Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: I7dKhr9adJafhXhN0+eWse5Vb5iXdNygY9cuu8Hv3+4=
Subject key identifier: 57:49:9D:3B:08:57:FD:EE:93:61:D3:49:30:22:89:25:10:58:10:43
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 019A50E3B3B7144E4FCDCF5E9098D63B3B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:31 +0000
Manifest this update: Tue 04 Nov 2025 22:01:31 +0000
Manifest next update: Wed 05 Nov 2025 22:01:31 +0000
Files and hashes: 1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=)
2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: 7FWUCMYLvIbDzBlFDqIg2aZCKPCKTPqC5jC5kZRvjms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:b3:b7:14:4e:4f:cd:cf:5e:90:98:d6:3b:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Nov 4 22:01:31 2025 GMT
Not After : Nov 5 22:01:31 2025 GMT
Subject: CN=57499d3b0857fdee9361d3493022892510581043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:06:f8:14:cc:07:8a:1b:a4:98:20:50:18:
7e:5a:9d:2a:37:b7:bb:e1:68:52:07:d5:3e:98:91:
80:50:16:e7:54:40:3a:d4:dd:c7:12:35:9f:20:c4:
4d:32:18:f5:b4:d4:6d:8c:3b:7f:3b:a8:ed:d2:7b:
e0:a7:e8:0c:a7:17:56:d7:c6:55:c3:d3:c5:20:b0:
2a:d1:ef:7b:a5:27:47:9c:a9:3a:6c:e0:44:f9:8d:
ca:e2:0f:8a:94:13:b5:9f:6e:34:c9:45:64:0b:af:
7d:a5:df:8b:ad:f7:80:04:96:0f:96:0f:2b:1e:cb:
f9:db:62:29:34:39:b1:4b:9f:cc:02:85:d4:b8:0e:
6b:49:ad:b9:5c:9c:43:5d:91:c4:b1:dc:4e:b3:d6:
aa:e8:fc:1e:03:7a:cb:13:5c:78:58:73:94:79:bc:
b0:7d:a0:be:30:81:68:e3:32:18:07:c9:f0:d3:75:
2d:d2:9f:57:b6:96:98:8c:07:5f:4d:78:c8:71:30:
cc:7d:4f:08:30:23:94:c2:d5:55:4c:17:de:43:2b:
f3:1d:7d:6c:cf:1a:02:da:cd:0a:62:e7:f8:45:6d:
f6:3b:6d:5b:00:79:dd:3e:21:8f:4a:63:bc:b2:7b:
c0:00:43:48:cc:54:9b:14:ff:5f:13:bc:29:3c:b4:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:9D:3B:08:57:FD:EE:93:61:D3:49:30:22:89:25:10:58:10:43
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3d:73:b6:2a:b9:3f:69:da:66:bc:5a:3e:89:d8:d1:1f:7a:
4c:48:ec:cd:9f:75:b5:a7:d3:33:14:26:d8:23:4d:13:b5:e7:
e2:f8:38:7b:b1:b3:f3:1b:0b:28:9f:2f:91:4f:4b:8b:b2:cc:
e1:f7:d0:7b:5c:bc:e8:55:74:c9:7b:e6:d9:4c:12:5a:6f:49:
12:84:90:b7:35:5b:20:d3:ec:50:32:66:fd:9e:0d:bc:de:16:
53:ed:81:72:bb:b4:25:5c:14:22:70:d3:7d:4f:05:71:a9:46:
8b:1f:3b:0d:30:ff:df:dd:ab:3a:d1:ad:93:9e:0e:a4:95:db:
1f:a1:e3:d1:49:e4:8e:65:6d:8b:c8:dc:aa:ba:69:21:d1:a8:
5f:6d:91:6c:96:85:6b:11:ae:73:5e:a5:da:15:81:b0:cf:64:
1e:47:36:a8:55:a9:b5:66:d9:43:2f:65:7a:ec:34:38:a7:c2:
7e:2a:f0:a5:18:02:c2:35:31:57:7a:db:b4:a1:05:cf:91:ef:
b5:07:34:e9:c6:9b:b0:ec:34:29:6f:ee:64:7f:94:5c:26:07:
d0:ea:9f:83:d1:3a:27:a5:0f:1e:8a:eb:6b:46:74:0a:88:23:
e9:d6:b7:f9:5d:8b:26:4f:29:a4:73:ac:0e:42:df:2a:c9:49:
4d:41:93:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:50:04 2025 by rpki-client