Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File: d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier: tAzCrP6Ru7NQGe1eQUhdHd3KkPuWTbmFxgiJouezAOA=
Subject key identifier: 89:84:F4:3A:5B:A7:28:99:88:98:65:98:91:0B:64:B6:7A:0E:E3:4F
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 019A4EBD559FC56FFCD3C59CA37CFD5232E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 12:00:22 +0000
Manifest this update: Tue 04 Nov 2025 12:00:22 +0000
Manifest next update: Wed 05 Nov 2025 12:00:22 +0000
Files and hashes: 1: 3qTzEcW6UJi2N2jS10ksOP0jGPg.roa (hash: bi68C3NI8kVP+jK95/ZZuCFpomCw8AVgobu4v38Zwn4=)
2: d411kki9lFxs44QujWQtzScxM00.crl (hash: +G05aUMQtIiZqrHnDQQOETONvzGShRHLXK86V2DNIPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:55:9f:c5:6f:fc:d3:c5:9c:a3:7c:fd:52:32:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Nov 4 12:00:22 2025 GMT
Not After : Nov 5 12:00:22 2025 GMT
Subject: CN=8984f43a5ba7289988986598910b64b67a0ee34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:0a:40:84:1f:24:3b:6b:3c:48:98:1d:9e:
00:b6:4d:b2:94:fa:5b:9e:f3:e9:53:25:ce:6f:8d:
11:ed:ab:9f:fa:20:b1:fe:2d:83:13:e7:01:6e:05:
64:97:ee:9e:7f:fd:42:6b:27:fc:58:e6:35:2c:17:
01:68:9d:f6:c9:0c:a8:e0:78:df:82:c5:c2:ac:1e:
00:32:1c:6f:ce:66:fe:d0:81:85:6c:45:0c:cd:2e:
9f:70:47:88:fb:22:f7:3c:54:8d:ba:b1:f9:49:aa:
f7:a1:8f:39:ef:a9:91:c6:a8:4d:cc:23:dc:93:c4:
84:00:93:d9:e4:bc:0d:ea:47:25:51:63:d5:f1:b3:
a7:de:43:f4:72:11:a9:2c:b2:37:c1:06:ce:1f:d6:
98:17:80:b5:18:0f:97:75:d4:32:d9:37:b4:99:d4:
c7:2d:1e:7d:40:c5:50:ae:e7:c5:9f:63:60:a5:2a:
15:bd:af:89:a3:f9:d9:84:ea:47:70:df:3d:ce:86:
c3:40:4a:f6:34:00:a0:77:cc:80:66:62:21:68:75:
4d:7a:00:12:11:7e:8b:31:3b:5e:31:c1:21:85:3a:
ea:73:ce:24:d5:ef:c2:43:8b:28:2f:bf:e9:6c:21:
fc:dd:8c:1b:61:4d:92:34:1e:cc:c4:12:bd:81:d4:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:F4:3A:5B:A7:28:99:88:98:65:98:91:0B:64:B6:7A:0E:E3:4F
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5e:e8:cc:20:d6:0d:67:9b:4d:91:16:c1:53:14:e2:09:b2:
ee:7f:0b:e2:93:86:df:54:f3:a2:8f:96:37:dc:16:7f:5b:58:
ca:54:61:2a:eb:62:96:c8:06:95:b5:b2:1b:65:d2:a1:2e:b9:
0b:34:1d:9b:18:31:6d:b5:a3:1f:6e:c0:be:e0:c5:29:4a:26:
58:f9:f4:91:64:3c:4c:b0:fa:17:08:9a:90:70:79:a5:e8:49:
e0:40:2f:67:00:69:89:ba:8b:f6:06:1a:89:5d:1f:07:28:f6:
12:e0:a6:d4:49:d1:49:a4:ad:63:64:f9:ac:39:f2:4d:a6:ef:
e5:14:e7:65:0b:76:6e:14:92:18:24:5e:91:62:2a:cb:3f:ba:
e4:e3:57:a7:c7:43:64:3f:c2:a3:6b:45:28:80:2e:c6:26:29:
3c:cf:4b:c3:c1:56:d3:c9:93:8e:4b:42:7c:dc:ad:93:d4:cd:
19:3b:a6:c2:f8:d5:76:23:50:11:c5:7b:e0:a7:bf:a7:ce:8b:
a7:e1:31:a8:76:13:49:a9:ba:03:a8:71:6b:13:24:af:29:52:
ad:1a:7b:bf:76:7d:8b:8c:4e:1a:48:c1:5c:1c:11:0c:8c:f8:
50:ce:dd:30:3b:29:46:f0:d9:a0:74:bb:70:c9:8c:74:76:53:
98:68:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:38 2025 by rpki-client