Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: DJX12RJewLVys5MokZ0VVVbo1oGWmo8RmROJnJ/vDzg=
Subject key identifier: 79:31:D3:16:78:2A:EA:47:78:E5:21:B7:A1:55:34:CF:84:C8:98:E8
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 019A50E2A7381FEE814837B378C6D7500C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 22:00:22 +0000
Manifest this update: Tue 04 Nov 2025 22:00:22 +0000
Manifest next update: Wed 05 Nov 2025 22:00:22 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: 2tVWc4trpJ8F6cNUr5jNCpX1FrYP5QEmr3AreAv14IA=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:a7:38:1f:ee:81:48:37:b3:78:c6:d7:50:0c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Nov 4 22:00:22 2025 GMT
Not After : Nov 5 22:00:22 2025 GMT
Subject: CN=7931d316782aea4778e521b7a15534cf84c898e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:84:64:7c:77:5c:2d:22:02:55:e5:e5:f8:
ca:22:45:c1:65:01:a5:5f:1e:47:83:b7:63:c1:bf:
f5:93:79:63:86:25:a4:c2:af:af:fb:e8:b3:73:99:
0d:29:56:1e:e9:39:4e:7a:e4:62:14:a0:36:df:0d:
5f:5b:e3:73:88:1b:44:06:2a:95:13:e5:89:43:31:
ec:c0:5f:4b:7c:f9:7c:54:08:90:ac:19:2f:7e:aa:
1f:dd:76:15:d2:cb:34:83:c0:54:4d:bb:9a:6d:ff:
3a:3c:c8:cd:47:45:ad:a2:5b:02:d0:04:c7:82:0c:
50:51:9e:cc:6d:4c:ea:07:be:dd:44:d9:e5:05:2a:
02:24:4e:04:41:27:32:e9:b8:78:88:c7:ba:43:e3:
f2:de:73:ab:bf:f9:9f:46:cd:d0:b9:42:d0:49:76:
5b:15:9c:14:f2:0c:26:c8:53:c9:43:0d:e5:54:17:
c7:92:42:b1:0a:50:17:95:7f:9a:2b:53:99:c2:c8:
9e:9d:19:83:ba:3b:61:7c:1b:dd:8f:e5:2e:85:40:
e7:cf:65:6c:23:53:42:1e:6b:f5:33:e9:af:51:ff:
15:5a:c8:26:e8:26:49:f8:e0:04:71:89:65:02:df:
a5:c9:e5:90:19:08:ce:01:bb:75:60:cb:4f:fb:f4:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:31:D3:16:78:2A:EA:47:78:E5:21:B7:A1:55:34:CF:84:C8:98:E8
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dc:4d:64:c7:82:cc:58:42:1b:ee:e8:96:39:46:b6:e4:a1:
7a:8e:d5:78:79:73:af:7c:d0:00:62:14:e5:91:cc:0d:82:08:
b9:95:ac:20:8a:50:59:d2:b4:ea:9e:6f:37:a2:ba:f4:dc:cd:
63:68:7e:f0:00:a4:a8:b3:10:42:f0:3a:27:b0:86:70:02:21:
13:46:da:62:1f:b1:3c:7a:78:06:26:d2:2f:be:a1:20:ae:d6:
1d:ee:75:a8:da:50:e8:9f:22:2c:b4:07:82:52:46:0b:0e:40:
8c:1a:f0:7a:c1:0c:8b:aa:ac:41:b5:fd:ac:63:5c:4b:d5:44:
40:56:4e:99:88:40:ae:08:38:61:36:8f:eb:4c:79:1d:de:2d:
dd:cd:12:8d:2f:a2:9f:ec:9d:fa:06:3e:9f:37:b6:88:c9:a3:
99:54:37:b1:9c:4f:b1:9a:f6:a7:6d:83:b0:ba:5d:8f:10:24:
b0:35:fc:0a:f8:19:b5:ce:40:3c:2c:e7:b7:85:bf:06:8a:7c:
4b:dc:58:7a:06:8b:e2:cb:da:bc:f6:e8:eb:12:02:55:b8:65:
e1:06:fb:df:ec:2a:1c:79:fe:bc:19:d2:11:b5:bc:92:1a:22:
93:ec:0a:f1:7d:2d:9d:e8:cc:3d:af:6c:fa:aa:d8:70:13:9c:
d0:f6:87:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:03 2025 by rpki-client