Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: S9EliUODoPL3EdF3LFehvcU3cux5I8NpZrNlBtDGX3s=
Subject key identifier: A9:DB:E0:9A:51:EB:7D:86:9B:D9:7A:3A:32:50:BB:B7:C7:9D:27:C3
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019A4EF59AB923238D63F4CB5231138455FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 16DB
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: c9yhjB84CD5SpKbWJqXAyb0c5tcirVkA5Q3jmctaKew=)
2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9a:b9:23:23:8d:63:f4:cb:52:31:13:84:55:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=a9dbe09a51eb7d869bd97a3a3250bbb7c79d27c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:5f:93:d6:76:12:f1:9a:85:da:2f:97:74:
71:3b:dc:26:27:d8:ca:04:0f:19:ff:42:1b:eb:dd:
93:ac:4c:4b:72:08:26:7f:22:f2:7e:3b:37:9a:f1:
85:7c:d4:40:ab:b5:f4:55:e5:ce:1f:97:e1:06:9b:
07:25:c5:a4:69:3c:47:4d:fa:83:dc:d5:f9:fe:f8:
74:1b:76:88:aa:41:52:e2:1d:32:96:7b:ee:f1:c4:
24:ca:eb:73:4f:97:4c:93:aa:13:90:65:e6:b5:2b:
7e:84:dd:3b:d5:94:50:c7:c7:38:72:6c:d4:ab:3d:
7a:aa:2d:f7:ee:e1:7c:69:42:0f:d3:87:00:3b:50:
a8:28:36:9e:07:80:b9:dd:e8:d3:4a:cd:2a:68:54:
a8:01:f7:a5:8a:aa:5f:ff:89:81:95:c7:36:8f:79:
ad:8c:3b:25:6b:05:e0:0f:6d:39:d7:08:89:35:e3:
b5:35:15:a0:71:23:91:20:ca:58:dc:32:4d:81:16:
8a:73:81:49:58:98:8d:41:05:8a:cb:d5:64:d8:3b:
b0:af:59:99:83:a5:bb:1e:9b:97:6c:e4:ac:76:d3:
82:a7:8e:56:eb:9b:b5:82:1e:40:be:44:d3:c6:54:
a0:5b:58:c1:ba:14:e3:89:3f:be:32:32:59:78:45:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:E0:9A:51:EB:7D:86:9B:D9:7A:3A:32:50:BB:B7:C7:9D:27:C3
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:de:7a:41:ab:fa:ce:f5:7b:9a:58:87:ef:58:64:53:a5:e1:
be:71:5f:d6:fe:6b:ff:0e:56:bc:d0:ec:ce:aa:23:69:63:89:
89:8c:e0:6d:f9:3f:62:f7:a8:5f:c5:97:db:c0:3e:03:b1:37:
5e:35:2f:f3:25:e8:da:a5:87:ee:62:f0:97:b5:f7:81:f7:21:
2f:63:30:d4:94:ad:48:9a:68:19:05:67:5f:b2:51:ec:51:71:
fe:18:5a:b6:f5:cd:0d:39:af:5c:a6:69:46:42:fe:ec:87:c0:
42:6d:6f:f7:1b:da:5d:b6:fe:be:29:3e:e7:c5:92:f6:9f:8d:
fd:30:4e:15:94:12:6c:69:d2:e3:ed:2c:6a:d0:11:08:63:d5:
b1:be:6d:8c:76:4b:52:98:fe:76:cb:e5:1d:c7:b3:01:4e:42:
7e:47:cc:04:16:aa:52:57:14:3b:3a:80:44:2c:06:17:b3:ff:
60:a3:1b:a1:d9:a5:f8:91:56:ed:60:07:39:df:61:24:f2:6c:
d1:ff:ea:80:04:9f:89:30:91:41:16:a7:1b:57:ff:a5:e1:38:
09:0b:45:fa:74:b7:29:b5:94:3c:ba:f6:c2:c9:31:5a:01:d8:
a1:10:1d:b9:53:d0:20:54:67:b1:bf:c5:e2:a5:ac:bd:70:2b:
ae:8d:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:36 2025 by rpki-client