Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: ukKmKZkaS1QR86s+Xe3+7ZwpPKuSDh2ZMGgMBaMWuhk=
Subject key identifier: BB:5C:12:FC:AC:42:CF:10:BF:15:D8:0C:0E:34:B0:A9:34:64:25:0A
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 019A5119A650E5EC87A28775DDBFE48EFE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 23:00:26 +0000
Manifest this update: Tue 04 Nov 2025 23:00:26 +0000
Manifest next update: Wed 05 Nov 2025 23:00:26 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: VN8/1XRQ53z324LDjKsy7wBPW7hIXrn+wGBTsXAYkAY=)
2: zUnV9ug3DC1aZ-iIErb5v566M9c.roa (hash: 6FsHFRxJPUFm1fS2P0PMN2T/cQiz6Vr2yCENn0tZp3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a6:50:e5:ec:87:a2:87:75:dd:bf:e4:8e:fe:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Nov 4 23:00:26 2025 GMT
Not After : Nov 5 23:00:26 2025 GMT
Subject: CN=bb5c12fcac42cf10bf15d80c0e34b0a93464250a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:6e:25:69:c2:75:9f:e5:55:4c:82:6b:26:
c7:35:b3:4b:fb:ca:13:75:20:6f:55:55:5e:43:49:
7a:bf:b4:ac:11:54:30:a4:f6:54:40:38:f8:97:54:
72:97:36:a0:95:8b:b2:69:9f:1e:7d:57:d8:23:ea:
79:1d:ac:2b:17:87:0f:fe:7e:e6:01:66:16:c9:88:
8e:c3:44:dd:6b:34:18:2b:95:f8:38:ac:75:71:9a:
ad:15:9b:51:1d:c5:56:19:01:e7:67:de:75:2b:66:
41:01:46:6b:d6:fa:0e:e8:73:ba:56:aa:17:55:46:
bd:41:e8:d4:3b:b4:cb:28:c6:ed:35:dc:c4:21:39:
fd:8f:00:19:59:21:c2:5b:91:9b:2d:08:27:2e:a7:
98:d9:d0:29:37:4a:3c:c7:93:f9:bf:52:79:fe:6a:
b0:04:83:c0:3a:21:20:2d:96:39:28:de:2d:cb:f7:
84:a8:dc:e1:14:93:c4:09:87:3f:f0:bc:71:80:0a:
65:03:8e:f3:1e:6f:b6:68:3f:ba:a2:28:a5:8f:2a:
59:f4:e8:c9:a3:45:ac:d1:3c:4f:92:4c:f5:00:12:
40:08:ca:82:ea:3b:c3:fc:72:27:02:c6:8e:37:c5:
67:b3:b5:37:7d:64:e7:d1:49:7c:78:b9:31:9e:a4:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5C:12:FC:AC:42:CF:10:BF:15:D8:0C:0E:34:B0:A9:34:64:25:0A
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:20:cf:21:02:86:a4:14:f9:2d:ca:70:38:a2:98:fd:6f:a2:
84:ca:73:ec:8a:63:a1:af:4f:b4:c2:c0:31:c7:1a:26:85:27:
25:ae:fd:6b:22:05:7a:da:e8:b7:a4:54:0b:0f:e3:ec:91:48:
52:cd:53:a4:2a:21:30:6e:27:e2:73:ab:b0:80:27:d8:49:4e:
a0:e6:3e:eb:b0:c1:d5:8c:48:b6:6f:46:51:30:08:46:f1:78:
85:8d:61:e4:19:9b:72:60:9c:ae:82:3c:fa:99:fd:6b:03:1c:
00:1e:cd:b9:ac:8b:f6:4f:ae:12:93:b9:e9:60:f1:3e:e6:c9:
80:5a:5d:54:7c:db:29:60:f7:76:54:c0:8a:c7:78:96:4c:7e:
4b:78:a3:cc:a8:3c:3d:1e:63:69:31:ad:6e:d9:98:ed:2e:1b:
16:0f:5d:54:10:5a:bc:47:ca:24:8d:ea:30:76:e5:62:ac:16:
fd:00:71:d9:b0:b0:0d:f6:a4:a5:46:d0:16:e0:0e:01:e8:8f:
38:0b:46:39:8d:fa:30:aa:cd:a5:ff:68:ef:3a:36:4c:02:f2:
60:30:51:89:e2:ec:d8:78:6f:62:b2:f7:d2:a2:84:be:c3:de:
cd:14:1f:6a:da:b6:de:89:2f:c7:2f:23:5a:43:35:24:bb:af:
a8:21:98:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:24:43 2025 by rpki-client