Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: ZQXVCOJuVd0T4WPNozES+cPHRamj23TfuPD+EUDiTL4=
Subject key identifier: 44:81:E2:B1:3C:77:35:6D:A5:E9:AF:A4:19:EF:03:5C:E2:A0:41:08
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 019A53E3D61D1FAA0BA4B0111485937AC04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 08A5
Signing time: Wed 05 Nov 2025 12:00:31 +0000
Manifest this update: Wed 05 Nov 2025 12:00:31 +0000
Manifest next update: Thu 06 Nov 2025 12:00:31 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: sYe/ki/Bs4+glIyozQ4LRgc9yZJi9FPdjo+SWGnBMps=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:d6:1d:1f:aa:0b:a4:b0:11:14:85:93:7a:c0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Nov 5 12:00:31 2025 GMT
Not After : Nov 6 12:00:31 2025 GMT
Subject: CN=4481e2b13c77356da5e9afa419ef035ce2a04108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:92:4b:3e:98:9f:5f:91:48:0a:26:be:45:
5a:77:6e:40:2c:06:c4:4b:d0:05:bf:f5:23:f4:bd:
8c:11:af:bd:66:ee:12:44:db:a2:3d:5d:ee:c8:3d:
92:dd:11:83:dc:a4:eb:db:44:7d:e3:33:24:9a:8b:
62:c8:a0:3c:65:f2:cd:51:9e:48:8a:0b:e6:18:65:
c6:26:fd:fb:e0:7c:b8:fd:35:e5:ef:36:1c:18:d0:
46:21:0d:e0:c0:ce:26:77:51:71:b0:c3:4b:d6:21:
3d:05:84:5c:df:1b:d0:32:a4:06:0e:a4:e1:f0:c3:
df:c6:46:e2:d2:29:1a:85:00:e0:3e:c8:a4:fb:bc:
53:12:cd:58:f0:9b:4e:86:b9:79:3f:91:bc:7a:86:
6c:3b:46:e8:ba:c5:49:16:c0:89:e5:43:d7:47:c7:
8c:1f:da:43:58:02:09:23:18:3c:03:3a:fb:ee:1d:
21:cd:1c:a8:28:7d:fd:90:72:c3:a2:79:7e:8c:78:
13:08:f9:29:ce:cf:37:d5:c6:c5:78:e9:4c:ea:02:
5f:33:82:00:b4:38:c9:f3:0c:dc:b6:16:89:0f:c4:
5f:f4:97:f6:84:db:94:aa:55:58:98:ce:f2:1d:3c:
75:87:dc:ac:70:2a:28:f0:c3:5b:12:4d:79:c5:25:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:81:E2:B1:3C:77:35:6D:A5:E9:AF:A4:19:EF:03:5C:E2:A0:41:08
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:23:95:26:f9:fd:b9:f1:44:9e:ef:be:eb:f7:cd:86:ce:50:
70:bf:3f:db:4f:10:c4:11:92:25:43:a1:88:a1:76:9f:64:32:
55:bb:0c:d5:f5:8c:9e:58:8c:95:94:ab:15:f3:db:ae:15:5a:
51:58:aa:a8:57:b9:d9:e2:37:ae:49:a2:24:de:b6:26:75:d1:
65:32:f9:a3:9e:ab:b0:b1:ee:18:ec:b4:05:8e:7e:65:1b:ce:
f5:1f:3c:cd:e6:8a:0f:c2:4f:96:8b:62:8c:a0:24:af:e3:5e:
46:62:97:76:56:2b:12:34:59:03:6c:00:f7:9d:7f:ba:6e:76:
9a:e9:91:2c:66:df:d8:d9:51:36:fa:41:78:15:56:19:70:42:
71:ce:4e:ba:01:b0:18:60:53:03:02:1d:21:b0:2d:e2:bc:bb:
86:4f:69:ee:63:09:de:b1:6d:a2:52:8b:1a:84:2b:b1:60:d3:
6b:c9:a1:23:49:0e:05:e8:d8:66:0b:3e:ad:98:ad:34:83:c3:
3c:af:ca:a1:00:9d:ab:89:27:64:40:ef:d8:17:5d:d1:6b:5a:
e6:67:f6:7d:bb:b9:92:61:37:91:fa:7b:be:40:f7:70:5a:77:
f8:85:8e:bf:e1:7c:bd:84:51:48:18:52:7b:29:cb:dc:e5:db:
c8:ec:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:55:17 2025 by rpki-client