Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: n9l63ubmo2EsJ/S/dRd5Mdn0HaJgVjoCLS0TX0Sl0dI=
Subject key identifier: BF:F2:10:7A:CD:F4:F6:3C:E5:46:8F:81:11:1C:EA:85:2B:78:0B:80
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019A50E3F95AE57893C826598F5EB4783C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:01:49 +0000
Manifest this update: Tue 04 Nov 2025 22:01:49 +0000
Manifest next update: Wed 05 Nov 2025 22:01:49 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: mBjUXJZBdGSdH7zC+U0LrkH6BAAogPgijralZacDXfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:f9:5a:e5:78:93:c8:26:59:8f:5e:b4:78:3c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Nov 4 22:01:49 2025 GMT
Not After : Nov 5 22:01:49 2025 GMT
Subject: CN=bff2107acdf4f63ce5468f81111cea852b780b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:81:c8:a0:87:e0:9a:af:71:73:99:12:e4:
d7:c4:e1:95:8a:2b:9d:3b:78:62:d2:d1:e5:b5:6c:
ad:52:80:7a:d0:a5:4d:d9:5f:63:f5:56:f3:b0:10:
28:34:9b:57:e5:88:50:34:35:d6:38:df:82:70:d4:
d9:d4:36:6e:81:50:f0:a9:bb:fb:3d:49:d6:4c:04:
d1:d2:51:ec:34:9f:5d:0c:08:5c:3a:45:25:68:c2:
84:81:d0:43:9c:b9:d9:6c:2d:35:4f:16:76:e9:a4:
b0:86:88:aa:33:0a:6e:c7:29:fe:05:16:f6:85:c4:
9d:b6:8a:58:83:df:2a:69:19:44:f2:99:f3:d6:24:
43:94:8a:68:62:8c:97:c8:0b:09:e2:85:75:50:d8:
1b:2b:56:79:38:17:1d:ec:dc:4e:fa:3e:3f:a6:46:
50:3e:00:71:8e:7c:f1:34:d6:ce:65:5f:07:d5:f1:
20:f8:28:24:88:cf:c1:ec:5c:b5:f0:63:a0:a4:97:
9d:cf:14:4e:c6:be:5b:d5:67:ae:3d:59:5f:1e:21:
64:85:e4:42:3a:4f:9c:21:72:7f:92:21:a2:3a:71:
30:5c:83:41:9f:73:fa:85:a8:3e:47:e8:4c:d0:de:
1d:f8:6b:18:67:1d:46:60:ab:c0:93:dd:17:21:ae:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:10:7A:CD:F4:F6:3C:E5:46:8F:81:11:1C:EA:85:2B:78:0B:80
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bd:c9:a0:4f:ff:7c:52:0d:05:87:5b:f8:a9:49:e6:b3:f1:
03:55:e6:ae:87:4f:c9:71:6d:fa:c3:bc:62:10:c5:c9:e5:d5:
1b:ce:6b:82:79:10:40:46:6e:cb:fd:86:51:ec:9b:92:75:05:
81:a7:f9:01:f3:f1:b7:4e:3f:d9:ea:53:d8:44:52:b8:e3:8c:
34:ec:8c:03:fc:36:cc:da:ea:03:1f:b1:9b:4a:d7:ae:1d:ed:
5a:e3:aa:e3:10:7e:47:a5:0b:3e:bc:ae:ab:32:6b:74:10:08:
63:a8:57:31:13:ff:64:1d:c0:fb:d2:46:26:13:cf:79:f3:2f:
2e:e5:6e:40:f0:e2:1c:98:c4:6a:fd:59:73:0e:26:57:4e:35:
31:b2:81:73:84:19:7a:6c:a0:eb:26:bb:df:32:dc:65:52:16:
5a:88:ea:b5:11:ad:9e:bd:11:35:10:4e:d9:9f:76:02:fb:5e:
92:62:66:09:d5:df:c8:66:8e:b7:fb:03:df:6e:2c:89:8e:c6:
02:02:00:ac:f5:91:2b:1a:9c:c6:cc:cc:e0:4f:5f:e4:ef:42:
03:44:1a:52:20:49:a7:07:d4:37:36:32:11:96:a3:5a:67:b9:
df:50:89:b1:f2:cd:c1:29:34:ee:1d:75:3f:25:ab:7c:d6:82:
21:95:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:35 2025 by rpki-client