Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: 1IWi/bV0ES8flTxfljRic7Ajt9tNEwjsdjtIEvCC9/w=
Subject key identifier: 0C:EB:59:34:42:59:4A:6C:E5:27:81:81:B5:C4:6E:96:17:93:EA:BB
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 019A4EF530FCDBFD82E5DCB29F2087C34318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 0962
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (hash: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=)
2: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: 8JSz6aiWvoUdeMcRecsmxP3CGdPKhCnqUkuIy1mNonE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:30:fc:db:fd:82:e5:dc:b2:9f:20:87:c3:43:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=0ceb593442594a6ce5278181b5c46e961793eabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:ea:49:3e:5e:c1:0f:08:d7:ee:51:18:e7:
3a:8f:77:6c:3c:f5:7b:e1:c5:6a:cd:d7:a9:c4:b3:
fe:23:f4:f6:3d:0c:54:99:17:e9:54:d7:fc:48:0e:
c3:eb:72:c3:8c:6d:0c:1e:74:ba:01:9f:82:42:10:
72:0b:d3:38:fd:09:b8:c4:e6:61:26:b6:64:71:7f:
db:dd:b9:e1:91:b8:03:3c:01:04:e7:77:e6:b1:b4:
e5:dc:11:29:3f:24:9a:ff:7b:c4:42:03:d9:df:14:
e2:2b:5e:42:5b:8c:ba:1e:e4:44:83:38:e0:44:f4:
9b:3f:57:07:f5:a9:32:68:c5:6c:65:f3:a0:56:61:
f6:50:b1:e2:74:bc:8e:b6:e7:65:88:9d:85:e5:4d:
ce:bc:3e:52:c8:17:0b:06:04:ef:f6:9f:60:c4:b3:
7c:b0:5d:00:1b:83:79:f4:52:60:f1:8e:26:da:c5:
eb:e1:79:a1:37:89:35:31:99:49:fe:74:8c:a8:63:
50:82:e0:41:77:1f:81:0b:c6:c6:ae:70:31:42:81:
69:92:21:16:6f:79:b8:4d:a3:93:b7:24:17:0a:4e:
08:04:8b:44:88:d8:c9:b1:aa:cd:f5:9a:a4:a9:50:
08:7b:81:72:21:a6:c1:b4:32:e8:c6:fd:43:75:a6:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:59:34:42:59:4A:6C:E5:27:81:81:B5:C4:6E:96:17:93:EA:BB
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3d:a1:ac:41:c8:ef:a5:e3:08:69:63:31:b5:ad:25:7b:a1:
60:a0:62:90:29:c9:e2:c8:28:24:ba:01:02:5a:8e:8b:fc:08:
c5:d5:81:2d:cc:d1:79:00:74:17:cc:42:f2:41:56:5b:d3:82:
47:78:e5:33:5e:4a:53:73:09:65:cd:61:ad:c0:95:25:6d:0a:
ae:c5:fd:26:0b:5d:8c:22:33:01:b7:78:99:2b:37:25:f3:49:
de:1e:60:4a:6c:45:87:8c:e3:23:a8:34:2a:25:db:17:cc:31:
6d:1e:54:85:4f:df:be:35:0b:0f:c4:15:96:e5:22:b8:73:08:
8d:68:09:71:95:88:32:cd:10:e0:72:86:a0:6b:d7:51:fc:f2:
40:aa:e7:f7:3d:39:57:15:34:33:fb:88:10:aa:b1:ff:c5:9f:
7b:a6:d9:85:e5:7d:4d:81:12:d3:14:e6:31:9b:f2:72:d5:1f:
4d:bb:54:2d:0c:41:ce:16:6f:dc:bf:7e:b3:66:7b:c0:1c:7f:
44:d8:33:59:f5:3a:58:db:f0:96:8c:85:e4:7f:a8:e0:7e:84:
9b:15:e1:16:f3:f4:0c:7b:3f:80:9b:87:80:3b:7c:c4:a4:81:
55:c6:33:a5:51:c1:4b:95:b1:8a:c3:09:fe:2d:25:25:44:97:
71:ed:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:45 2025 by rpki-client