Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
File: d53x3kOsymHuwDTOomi0ZUzBXKw.mft (raw, json)
Hash identifier: ZOYMXdKV/StDNtZ/cAz/UEVo1+9vPSWV44Id/zj++1c=
Subject key identifier: 4C:C4:3F:6E:96:E2:51:5C:C0:3F:7A:72:BA:25:FA:9E:77:21:3A:44
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 019A503E5AE2056BD735AA154F846B47EEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:54 +0000
Manifest this update: Tue 04 Nov 2025 19:00:54 +0000
Manifest next update: Wed 05 Nov 2025 19:00:54 +0000
Files and hashes: 1: 0vZUeITqxhjYTZ09-IZPJQyJrFs.roa (hash: XWy8JIsvHPb13TWVq0G62lkPYB9FumkdweR7BRskWwI=)
2: d53x3kOsymHuwDTOomi0ZUzBXKw.crl (hash: 8Vutg8S0rwUTBrMmT1e7BPfyxpdzvQHapVhZoDCoa2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:5a:e2:05:6b:d7:35:aa:15:4f:84:6b:47:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Nov 4 19:00:54 2025 GMT
Not After : Nov 5 19:00:54 2025 GMT
Subject: CN=4cc43f6e96e2515cc03f7a72ba25fa9e77213a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:d2:99:e4:e0:18:34:4f:55:bf:15:45:5e:
fb:14:cc:77:d0:47:30:51:34:ba:88:8e:a9:f7:01:
36:c8:9c:6c:22:0e:01:8d:48:5a:4a:17:d7:3a:47:
ea:b7:18:12:9f:e4:b2:12:86:c2:2d:33:ca:ce:cc:
30:a4:ed:18:7e:04:e0:5d:a0:9a:8b:7f:d3:5f:2a:
8f:35:8f:48:49:5a:92:33:d6:e4:8d:2c:dd:20:82:
ab:00:05:f4:3a:3b:ea:05:18:93:64:e2:ef:b0:7b:
e1:1e:ae:b4:cf:8f:82:61:c0:e2:22:34:49:db:37:
49:1f:a6:8f:4e:10:83:a6:fa:28:19:02:46:87:69:
26:65:17:ca:7b:4a:80:1a:6b:47:a4:45:76:00:a8:
49:46:cb:24:73:7f:cf:8e:f4:0d:e1:f7:92:c7:79:
db:ec:57:07:d8:74:48:48:94:d3:07:b8:b1:01:53:
f1:38:33:f2:3f:62:ff:60:d1:45:52:ef:e9:f8:44:
70:5a:cd:a4:36:78:8b:b3:8d:a0:b7:b1:cd:90:75:
55:0d:fa:44:8f:19:35:d3:19:fc:77:82:f9:3f:be:
69:36:62:33:73:2e:28:bb:71:26:18:0f:d9:94:19:
6b:a5:fa:9d:3f:31:ea:f2:61:b6:d6:fc:c8:e5:93:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:3F:6E:96:E2:51:5C:C0:3F:7A:72:BA:25:FA:9E:77:21:3A:44
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:94:3b:60:5a:3e:7a:05:2a:88:3b:85:1e:6d:fb:20:fe:ae:
71:bd:d4:71:35:1f:4e:31:7a:22:7d:80:04:75:8e:ff:de:0d:
d4:51:34:61:88:13:a3:fe:cf:cf:38:17:9a:c7:e3:9b:ae:48:
d3:15:dd:f0:62:67:01:d6:13:13:e7:9a:9b:b5:43:86:1d:07:
09:3b:df:fe:d0:67:59:f1:65:ae:af:b5:d3:24:79:b9:04:46:
15:25:a9:f0:23:34:30:26:ac:0e:1b:e1:91:8b:32:ba:d4:d2:
db:62:7e:5a:9e:90:a6:0b:f4:e1:9d:6f:f3:34:29:42:14:72:
d3:83:27:94:8a:38:d8:42:37:86:d4:59:32:7b:a0:b0:31:10:
da:ea:9e:5f:9c:cf:e7:13:de:71:6e:33:94:3a:20:8e:a2:4d:
f4:34:be:70:2e:23:8c:1c:0f:3f:8b:15:a2:b4:96:51:c0:c8:
b7:23:05:bf:eb:89:3f:bc:ee:c5:83:5e:95:63:03:b8:7e:a2:
1f:35:38:00:a3:88:16:ab:c8:06:15:8c:b4:32:57:d1:3d:31:
16:0f:d1:4a:e8:ad:f3:a7:d4:16:e2:32:0a:cc:e9:86:bd:b2:
8d:8f:2c:52:c9:1a:a6:c5:2c:9f:b0:ba:7a:78:38:1c:84:d4:
d7:9f:6d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:01 2025 by rpki-client