Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: uBsemQunIJrftTyiaNsWsEb7YW0iFB5t1XsXZBTamgU=
Subject key identifier: 75:44:BD:B3:4B:A5:16:99:4F:FF:25:19:D1:69:DF:3B:08:A8:9E:90
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 019A54C0898B1EB292147A4B6F67A4806303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0B36
Signing time: Wed 05 Nov 2025 16:01:35 +0000
Manifest this update: Wed 05 Nov 2025 16:01:35 +0000
Manifest next update: Thu 06 Nov 2025 16:01:35 +0000
Files and hashes: 1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: 7PlxidZYKubBMvzyBN3GrptlVVtuTQQIfar/GGT6yeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:89:8b:1e:b2:92:14:7a:4b:6f:67:a4:80:63:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Nov 5 16:01:35 2025 GMT
Not After : Nov 6 16:01:35 2025 GMT
Subject: CN=7544bdb34ba516994fff2519d169df3b08a89e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:11:12:df:f5:53:b4:37:db:6c:a1:40:a2:
17:41:5d:67:90:6d:a9:54:c7:76:1b:67:03:5e:1b:
22:e4:e0:1f:fa:08:c9:da:3e:31:3d:1c:c4:b0:d7:
37:de:e5:5a:f4:11:8e:65:8d:21:7c:c9:72:66:81:
fa:4b:c8:b8:38:28:7c:6b:ad:d3:11:91:28:e3:68:
2e:ac:9c:72:c1:a7:04:e3:aa:d1:72:5c:2d:c4:15:
70:85:3b:9b:c8:db:51:ef:94:96:8d:c4:2e:25:28:
95:fa:4e:54:b1:4e:e0:a3:e2:ab:2a:ad:b1:dd:6b:
c7:54:d5:a2:20:f6:39:ca:aa:c4:3f:8e:65:c9:a2:
a7:cc:4e:ee:b5:b7:3c:cf:3b:09:e4:5c:9c:44:b1:
6a:31:4c:44:52:d2:ab:4f:18:72:21:8c:fd:15:12:
3a:98:c4:84:5f:01:8f:ad:48:c9:67:e6:95:19:6c:
43:59:84:0d:bc:c8:04:a0:c2:4c:8c:77:aa:78:52:
af:50:6d:3a:d3:a8:85:e2:eb:d6:ee:f1:85:16:e5:
68:10:9e:50:10:9f:a7:52:1b:fd:e8:05:e1:9c:d2:
34:78:6a:25:56:45:10:97:ab:e2:54:3b:2c:ea:5c:
17:e9:6b:4f:66:b2:2c:fe:80:0b:cd:6d:ca:24:b5:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:44:BD:B3:4B:A5:16:99:4F:FF:25:19:D1:69:DF:3B:08:A8:9E:90
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ba:8b:0b:64:8a:ef:55:38:3d:ab:67:81:25:d1:bb:e5:a0:
62:5d:35:0b:10:e2:88:f4:90:02:ab:05:81:08:e2:f4:d6:49:
0b:f6:aa:43:7d:03:29:f1:9c:30:fa:a4:ce:36:ac:a2:39:06:
72:7d:b6:62:ae:5e:b4:ef:af:4c:17:43:8f:a4:3a:af:53:ca:
4d:55:ca:6d:1d:c4:9d:35:7e:6d:48:a8:e0:33:a9:24:d1:99:
d9:44:00:b5:eb:c2:92:31:6f:98:16:2c:cb:ba:56:8d:e9:ef:
aa:23:51:85:20:8a:72:aa:d7:40:94:25:e0:69:4e:6f:8a:a7:
1f:74:c2:bc:16:a7:60:70:12:0e:b1:61:90:45:5f:15:61:66:
0e:62:27:33:1c:ea:d1:e4:fa:0d:0c:9a:ed:05:cc:30:98:5f:
9a:03:34:e1:ea:ec:51:d9:89:1a:0b:80:a8:39:43:e6:05:20:
b5:e8:a8:a2:6c:06:20:fd:97:f5:3e:b4:2c:07:29:7e:cd:28:
68:69:28:5d:88:8a:04:05:25:87:fa:93:0e:95:46:a1:76:83:
96:79:d6:1b:dd:a1:39:59:5b:29:b9:47:f6:42:8b:b3:29:73:
60:80:1a:72:9e:5d:95:aa:b0:35:9e:0f:10:dd:d3:04:85:7c:
26:a6:46:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:53 2025 by rpki-client