Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: qfZHtKFSRmIayKyjVgR4xtcKmbwAW6dqALt2LGwVmtU=
Subject key identifier: 83:A3:1E:7F:75:D6:A1:08:AC:39:DE:34:AD:3A:9C:EE:AE:66:A4:E3
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 019A4F98D65B9144A7A8829505726651C983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 0A09
Signing time: Tue 04 Nov 2025 16:00:07 +0000
Manifest this update: Tue 04 Nov 2025 16:00:07 +0000
Manifest next update: Wed 05 Nov 2025 16:00:07 +0000
Files and hashes: 1: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: tpowY/TQEkqp4Lh+i/+kErSz7E11Nf1z+7Dg0e23hks=)
2: AUcTDGFOG81He-CgX2Nb9NjPt98.roa (hash: VCQVsxF89yc5l33h6/1499iiv5KQTcfZEYfizAwCUSE=)
3: vaF2ggurkdMa29mOe8Ln8Gh0s84.roa (hash: 0hWPx/v7SQ3YrJu6uA8c9hJgR2g58Nd5ph2a6xS95t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:d6:5b:91:44:a7:a8:82:95:05:72:66:51:c9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Nov 4 16:00:07 2025 GMT
Not After : Nov 5 16:00:07 2025 GMT
Subject: CN=83a31e7f75d6a108ac39de34ad3a9ceeae66a4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:9c:45:4f:36:a9:48:6c:da:95:52:b9:be:
e9:23:22:46:44:b7:fe:ab:de:a2:fe:5f:3e:f6:25:
c9:a5:12:b4:78:e1:15:73:18:0f:4a:3b:a5:48:a1:
9b:f6:75:22:e3:ac:7d:02:40:55:4b:67:d5:5b:3d:
4a:8d:bf:26:25:27:e2:26:af:2d:85:34:89:ea:96:
8f:70:d8:88:e1:a0:df:eb:32:a4:9b:ed:aa:cf:e1:
f3:e1:77:bd:b7:bb:14:ec:bf:91:c7:de:80:c0:54:
bd:9d:d3:10:62:8e:ec:44:90:ca:af:32:29:5c:cb:
7e:4b:1a:21:dc:2c:54:2a:3c:31:9e:55:0a:7d:6f:
63:db:5e:ba:35:2c:00:9f:ba:e3:3b:fe:f8:63:13:
37:2c:06:1c:94:60:1a:b8:72:1c:2e:79:9c:92:59:
6c:8d:a0:85:90:cd:bc:56:0c:9c:9f:19:bb:51:40:
08:13:29:89:e8:9e:c5:1d:78:a7:de:3b:6e:4a:2c:
fc:e3:24:68:6e:b8:c5:eb:f6:c5:7e:d4:cc:ba:3a:
fa:11:a4:e7:c4:c3:53:59:29:34:c0:9a:cc:b7:b4:
5d:6b:b1:ce:a3:97:86:2c:b2:d8:bc:41:76:94:6c:
0d:8b:2e:79:e1:f7:b4:e3:c3:02:1e:8b:3a:af:1f:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A3:1E:7F:75:D6:A1:08:AC:39:DE:34:AD:3A:9C:EE:AE:66:A4:E3
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a9:60:c3:5d:28:a0:85:46:32:55:07:dd:24:40:fb:04:5e:
7a:70:4e:ab:e3:8e:1c:8b:33:b5:23:08:05:65:c8:13:c2:d9:
77:c5:7f:88:2d:c8:aa:d9:20:9d:e2:3a:b1:fe:2f:23:00:c2:
17:8b:35:28:7d:08:e7:87:87:4f:36:a7:d8:95:3d:ba:78:2d:
ea:ae:56:e2:24:a7:da:79:9a:7b:ec:f5:b3:73:47:2e:85:02:
5b:4c:88:c3:66:76:26:89:65:89:73:3f:04:63:f9:c5:b9:b1:
41:79:ef:27:87:82:41:55:10:a5:4b:fd:e5:7b:ba:21:4d:64:
ce:8e:49:61:af:89:39:33:00:3e:62:ea:f8:fc:a6:4d:4f:4e:
c7:24:18:c1:aa:ab:db:a1:ab:74:a7:07:c5:2f:c0:a5:f9:3d:
9f:19:53:c1:f4:83:e0:64:85:2a:a6:db:4d:dd:eb:85:1d:3b:
1a:38:cf:a8:c1:44:ea:46:40:9b:45:56:0f:20:61:d2:76:92:
60:ba:45:10:da:40:67:5d:fb:26:8f:9d:64:b0:90:15:7b:91:
aa:18:e4:ca:e8:6f:66:7d:21:81:28:14:f0:ad:00:ea:58:a2:
bf:37:3a:c3:54:3c:cf:d6:33:b5:4b:28:84:cf:5e:ef:1f:b4:
d2:a0:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:48 2025 by rpki-client