Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File: drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier: 71yKR0AMQZuSTyTl49Wf5unV6gN2MyoA7oxzCEqrhIg=
Subject key identifier: A2:5B:8D:68:D8:44:C7:6C:7A:93:57:65:87:F7:59:91:65:08:32:DA
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer: /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial: 019A5451B51B7AA850246607F05A65441877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number: 01C4
Signing time: Wed 05 Nov 2025 14:00:32 +0000
Manifest this update: Wed 05 Nov 2025 14:00:32 +0000
Manifest next update: Thu 06 Nov 2025 14:00:32 +0000
Files and hashes: 1: AMeFJYEOsq8eDF0JklVrrKO_x-w.roa (hash: BUSoz6NuItfjL6psERkejscD0G0Lwnx4YN1Y5CF1al8=)
2: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: lwI8p6lBhYSv5G5dFrS+8HkM+UmqanCKJ3CuuIL+Rxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:b5:1b:7a:a8:50:24:66:07:f0:5a:65:44:18:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Validity
Not Before: Nov 5 14:00:32 2025 GMT
Not After : Nov 6 14:00:32 2025 GMT
Subject: CN=a25b8d68d844c76c7a93576587f75991650832da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:44:30:90:1b:71:15:bd:f7:02:a0:39:a8:
c4:07:43:64:a0:5c:b4:b3:77:32:a4:df:cc:59:b7:
6c:8d:91:d6:0d:e6:1d:60:74:bf:a9:38:59:46:50:
82:43:07:1b:b9:ea:40:b6:68:b4:48:6b:78:dd:79:
bf:79:0e:f0:de:5f:2f:8b:6e:d9:ea:67:21:e3:54:
59:8d:cd:28:50:d3:9f:95:fe:79:87:9e:c9:55:a5:
c9:fc:dd:54:80:f3:dc:d4:e4:aa:75:c7:cb:0a:12:
81:d9:6b:8e:73:3b:bc:be:4a:a0:ba:1c:44:93:3b:
38:26:03:2e:0e:af:4a:51:b8:d9:25:ec:94:1f:5f:
7f:e6:d6:fe:7e:7e:6c:da:e8:80:52:71:66:7e:d7:
63:a3:89:bb:16:fc:18:2b:54:7b:bc:8a:ed:bd:5f:
86:7c:a9:c0:84:41:29:85:60:80:16:b4:3e:d9:28:
8e:a4:4d:2d:58:e6:9b:04:83:8a:a8:b3:61:13:0c:
f5:d4:ae:ba:e8:e0:33:2a:d2:db:9d:85:9c:a7:db:
2d:bd:56:c7:56:f1:25:13:20:c2:f4:12:d8:95:cd:
4f:2b:74:d6:b1:74:90:0f:83:76:aa:20:f3:c5:9a:
ec:85:97:68:b6:33:c5:79:b0:6f:4b:a7:c0:90:27:
1f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5B:8D:68:D8:44:C7:6C:7A:93:57:65:87:F7:59:91:65:08:32:DA
X509v3 Authority Key Identifier:
keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:81:80:6d:90:14:d6:48:67:0c:5d:ad:74:f6:d9:d5:79:e4:
36:c0:d4:64:87:73:5a:6a:58:27:7c:10:98:5a:86:af:e2:e0:
38:3b:1e:87:64:86:69:56:8c:64:70:7c:56:50:ee:f3:09:6a:
38:13:dd:68:ee:bd:aa:f6:60:2e:b5:93:ab:48:eb:04:b6:13:
24:86:11:1a:eb:8c:e6:a0:63:c6:69:06:aa:e3:8b:43:84:e0:
75:43:2b:c0:b8:37:20:52:8c:99:89:a2:7c:0f:4a:dc:bc:b6:
08:8d:8f:43:c2:60:37:5e:da:98:41:cc:23:21:4d:9a:61:44:
20:c7:78:5e:62:04:a0:1a:a2:75:61:20:49:1b:02:38:3a:d5:
c3:8f:8b:e0:0f:6f:69:9b:86:2d:20:00:ae:af:58:2f:5b:a7:
07:0f:83:12:c4:c2:27:45:ef:e7:0c:88:4f:94:1b:63:57:29:
e5:ab:c7:67:06:54:38:9f:fc:0a:e5:5d:05:67:2e:ba:b8:d6:
50:84:7e:e0:b5:67:ce:32:d6:14:0f:d5:5f:27:fe:31:d0:26:
78:3b:34:12:ac:af:d0:98:9c:72:0d:45:85:0d:dc:30:f3:ec:
76:de:88:b0:37:25:dd:aa:d1:53:5f:ed:61:09:de:03:80:70:
be:13:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:23:03 2025 by rpki-client