Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
File: dn62YZNtyV2j7MTKPq9YE4nA2FU.mft (raw, json)
Hash identifier: ybmwAuA37Db37z0DaSYnQaUVdQE+3WU6Nbsa4IRkKUU=
Subject key identifier: 8F:AC:C2:93:AD:C0:45:61:84:63:A4:8A:13:32:08:A6:BF:4D:07:69
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Certificate issuer: /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial: 019A4C98284573595269A86054EEE696C923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 02:00:31 +0000
Manifest this update: Tue 04 Nov 2025 02:00:31 +0000
Manifest next update: Wed 05 Nov 2025 02:00:31 +0000
Files and hashes: 1: 1-1fD9INC6tdul0-Zxx4kw5UQaSA.roa (hash: xArWY+ZJbdFaL3BIojqGwzrX81Sbjb4pJCyT9h2MU5E=)
2: 8_gnS_gysL9vFXycvHFYUuT3eFQ.roa (hash: fdIKsa34nJXAe2MSq8dUjvxc5//TDcQhR1zCGckQ59Y=)
3: dn62YZNtyV2j7MTKPq9YE4nA2FU.crl (hash: SrrVepiLblwLavcJZRd16cW8+sep84gGhMfPNRHFom8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:28:45:73:59:52:69:a8:60:54:ee:e6:96:c9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Nov 5 02:00:31 2025 GMT
Subject: CN=8facc293adc045618463a48a133208a6bf4d0769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ca:2a:ce:27:28:4a:f4:81:7c:59:80:e1:a2:
d0:38:6a:fc:46:f9:0d:49:b2:c9:5c:1b:ac:5e:22:
2e:6b:c7:82:f5:54:14:78:8d:fc:30:27:9c:e8:d7:
61:7a:a5:b8:87:ba:95:03:57:94:98:4a:4c:8d:44:
da:61:b4:53:4d:d0:6d:ce:f6:2b:86:31:34:c4:d0:
7c:c7:11:d5:f3:c1:f5:2c:f7:82:e5:6c:cf:12:d7:
2c:67:e7:79:6d:a4:c5:ed:36:ba:74:cc:5c:b6:f5:
45:07:da:dd:e5:de:52:c2:aa:d5:71:6a:c7:f8:7a:
f4:23:d0:ad:3f:1d:7b:6c:28:f8:aa:32:f7:2a:d0:
cd:38:60:96:1a:70:4f:eb:ea:b5:32:29:3f:92:a0:
34:fa:47:b5:a0:50:c1:cc:ae:9a:2f:ce:99:99:8c:
06:f5:8e:bd:4f:48:1e:80:dc:19:1c:e2:a0:1b:a9:
41:23:ee:4d:5d:53:e1:2a:a7:7e:6e:71:b9:c8:fe:
6c:ea:75:11:2f:3e:e5:94:bd:e7:f8:24:5d:e0:4f:
f8:62:a9:af:ef:08:c2:41:bd:74:d1:89:dd:f7:e1:
07:b9:43:64:b1:df:bc:0c:0e:59:e1:4c:8d:b9:4e:
5b:b5:13:25:15:3e:e3:c0:ea:7e:35:23:e9:dc:31:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AC:C2:93:AD:C0:45:61:84:63:A4:8A:13:32:08:A6:BF:4D:07:69
X509v3 Authority Key Identifier:
keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:60:11:af:df:b0:b0:4b:e6:3e:94:57:e8:fc:48:d6:ee:
03:4a:cd:7f:ca:ad:80:27:39:63:ee:ce:ea:3a:f5:aa:49:97:
90:48:13:ec:b4:a8:b9:53:75:b1:ba:66:37:64:07:71:65:61:
3a:38:10:e0:64:49:bb:d3:4a:ef:31:47:39:61:e2:2e:19:ec:
b5:68:51:34:6f:7c:3b:41:27:42:4e:31:ce:b1:95:a3:f9:3f:
ed:c4:be:59:4f:52:e5:46:c1:c7:07:33:03:13:ff:68:4d:3f:
93:f6:f6:0f:5b:54:a8:c9:53:41:f1:5c:59:bd:aa:fd:e3:41:
fe:46:30:2f:35:c3:52:8c:eb:22:78:26:6a:74:88:61:1b:5a:
b7:e3:33:1b:99:5b:c3:36:62:33:18:8d:ed:4b:c8:f6:f8:f3:
5b:d7:97:67:62:63:78:57:89:da:cb:43:af:ab:44:04:e8:d5:
36:71:52:e9:27:f6:fc:95:09:7e:a0:e3:56:a7:39:8f:a5:34:
27:5a:bf:1c:b8:77:92:4f:9d:53:83:75:2d:32:c1:e9:f7:7a:
e8:c7:5f:c3:d3:4e:bf:f0:e8:a4:20:c6:20:ea:23:7c:43:14:
5c:30:9b:dc:e1:02:0d:b1:48:0c:c4:42:5d:9f:c8:ee:60:3a:
f0:59:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:27 2025 by rpki-client