:12:DE:EB:22:30:BB
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 019A515135B517BE082817425213BEB38164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 1083
Signing time: Wed 05 Nov 2025 00:01:07 +0000
Manifest this update: Wed 05 Nov 2025 00:01:07 +0000
Manifest next update: Thu 06 Nov 2025 00:01:07 +0000
Files and hashes: 1: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (hash: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=)
2: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: 88L6549cV+reTtgUsmIRQacCQ5jzBasbN8XBH1gEbNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:35:b5:17:be:08:28:17:42:52:13:be:b3:81:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Nov 5 00:01:07 2025 GMT
Not After : Nov 6 00:01:07 2025 GMT
Subject: CN=62894d9fc9aea5490ec42421625312deeb2230bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:03:14:bb:6b:31:b2:89:2a:25:c1:d2:ef:dd:
85:b8:a3:a0:76:42:54:3b:3a:32:8c:50:56:26:e4:
5e:4f:7c:d0:28:bf:d4:a0:7c:c4:16:7a:4e:c6:9d:
4a:46:46:3a:86:2e:57:31:95:46:7a:00:05:44:a4:
6f:20:66:f5:73:5c:1a:b3:2c:7b:ca:c0:a1:a8:b4:
4a:67:2b:d9:21:19:a8:5d:e5:88:68:16:b2:49:a7:
10:0d:8c:e4:a4:1d:98:75:da:ae:09:cf:e9:45:b8:
10:4c:7e:88:0b:e8:95:d6:fa:96:95:6e:36:6c:8f:
52:56:22:ea:45:2b:52:b8:d8:97:9a:49:2d:47:c0:
fe:9a:77:ed:7b:ac:90:cb:4c:ea:c8:b1:3f:15:db:
2d:8f:f8:58:ec:8b:cc:c4:76:1e:4c:14:b2:8f:33:
d0:3f:53:a2:1e:1c:e5:1c:1e:bb:b2:5d:7c:c7:21:
87:7b:db:83:65:86:ed:32:ca:b2:e4:1a:2b:56:22:
35:80:dd:0c:89:91:06:89:28:6d:98:e1:fb:99:6c:
5a:2a:72:14:0a:09:39:9b:89:c3:bc:2e:5f:3d:6e:
02:d9:6d:48:53:96:cc:f0:15:8b:d3:a3:a3:83:df:
5d:af:a7:ca:61:48:74:4a:f7:af:03:0c:22:b0:16:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:89:4D:9F:C9:AE:A5:49:0E:C4:24:21:62:53:12:DE:EB:22:30:BB
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d6:56:0e:06:6e:71:b4:51:d9:16:40:8a:a0:db:39:e8:6a:
98:28:88:d2:41:b6:34:fb:78:8d:b4:8a:f1:4c:fc:c3:a8:24:
97:23:66:38:0e:ad:60:a0:d1:6d:43:4a:ad:44:49:5b:88:35:
9f:8d:5d:2e:5d:4a:98:61:45:57:7e:64:36:0c:75:3a:48:68:
f4:13:a3:a4:18:35:40:c7:9e:b1:b6:7c:19:ae:a8:c4:72:e4:
d5:14:b5:3a:78:06:f3:06:14:65:32:44:87:b1:b0:b5:b0:a7:
f7:65:07:33:bf:04:03:a0:c7:2a:ca:f5:73:67:97:26:7b:52:
36:4d:90:0a:b5:a8:ec:c4:d3:7c:ce:be:f6:45:c3:4f:47:1b:
d8:e5:33:30:49:cd:64:a2:7e:78:c1:80:25:a7:a8:5b:07:a2:
6a:85:c2:b2:c0:8b:71:fd:67:ac:52:f1:b0:ee:90:60:b9:97:
36:88:7d:eb:d5:38:28:85:2f:cc:cf:75:4c:ba:2d:89:80:85:
67:42:87:5a:86:cd:f5:12:68:58:fb:62:d6:cb:89:60:17:31:
28:14:4d:b0:bc:aa:d3:0f:1d:89:72:72:24:b7:de:38:d5:e8:
f5:3f:31:d6:4f:8d:81:f8:a6:46:5d:5e:f9:4b:d2:c5:60:a1:
7b:55:5e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:08 2025 by rpki-client