Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: Q7tAReDC84K8hrBMfixl7a1h+t3mj+kK616/pvfTYLs=
Subject key identifier: 99:6E:30:83:AB:4B:9B:B3:7E:38:54:25:51:1C:17:5E:32:35:83:80
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 019A54C0BEDF9AA52F3304ACF7B6B8323068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0C6B
Signing time: Wed 05 Nov 2025 16:01:49 +0000
Manifest this update: Wed 05 Nov 2025 16:01:49 +0000
Manifest next update: Thu 06 Nov 2025 16:01:49 +0000
Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=)
2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: vB/s2Bjw05meZJdfFWSV9yvBdK60tob1eHU9i9WHlN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:be:df:9a:a5:2f:33:04:ac:f7:b6:b8:32:30:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Nov 5 16:01:49 2025 GMT
Not After : Nov 6 16:01:49 2025 GMT
Subject: CN=996e3083ab4b9bb37e385425511c175e32358380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:c4:ab:70:fc:a3:92:6e:8d:04:3c:a6:d9:
e2:1c:0e:76:b2:ef:0a:11:ba:e6:d2:af:e9:f4:ac:
1a:e9:68:2d:5c:7e:f1:77:14:a7:12:f2:49:16:7e:
bb:31:4b:a4:36:35:be:06:e5:61:96:13:4d:de:45:
5a:33:a7:ac:75:be:f2:30:80:4c:f7:f0:56:8d:d8:
3f:63:34:f2:06:f3:e7:b5:69:e2:10:32:97:0d:68:
c9:b5:a0:00:56:1f:90:70:8b:8b:ff:b7:6d:2d:bc:
f5:b7:d3:5c:de:c3:8a:5e:d8:45:88:5a:bb:54:ac:
87:bb:92:af:64:f3:88:18:df:12:36:c2:27:ad:99:
43:71:ca:cc:54:7e:bf:70:0c:3e:09:d0:33:ec:7d:
9d:1f:7a:1f:ad:fd:36:41:bc:2c:7b:36:65:c7:75:
bb:d0:02:be:d5:ac:85:d6:96:f8:55:55:62:64:98:
77:0c:6a:34:f9:7c:7a:a5:36:63:f9:83:d7:4d:ca:
90:24:0e:2f:dd:92:3b:34:6d:ea:d7:dc:b3:26:1e:
2f:62:b9:14:b1:a4:dd:51:2b:65:58:ec:d4:0a:88:
34:07:c7:7b:6a:4b:9f:7e:e8:31:11:cb:1d:af:f8:
f1:6c:3c:ab:33:3b:be:de:1c:d0:9c:56:58:c1:d1:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6E:30:83:AB:4B:9B:B3:7E:38:54:25:51:1C:17:5E:32:35:83:80
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:86:04:a9:5d:26:e5:7a:a9:30:33:70:cd:03:e9:b9:af:65:
67:15:0f:38:f6:b9:ab:43:47:31:e5:66:3f:38:b0:0f:4d:8c:
2e:f6:a6:bc:2e:d5:1a:a1:cf:0d:f5:41:92:a8:6f:d0:6d:75:
d7:fc:78:f9:79:6a:57:f5:ff:9d:f3:28:79:95:b6:b3:53:0a:
ba:d0:77:c6:98:2b:e0:e6:54:15:ae:b0:ac:bc:81:21:97:14:
25:17:87:47:32:f0:b8:b2:63:d9:20:4a:ae:06:8a:64:cb:c5:
38:6a:ff:0c:67:b0:d2:c9:a8:1c:28:b0:57:c8:36:a0:f7:5c:
ad:a2:6f:cd:ae:3f:f8:8d:f3:69:9d:21:9e:82:20:99:a1:b9:
ff:b3:4d:db:91:bf:3a:b3:5f:63:a8:c4:79:3f:15:40:09:40:
d5:c4:e7:ac:aa:de:5b:7a:c0:5d:a9:cb:ee:92:90:a7:92:09:
a2:ee:0a:24:35:ac:d6:26:a4:70:87:3a:70:4f:f3:d9:91:ad:
36:83:01:dd:c5:1b:f1:cd:b0:94:8e:f5:c8:b8:7f:48:88:f5:
80:0a:95:b1:14:91:33:3d:a4:bc:c9:1c:ce:e5:4b:f8:7b:47:
46:45:5e:2b:03:6f:70:5e:b3:5c:5b:df:eb:2d:5e:a4:84:3c:
53:dc:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:54 2025 by rpki-client