Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: +z5d04yHan+7Ic7qo4OsH0MFppljOC7QfaTawetgQv8=
Subject key identifier: 8B:35:86:A4:0E:77:EA:2E:EC:2C:CF:67:D3:1A:71:93:E2:E7:9F:A6
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 019A4EF5A2CBA8D051B85D8E33CCB9D305FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: VkeQaI8XXo2X4U1zzTxrlqIpSbd2kpz0QHVqS3tjioo=)
2: M1fWkBIHAuVSUFxtDGIthqqmrJE.roa (hash: +6gCxjSejI/as6boiaKhDkfwSxB7S4u8Oz//yZsKkyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a2:cb:a8:d0:51:b8:5d:8e:33:cc:b9:d3:05:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=8b3586a40e77ea2eec2ccf67d31a7193e2e79fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:ae:9e:9e:b7:6c:50:b4:ee:4a:a2:67:1c:
30:37:00:ab:15:50:42:8b:59:53:0d:d7:64:5a:ea:
a1:c4:43:ef:4a:12:2a:20:20:4f:fe:6e:a8:f0:a1:
6e:c3:35:b2:eb:25:c6:7d:96:85:64:be:0f:f7:3c:
ed:26:16:7c:a3:07:1b:12:fe:02:92:44:3d:e6:b4:
ae:cc:7e:d6:0b:a4:c2:13:78:e4:c9:3d:d5:32:d0:
b3:8b:67:09:77:bd:a5:fa:aa:2b:1b:5f:dc:44:e9:
9f:ce:21:c0:23:41:f1:18:ad:23:15:87:ba:f1:38:
45:49:eb:b3:1c:60:82:fb:8d:a5:0d:41:9c:95:3f:
69:d5:04:0b:e8:8c:62:b4:dd:04:3c:2a:b1:e6:30:
91:98:f1:31:4b:b1:1c:cf:7d:4f:37:bd:fc:0b:55:
0f:b1:a9:c8:4a:5b:48:25:6b:9a:14:19:26:12:6d:
a7:e0:ab:6c:a6:8f:0c:5f:ba:58:c8:e3:47:fd:2d:
a2:9c:c7:52:4f:a6:10:39:89:56:bc:00:ff:95:21:
70:db:78:39:43:54:84:cd:5a:54:cc:20:21:0f:fc:
74:8b:aa:4a:b1:18:c4:61:a1:70:f9:e1:b1:45:70:
f9:f9:a8:58:a2:9c:8a:bd:8c:63:e4:77:2c:27:86:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:35:86:A4:0E:77:EA:2E:EC:2C:CF:67:D3:1A:71:93:E2:E7:9F:A6
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4d:50:b8:64:0a:2e:d2:b5:60:2f:7d:74:84:66:6a:2c:69:
1e:1d:33:bf:72:fa:f9:c3:15:35:c5:99:e3:7a:25:fb:e2:81:
d8:79:89:9a:6d:66:04:74:7a:76:7b:72:ec:9c:1a:06:4b:7a:
e9:91:60:df:e7:50:a7:24:d2:be:0a:7d:33:ef:af:5d:c0:9e:
24:d2:25:25:74:36:93:72:02:36:fb:a4:ce:05:fc:fe:a0:98:
6f:56:43:2b:f3:1b:ea:0e:72:9f:81:a1:6d:6a:40:17:ba:3c:
45:fc:ea:cc:db:a9:aa:09:94:a6:f1:2b:f2:26:3c:08:86:ab:
fb:b8:60:53:2c:70:32:49:1d:0d:3b:84:7e:e9:dc:f0:ce:e4:
d8:64:0c:9e:47:0e:0a:c7:0d:c3:47:3f:bd:29:3f:8c:10:d4:
97:f5:2e:be:b4:37:8c:f1:48:03:75:f2:57:d5:45:ca:e9:1f:
f3:28:e0:ab:fb:23:7c:0c:82:c6:d2:56:28:e1:9b:4d:2c:76:
46:14:ac:42:ed:2b:c9:66:e6:13:d0:81:20:0b:dd:82:90:4e:
ac:09:bd:f4:91:9c:fb:9e:d9:3d:1f:57:30:9a:b9:1f:b7:a6:
b1:79:aa:87:72:1e:0e:c2:92:0e:a0:fe:eb:a9:a7:69:a9:42:
9a:2b:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:31 2025 by rpki-client