Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
File: dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json)
Hash identifier: EQhYGpUTTnoGiIYspIj/LkLf+REyk/NYUkcNRwTE4qc=
Subject key identifier: 81:49:AE:FE:86:07:1F:19:CB:23:C3:83:90:5F:56:BF:8A:8D:93:B1
Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
Certificate issuer: /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Certificate serial: 019A52D27C4D9D2E4BA345C31A9993996718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
Manifest number: 0AF4
Signing time: Wed 05 Nov 2025 07:01:57 +0000
Manifest this update: Wed 05 Nov 2025 07:01:57 +0000
Manifest next update: Thu 06 Nov 2025 07:01:57 +0000
Files and hashes: 1: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: WpT64FTVBJcHqMA69vyZwWh07qZolFrKjUu2upnmd6U=)
2: uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa (hash: JKMyKU4R0Hs07ETR6QJe5cFRF5p9HW1pjj1e0SHJl68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:7c:4d:9d:2e:4b:a3:45:c3:1a:99:93:99:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635
Validity
Not Before: Nov 5 07:01:57 2025 GMT
Not After : Nov 6 07:01:57 2025 GMT
Subject: CN=8149aefe86071f19cb23c383905f56bf8a8d93b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:5a:7b:e9:7b:46:58:32:fc:83:fc:25:3b:
95:e9:69:bb:c9:c1:5d:77:65:4b:db:8d:4f:1a:29:
31:11:de:4c:43:4a:6c:41:4a:7a:d3:72:ee:ce:4c:
72:f9:30:b3:b7:40:32:22:e5:7d:ea:61:ee:f2:02:
18:d9:d9:e4:30:0a:ec:63:58:1c:76:c7:07:84:f7:
d8:17:32:31:8a:3d:bb:b9:ce:44:58:09:5d:13:94:
d5:42:97:f6:63:cc:91:31:3a:8c:40:a6:5f:59:f2:
ee:38:63:50:b8:b7:08:16:3e:52:ee:e9:58:28:e0:
ca:53:32:e0:00:b1:9f:07:3a:f4:b4:89:57:85:8d:
6d:a7:00:3a:92:8f:5e:56:af:e1:3e:01:56:85:8a:
31:62:ec:13:c6:18:6b:45:3f:89:e7:f9:27:da:7d:
8a:d4:1e:e2:3a:08:94:bb:26:47:3c:73:4f:fe:37:
31:03:5a:45:7b:83:85:09:92:ca:44:07:10:aa:c9:
3f:0c:5a:3d:14:7f:38:c1:02:9e:98:4a:38:94:25:
5e:f1:99:2e:91:4a:bc:d0:c7:62:20:41:be:48:6f:
9c:e7:5b:b0:8c:ae:03:bc:95:bf:5a:41:33:3e:3f:
11:e3:e3:a5:0c:0c:10:c9:cc:f3:d7:a5:9e:b1:2a:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:49:AE:FE:86:07:1F:19:CB:23:C3:83:90:5F:56:BF:8A:8D:93:B1
X509v3 Authority Key Identifier:
keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:32:7c:7e:8e:20:c3:14:9e:a5:72:a6:09:c7:24:40:0b:0c:
e0:79:96:70:be:e9:57:53:5f:09:2d:90:ca:ae:87:5d:3d:62:
0d:e9:a1:34:cf:b8:35:cd:8c:27:ac:5e:5f:37:b2:e9:ef:86:
25:ab:a5:96:d4:23:01:a7:61:18:f5:b2:c9:a6:b4:8b:2d:2c:
7f:e6:90:6a:d9:d5:6b:d9:d8:d5:9e:2e:80:88:25:67:64:a1:
a0:90:63:bb:2d:b1:35:48:ad:ec:f9:60:24:0c:16:42:fe:d3:
51:f6:f9:52:df:f9:4b:9c:1b:ca:e5:9a:af:e5:d5:c7:44:40:
9f:88:34:e4:63:8c:bc:12:29:e2:2b:69:b3:2d:e0:86:c7:b4:
f9:ee:5b:b5:d2:85:b2:a9:6e:51:6d:d5:af:01:fc:89:91:23:
93:36:82:a1:b5:d9:0a:9d:f3:78:68:d5:da:57:79:4a:c5:13:
d2:29:e1:01:8e:55:95:21:5b:4c:b4:75:ae:94:f4:c2:91:86:
5a:30:ef:fe:9f:42:4c:93:71:b5:56:6e:24:d9:b5:ca:1f:53:
b4:de:38:39:44:90:c6:03:fa:04:2e:85:31:87:fb:e7:de:e6:
f5:a4:44:c6:de:97:41:cf:c6:ea:02:bc:13:be:7d:ab:1b:3d:
84:19:1c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:16:22 2025 by rpki-client