Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: VHuvTHqMn3P/3lLH04wSKKAoVarJGnT1fNGa2ohqtDE=
Subject key identifier: FD:33:D3:E2:E0:E7:6C:B6:30:17:E3:DB:77:16:05:C4:72:B9:B9:EF
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 019A541A90E37634A4D72CE9C6B7BB80BA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 021A
Signing time: Wed 05 Nov 2025 13:00:18 +0000
Manifest this update: Wed 05 Nov 2025 13:00:18 +0000
Manifest next update: Thu 06 Nov 2025 13:00:18 +0000
Files and hashes: 1: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: Dlse2t6Z4NNb/itEEDchLwDb6ATJWIhgPP3pHH4HS0U=)
2: UFEpRGmmgSxI-Cj4mUoULnogLh0.roa (hash: uynyMnukvUhaVDa9YBwkcCoinwLXAu+vAC1b07ExVN4=)
3: mIeWrCvH_vi6WIO4Abqw0wSZ9wE.roa (hash: UEuZfid3mOqO0N/4zAUnn5LYhUgHF25ZTPMwLRC0oAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:90:e3:76:34:a4:d7:2c:e9:c6:b7:bb:80:ba:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Nov 5 13:00:18 2025 GMT
Not After : Nov 6 13:00:18 2025 GMT
Subject: CN=fd33d3e2e0e76cb63017e3db771605c472b9b9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:92:9a:d5:36:15:02:e1:22:cb:cb:22:8e:
99:e0:9a:db:5a:cd:f4:62:27:55:0f:d4:9d:9f:85:
0d:4c:98:99:5a:0b:d8:70:29:41:01:62:18:05:5e:
7a:1c:25:d8:e9:1f:c7:aa:35:d1:b9:55:73:0a:a9:
4f:50:7c:82:bf:7a:1c:7a:db:f7:14:73:88:d2:85:
c1:fe:9e:dd:0c:d4:28:24:ed:f3:b4:15:60:8c:dc:
9e:35:a5:cc:e0:2f:04:32:9e:27:45:22:f6:9f:0a:
4b:17:68:ac:3e:2b:87:a0:8c:83:6e:c9:84:7f:dc:
12:fc:11:6f:77:6e:31:91:54:14:ae:19:71:b0:df:
38:95:3f:9d:e0:35:bd:63:aa:11:fd:6f:35:a2:db:
61:7f:ca:57:2a:d9:ff:3d:ae:6e:09:56:40:cd:44:
e5:34:04:76:58:b8:68:77:4c:5f:0c:a4:8d:45:d0:
81:58:a2:9a:46:33:d5:b8:ee:bf:af:dc:8e:9d:cf:
60:c5:cb:1b:8c:ef:dc:57:2c:bc:16:af:eb:45:a8:
35:6b:8e:b5:77:87:41:26:4b:91:2a:43:8b:e0:43:
eb:74:c9:38:9a:96:fe:61:a6:cf:85:91:43:1d:a9:
e4:63:bc:d1:ea:fe:6f:fd:3d:17:13:c4:77:99:5d:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:33:D3:E2:E0:E7:6C:B6:30:17:E3:DB:77:16:05:C4:72:B9:B9:EF
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:97:3d:d7:85:b0:e4:5a:85:b6:87:e3:78:59:d9:03:05:
77:c7:7d:ad:b4:84:71:56:84:83:2d:8b:f0:a2:f9:71:6d:a5:
44:67:bc:9f:42:1b:7b:e2:d7:1a:b0:37:66:0a:7d:83:49:0d:
b3:52:dc:ef:3b:fb:c9:2b:9b:bc:ae:6e:1b:1d:dc:63:da:31:
8a:31:5b:1f:a9:f4:2a:01:9a:84:57:2e:b0:e4:b6:1f:d5:bd:
c8:48:81:ac:1b:f9:18:fa:ad:cb:09:e5:0e:01:2d:9e:04:a6:
9f:b5:8d:66:c0:0b:4c:bb:89:83:1d:e4:99:5f:ce:a0:ba:91:
3b:14:98:a9:c0:0a:bd:1c:56:15:78:bf:8d:67:95:dc:ed:73:
2c:ed:13:45:63:95:82:8f:05:1b:34:5e:e9:9d:61:27:04:e3:
5e:46:04:aa:a6:57:d5:07:ff:7b:12:86:4f:b8:18:9f:d1:7a:
db:a0:51:54:ad:d7:e0:54:46:9d:cb:c3:ca:8e:5f:1c:f2:41:
ef:67:e4:a9:f1:a9:e7:f6:22:44:4a:de:1b:0f:bb:da:d9:ea:
26:25:11:35:38:c2:a2:0f:ff:83:b5:a4:9f:b2:cc:4b:e8:e4:
f8:2d:e7:11:32:70:25:40:24:29:6c:7f:05:27:15:93:45:57:
b3:0d:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:09:04 2025 by rpki-client