Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: g9NambzOSlnM/Duu182SblLMlApJY7hhpKhx2zivgY4=
Subject key identifier: D2:1D:D8:77:0A:FA:EC:A9:D0:1B:EF:C8:B1:9E:37:19:6E:0A:E9:79
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 019A503E12C07D42500525E67BD05F7B7875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 1291
Signing time: Tue 04 Nov 2025 19:00:36 +0000
Manifest this update: Tue 04 Nov 2025 19:00:36 +0000
Manifest next update: Wed 05 Nov 2025 19:00:36 +0000
Files and hashes: 1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: AYepUuy3BRM+QD6SbfxvjEk43eMoxa7PxiQtqkFYoyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:12:c0:7d:42:50:05:25:e6:7b:d0:5f:7b:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Nov 4 19:00:36 2025 GMT
Not After : Nov 5 19:00:36 2025 GMT
Subject: CN=d21dd8770afaeca9d01befc8b19e37196e0ae979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:ae:55:96:2a:b2:e5:a9:2d:c4:ac:82:52:
b8:b6:a4:91:59:fe:ae:c3:e0:7a:fb:9a:62:7b:9c:
10:7f:65:43:17:e1:cb:f3:19:d2:1b:82:0f:57:76:
6b:2a:40:6c:c3:97:f1:ac:69:43:fd:18:65:7e:c4:
c3:bd:8e:f3:0e:b0:40:5d:f4:a5:e6:1e:86:8b:8e:
4c:8d:52:81:36:f1:6d:73:f9:25:77:2c:7a:a5:5a:
83:14:f5:23:2e:94:ec:20:2e:56:6b:4e:f7:ff:93:
d5:df:19:0e:8f:9d:43:70:36:d3:ff:52:09:d4:ab:
3e:32:8c:5d:6a:18:d2:91:48:c0:4e:6f:62:fc:18:
dc:4b:ce:45:f1:29:a7:7f:ea:c0:20:e9:07:98:f1:
b5:e8:29:fa:95:14:38:19:3b:0f:de:4d:3b:67:c8:
e0:a9:a9:30:3b:18:c6:06:d9:49:4b:58:6e:78:61:
a3:65:2b:3c:87:a6:43:a6:86:32:90:2b:86:26:3d:
62:1b:2b:ce:64:c4:47:62:65:33:91:83:64:6e:3e:
a4:ee:c4:a6:b0:61:6b:5e:46:3d:29:9f:ed:39:db:
2b:e7:ad:99:60:3d:8e:62:dc:d1:80:4c:b1:16:cd:
bf:17:e8:84:3f:fb:13:7d:ec:0d:a9:91:7d:7b:41:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1D:D8:77:0A:FA:EC:A9:D0:1B:EF:C8:B1:9E:37:19:6E:0A:E9:79
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f3:97:c6:9f:ab:e0:2a:0b:44:de:63:fe:28:bd:b7:36:d9:
c4:84:17:49:f1:1c:02:4c:54:ae:e8:00:77:de:bc:ef:12:cd:
67:ac:4e:20:6e:13:2e:c6:42:04:63:64:03:4f:43:db:37:b2:
39:8f:f8:2f:bb:4f:a2:31:b7:23:d7:26:7e:47:6c:9e:51:4f:
20:bc:09:db:06:d3:5c:d0:d9:4f:11:c0:ac:dd:16:e1:7d:a2:
83:7b:4d:56:7a:00:e6:83:e1:91:69:56:56:49:37:3c:bd:1a:
be:20:e1:03:23:f0:18:98:08:41:22:34:3e:67:c9:bc:28:a0:
06:32:b7:f3:0c:14:08:d7:41:f8:57:4f:9f:2b:63:6e:01:c6:
08:f9:28:06:05:85:da:ab:d6:5e:03:e7:27:27:5e:44:71:2e:
c7:ca:42:ac:a9:b5:a1:cd:9b:31:52:99:5b:96:68:be:fc:20:
f9:1b:d6:1e:84:bb:cf:dc:d2:3c:21:80:d2:52:86:f3:77:29:
e8:e8:c3:04:16:fe:00:d1:00:cc:05:46:a1:37:63:3a:ce:83:
32:c5:fd:37:3a:39:8c:d1:81:13:e4:fe:13:36:4d:db:e8:26:
35:1b:7c:a6:b0:a4:c6:62:79:12:0b:46:70:32:fc:4b:37:bb:
0c:8b:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:21:32 2025 by rpki-client