Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: jVzzpQOsTyqQLUTImx8JYEZ4NpV3JKku+80HVyaAgcA=
Subject key identifier: 89:EC:33:93:71:C5:21:C8:FB:AD:04:75:7E:72:01:B0:EB:39:C1:A6
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019A50E425D1CAFA4CB1DCBA3CD8FBD8705E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1792
Signing time: Tue 04 Nov 2025 22:02:00 +0000
Manifest this update: Tue 04 Nov 2025 22:02:00 +0000
Manifest next update: Wed 05 Nov 2025 22:02:00 +0000
Files and hashes: 1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: GxqFdw5iu2CcmTDFnpYKwRNFpwxg9GzGmyKdmc99an8=)
3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:25:d1:ca:fa:4c:b1:dc:ba:3c:d8:fb:d8:70:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Nov 4 22:02:00 2025 GMT
Not After : Nov 5 22:02:00 2025 GMT
Subject: CN=89ec339371c521c8fbad04757e7201b0eb39c1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f4:eb:df:b7:bd:42:ec:27:31:f9:59:c7:36:
61:42:4d:66:31:e1:4d:e3:cb:5d:1a:f6:73:13:d9:
4b:70:14:15:21:ca:d4:55:7d:33:aa:63:65:7c:a5:
86:7e:03:f3:a0:57:e1:19:47:f1:9f:99:b2:ac:9b:
59:d5:34:0f:31:4d:35:47:f7:24:ab:7a:46:f6:b0:
d3:0f:62:dc:ce:5b:74:40:b5:cf:1c:94:1a:2c:8c:
f9:4a:ad:22:f9:5f:54:99:cf:70:7b:fb:7b:80:55:
8a:ac:5f:fe:c2:11:1f:f7:d2:a6:75:c0:a8:5d:fb:
5b:bf:1e:2a:ad:9f:21:86:02:89:30:27:92:2f:f0:
89:49:22:af:77:80:bf:04:d3:66:98:96:ea:c1:61:
c6:c5:54:92:62:80:4f:22:e9:61:15:0c:a4:e1:e9:
33:7a:b4:88:54:1c:66:a2:16:02:b0:73:11:05:27:
2f:13:c8:b4:1f:3e:1f:ab:c4:cd:51:e6:c0:1b:b3:
d9:c8:f6:76:d9:55:24:06:c0:6b:32:06:38:58:d2:
ec:d4:2e:4a:f2:73:57:1b:62:ba:66:2b:59:76:b7:
52:89:ae:7e:72:c6:56:bd:5d:fc:c4:63:f8:38:76:
54:04:cb:f0:30:28:67:67:b9:73:19:18:6f:b0:cf:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EC:33:93:71:C5:21:C8:FB:AD:04:75:7E:72:01:B0:EB:39:C1:A6
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1b:ad:f2:7d:66:ba:c7:a2:55:d5:fc:0b:d5:8f:8e:94:91:
1b:2f:51:13:c0:25:94:e4:44:87:27:b7:9a:df:9f:e9:1d:d0:
f1:b9:11:28:f4:dc:d2:22:d8:e3:f9:8b:71:14:2b:d1:9e:b9:
03:c1:f1:dd:db:c1:2c:52:6e:81:e3:76:73:2c:82:ae:5c:c2:
5f:72:b5:74:3e:bb:bc:b7:ee:4f:bc:75:10:5f:9e:a0:cb:a7:
11:0d:8b:60:2d:4b:17:27:6a:f3:b2:c3:33:46:bf:f7:8d:63:
7a:3c:c0:9f:b5:1c:b7:86:c9:ac:74:b3:65:51:4b:d2:58:aa:
eb:4a:cb:43:c9:ce:28:7f:5c:7c:31:12:c1:ef:6d:03:c3:13:
10:9a:3b:a8:fb:e3:d4:c8:41:b7:46:8b:69:f3:3b:34:6f:fb:
f0:91:6d:72:40:a9:b6:1f:c5:0f:fd:38:5c:49:e9:e5:8c:1a:
a5:eb:d8:4e:62:94:1d:c4:96:8a:d6:54:34:9a:1a:83:e6:a4:
b7:e1:27:ea:c6:93:5f:74:96:5c:80:ee:14:6e:a8:60:ab:96:
24:c8:0e:c0:d5:88:4c:53:e9:8d:8c:05:77:16:bf:bf:9d:f6:
16:1f:aa:f5:3d:d5:95:f4:eb:b3:24:5f:fe:24:8f:e8:84:99:
38:dc:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:20 2025 by rpki-client