Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: QpzMxVidZ40RVvDnrCfZFsAOmCkXqDXNfyxiqg1dO4E=
Subject key identifier: 23:17:FE:04:FC:56:5E:33:53:3C:23:D8:E4:FA:B8:13:A5:D2:E5:1A
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019A4E4FF1F466D4C289B2FFDC296A35C1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0EAA
Signing time: Tue 04 Nov 2025 10:00:53 +0000
Manifest this update: Tue 04 Nov 2025 10:00:53 +0000
Manifest next update: Wed 05 Nov 2025 10:00:53 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: UimiRwqQwJt6uhWE2kLcYvupF5U5aj1yWAFLJbbYvg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f1:f4:66:d4:c2:89:b2:ff:dc:29:6a:35:c1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Nov 4 10:00:53 2025 GMT
Not After : Nov 5 10:00:53 2025 GMT
Subject: CN=2317fe04fc565e33533c23d8e4fab813a5d2e51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:b1:5d:75:3c:c8:c8:34:27:3d:a1:54:02:
52:b6:ad:4b:3b:e9:be:2b:2c:5b:03:37:a5:1d:37:
ca:48:b4:e0:06:81:52:6a:69:61:b6:c4:aa:79:26:
95:e4:7e:c8:d5:a4:3b:32:44:62:aa:4a:57:4b:ea:
7c:89:f8:1d:0a:53:9b:5a:35:27:81:e3:df:1f:46:
bd:db:5c:e2:b1:3e:e9:64:74:4b:68:97:e3:c9:e7:
26:5a:ee:bc:2c:d5:55:9e:b7:a3:2f:13:c0:f6:0c:
0a:a4:9d:d7:89:1c:a5:ab:b5:7e:59:b3:77:79:e4:
68:15:86:4c:a7:e6:03:56:55:dc:42:e0:41:16:72:
92:0f:72:2a:ae:8a:a4:d6:bb:ac:ed:af:17:a1:31:
7c:ef:cf:5d:8c:24:a6:70:3a:a2:89:03:d6:5c:e8:
cb:9f:33:8d:13:be:cd:73:6f:f1:7c:8a:bb:2c:d6:
cd:21:60:0f:ae:1c:9c:45:8b:6a:ff:3f:40:2e:5a:
1f:a8:7d:43:20:fd:4e:07:23:df:94:32:db:78:cf:
6a:40:87:f6:3c:89:18:71:f4:40:29:df:9e:4e:db:
b9:20:ba:12:a9:ce:6c:4a:7f:4a:11:42:7d:ca:69:
83:97:f5:b9:8d:42:fc:ef:fb:65:d8:82:86:f8:6d:
de:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:FE:04:FC:56:5E:33:53:3C:23:D8:E4:FA:B8:13:A5:D2:E5:1A
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e8:49:f4:47:3f:02:93:61:02:8c:c5:75:a4:e5:8c:19:86:
e4:c6:b7:49:3c:ba:e2:a7:77:9e:25:62:cf:33:35:e6:c3:81:
6f:6a:29:23:06:2c:eb:f9:aa:8d:50:b1:56:dc:12:7e:ec:20:
e1:c9:55:a0:8b:ce:9c:e5:31:85:b4:c9:7e:92:a5:88:9e:4c:
b4:da:04:56:8e:cb:4f:2d:35:5b:4e:62:6b:d2:8d:a8:86:41:
53:89:f5:0b:3a:40:7a:2b:a7:d5:d7:a5:7c:5d:d8:42:fd:69:
5c:f7:1b:49:1f:94:17:c1:de:95:70:f7:8d:67:9e:a6:dc:87:
eb:81:b4:59:4f:d9:f5:14:34:8d:24:e5:4c:b3:82:a5:7f:6f:
68:c3:87:7a:a0:fe:d2:c1:91:07:68:e2:ca:af:c8:b2:e3:f8:
ff:85:fd:45:08:ba:fd:96:51:a7:dd:20:15:c0:32:be:d4:b2:
e6:9b:7b:90:4b:0a:e9:22:33:02:7e:9e:3c:af:ca:f0:1e:e1:
fa:45:b5:ed:4b:ac:4e:d7:aa:74:0e:70:a8:9c:62:4f:9f:3b:
48:1c:82:e7:e1:16:af:40:84:9d:b3:83:96:70:19:f5:83:a6:
84:23:c6:c2:4d:00:82:32:29:f4:12:de:a1:e0:28:4f:dd:7e:
d5:c6:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:55 2025 by rpki-client