Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier: H51+qA7MTFCUvmDZ6+XF57FjzTrklKCS5jL0MJlgFGA=
Subject key identifier: F1:F6:76:0D:3A:9D:12:8B:DB:32:DF:23:91:62:4A:E4:EC:AE:A7:08
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 019A4DE1CA5B7579E56CBDF1AAC50DE92634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number: 0FDF
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: cXNS-jhbDVvMG8hSqbBOLCvMoSQ.roa (hash: ttyMv3492QrBBmeGVtvaGpTbwOtDA0bKvFjMI/PqMtk=)
2: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: NF+Z7fE4PQmurcLxpEtc0nB1JZvjzvgi9BvQXSQicSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ca:5b:75:79:e5:6c:bd:f1:aa:c5:0d:e9:26:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=f1f6760d3a9d128bdb32df2391624ae4ecaea708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:06:0a:66:28:72:30:35:d3:ef:07:94:08:
59:8b:de:1a:4b:60:43:72:21:cd:80:62:d2:ff:87:
55:8a:42:d8:3d:9a:ea:c4:f1:dc:91:2f:5c:f5:ab:
9e:2f:f4:c2:67:f5:e8:1f:c5:db:32:ad:ed:e9:60:
c7:05:58:f4:a1:a7:c8:2a:26:0a:28:ca:de:c2:78:
31:aa:30:b3:29:51:29:d8:12:03:23:f8:15:87:15:
13:d6:65:b9:7a:a6:56:20:b4:ca:1a:28:aa:e0:1d:
04:8e:8e:28:86:c3:25:b2:c8:04:24:75:aa:c1:26:
90:8b:06:61:42:8b:9f:fd:b7:3b:8f:d4:37:24:5d:
57:5c:65:93:a4:2d:0a:ec:9b:69:33:ad:3a:d5:54:
4f:fe:e6:92:ac:b5:65:6c:5d:2d:a3:48:07:7c:d0:
1b:3a:7c:88:52:ac:53:f0:8b:12:7d:e4:94:f4:ef:
ae:6d:f6:0f:fc:e2:67:c5:84:0a:cc:dd:2a:fb:1f:
0b:d9:15:f5:06:6e:58:2c:c0:96:fa:d1:90:fc:a0:
7a:12:cb:59:d0:85:b6:3e:1b:b0:22:fb:1d:eb:7a:
34:99:34:7f:eb:5f:32:f4:b8:44:63:ca:e7:ba:95:
31:46:84:48:9b:02:10:3b:cc:67:68:d2:f0:90:a8:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:76:0D:3A:9D:12:8B:DB:32:DF:23:91:62:4A:E4:EC:AE:A7:08
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ef:31:23:d8:6c:01:8d:6a:9d:84:3a:35:af:9a:1e:47:29:
f9:16:df:4a:32:dd:f9:8f:c3:e4:bf:47:d5:e1:3d:09:b3:0d:
32:d6:94:a0:ff:e8:34:95:f5:91:76:69:22:fa:c2:98:eb:d2:
2c:e2:40:ab:0d:d2:65:d0:9f:42:9d:f6:eb:35:50:92:c5:8b:
ad:34:85:88:4b:43:25:df:b5:77:3b:73:d2:49:9c:91:1f:88:
34:ed:32:7a:cc:4d:30:04:48:85:4e:f5:03:e5:1d:58:58:10:
ab:e0:9b:3e:5d:73:5f:5e:11:f0:02:4a:48:35:63:f7:64:2c:
51:1e:2a:30:00:db:35:fd:6e:5f:fd:64:48:0d:8a:d0:61:ac:
34:46:48:33:9f:7e:23:06:31:dd:06:2c:eb:7b:6a:a5:8a:72:
87:91:ca:e1:b1:5f:7f:50:20:a7:7d:a9:34:83:bf:71:47:e0:
e6:4e:d6:09:80:ff:b0:5f:ac:dd:5a:fb:8b:13:08:f1:d1:3a:
e2:d1:60:a1:39:d6:71:25:c1:c5:d8:08:d0:fa:b7:69:24:2e:
1f:e0:bb:70:0c:c1:6f:aa:fc:5d:de:3b:2a:4b:cb:fd:e4:23:
34:da:d1:9c:0c:07:50:c6:22:3c:26:2d:ce:54:59:55:ab:d4:
29:2b:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:26 2025 by rpki-client