Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
File: du6ffY5dGMUIhPgzeK5Iui_NpuI.mft (raw, json)
Hash identifier: ndX0APp/sDJOPDx9kVQeVMKHYZ+rtOj0+PcyBQVMTms=
Subject key identifier: 4F:F0:2B:EB:66:8F:C6:59:5F:99:75:CF:12:08:68:A4:97:BC:CD:BF
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial: 019A4FCFF23092F564234B6095CC3BEE5B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
Manifest number: 1265
Signing time: Tue 04 Nov 2025 17:00:19 +0000
Manifest this update: Tue 04 Nov 2025 17:00:19 +0000
Manifest next update: Wed 05 Nov 2025 17:00:19 +0000
Files and hashes: 1: du6ffY5dGMUIhPgzeK5Iui_NpuI.crl (hash: 83p2BqsUJzYznRbyPjHgWQTYMTbUH8hKtsERXbRTS2I=)
2: mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa (hash: mR7ch814nod8YJeRcpIlHri0tj0aQVOIDu8w+ijK6HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f2:30:92:f5:64:23:4b:60:95:cc:3b:ee:5b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Validity
Not Before: Nov 4 17:00:19 2025 GMT
Not After : Nov 5 17:00:19 2025 GMT
Subject: CN=4ff02beb668fc6595f9975cf120868a497bccdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:8f:33:d7:43:92:43:99:d7:85:aa:d7:b6:
8a:20:60:7d:48:f0:c4:1e:3b:b6:15:af:d7:e4:9f:
47:df:6d:51:1a:c8:9e:0a:f0:e5:6f:e3:9e:b7:92:
e0:ff:57:c6:17:b8:2c:9e:6c:f7:a1:a4:0c:ec:ad:
c5:a2:ad:5d:c4:09:62:fa:0c:6f:de:7c:20:3e:80:
f7:e3:b1:3e:aa:84:18:62:78:e6:fd:d0:69:53:a6:
73:15:da:35:ed:21:17:2c:d5:1d:3b:fd:6c:ea:7f:
55:fe:6d:21:0a:9d:3c:87:20:d1:b2:c5:b4:70:e8:
12:d3:3a:c7:76:de:97:3f:00:61:6f:6f:77:f7:9c:
cc:47:10:da:ba:a0:3c:2c:00:1f:ab:99:d0:8c:1d:
1b:0f:7d:e9:a8:cc:64:4b:88:49:da:8d:4c:ac:a7:
e8:05:e2:ee:5d:50:8b:4c:d2:49:be:13:03:5e:c6:
06:a0:c3:5f:51:58:bd:e4:8c:87:99:2e:da:43:ea:
e6:95:ae:c6:e5:8f:3c:07:f1:83:7e:f4:9b:e8:27:
3e:39:e4:94:1c:18:b9:ee:25:32:e4:60:77:5f:ff:
b1:cf:ea:39:2f:ab:10:93:3f:73:c8:de:be:9a:86:
f3:42:ab:73:29:88:fb:cd:fd:f7:1a:a3:08:2d:23:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F0:2B:EB:66:8F:C6:59:5F:99:75:CF:12:08:68:A4:97:BC:CD:BF
X509v3 Authority Key Identifier:
keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:be:ba:92:82:ba:d4:c6:d5:38:0a:4c:11:50:52:4c:91:85:
fa:22:53:60:a6:2c:fb:49:8b:d4:4c:25:ce:ea:30:4f:fb:31:
68:e3:15:90:56:1b:1e:ae:b8:eb:3e:a9:be:3f:f7:f2:c1:4d:
7d:7e:96:3d:31:57:89:d1:00:8e:ad:23:4c:0a:48:a2:a2:81:
ac:af:15:2d:9f:5b:51:39:2d:31:2b:db:a6:ec:a7:fb:25:bd:
db:5e:13:4b:13:38:82:ca:36:54:7a:99:67:93:e2:c1:b8:48:
53:c6:94:ca:b9:d4:92:dc:69:ff:68:f7:b6:07:e5:57:04:51:
ac:40:64:a7:a7:b1:fd:d9:75:a3:d7:0b:f8:d3:83:35:30:08:
f9:59:b3:6a:43:76:5b:17:47:da:43:71:5a:72:cc:78:e4:29:
62:5d:11:66:d2:4f:3c:a4:e7:22:ee:38:a6:37:af:70:0c:0f:
dc:70:89:6a:11:87:cf:dd:e3:e5:9b:03:bc:24:50:5e:2f:8b:
25:87:6a:4d:dc:75:9a:94:0d:60:de:e3:6d:d1:60:bb:d9:f4:
3a:a3:c0:6e:1c:9e:e4:6a:91:2d:49:5a:c0:4f:1c:01:a6:d7:
dd:e2:df:2b:12:da:c0:11:0d:d2:a6:ff:d3:79:9a:18:d6:91:
8b:d3:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:55 2025 by rpki-client