Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: gdIyZoL/8SeGEhbg2q3HI2VZbRM4jtB1tLgXCwxram4=
Subject key identifier: B0:F8:DF:9C:61:91:E4:9A:B9:75:77:68:7E:88:37:28:F4:96:77:5C
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019A4E86931AE876B6F9A1BD537BC6EF9235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 11D6
Signing time: Tue 04 Nov 2025 11:00:33 +0000
Manifest this update: Tue 04 Nov 2025 11:00:33 +0000
Manifest next update: Wed 05 Nov 2025 11:00:33 +0000
Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=)
2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: +/SCuW2QsogF/Xy8JWANbXlVgYqjNeG9DWCY057rGOA=)
3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:93:1a:e8:76:b6:f9:a1:bd:53:7b:c6:ef:92:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Nov 4 11:00:33 2025 GMT
Not After : Nov 5 11:00:33 2025 GMT
Subject: CN=b0f8df9c6191e49ab97577687e883728f496775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:54:e4:fc:b7:1a:d0:ed:45:49:b9:89:93:
98:f8:38:00:8d:7b:d0:95:fe:25:1f:51:1f:f9:36:
c3:ce:c3:f2:8b:c7:dd:e7:0b:71:30:7a:57:59:b2:
55:ef:2e:12:58:98:fb:32:41:1c:94:90:0a:a2:f4:
7b:94:01:d2:89:3b:a8:05:7e:c6:a1:d9:b8:5a:23:
8e:a6:48:ec:dc:fd:bc:14:e9:f6:e9:8e:77:f3:d6:
df:cd:fe:55:7f:30:77:8c:ec:a7:08:85:65:38:55:
10:fc:15:df:21:14:6e:2b:1d:f3:df:2d:e3:ff:a1:
a5:1d:61:60:51:ba:77:99:42:7a:47:9d:5b:27:a0:
2f:c4:a3:c3:35:63:b4:b0:32:1a:31:c2:fd:e7:3d:
5b:21:27:6f:0e:7f:fe:19:36:45:6f:d2:95:df:e2:
2e:e5:cb:52:2e:d4:de:40:0c:f1:68:97:0a:a7:c7:
ea:5b:d3:44:89:a4:fe:ff:ec:78:df:05:7a:c7:4c:
97:f3:d7:ae:f5:a5:22:dd:3e:8f:68:53:d3:85:01:
e8:ec:c4:37:49:7d:c5:c9:df:b8:1e:ae:2f:0e:48:
88:76:74:a6:23:89:7d:c5:4d:60:fd:13:94:1a:19:
3d:1e:a3:8a:5c:6d:a5:e4:e0:48:ca:2c:ca:b9:9e:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:DF:9C:61:91:E4:9A:B9:75:77:68:7E:88:37:28:F4:96:77:5C
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b5:89:62:62:ac:6d:10:49:7e:fe:d9:85:5c:11:7f:0f:8b:
80:31:9b:47:d5:7c:71:37:93:65:11:ea:0c:d6:2b:dc:25:8c:
ad:bb:cc:61:66:c0:3f:22:1c:88:b9:a6:c0:3e:37:d5:01:3b:
93:63:e8:e4:38:68:97:d4:1a:fc:2e:75:37:f5:ce:56:76:39:
b3:fc:cd:fe:d5:03:67:59:8d:80:29:5a:0d:5a:99:dd:ff:80:
6c:a0:ca:51:16:0e:b4:60:fe:13:a6:11:b9:18:d0:8d:f8:de:
6d:5e:42:1c:b1:92:84:74:3c:a6:0c:3b:21:de:5f:4c:34:0a:
b0:ed:55:36:38:07:2a:32:b4:89:37:62:f5:45:5c:77:56:30:
05:38:1f:a3:b8:12:1b:8f:50:28:75:0e:5d:aa:10:52:ee:f9:
ab:a1:27:7e:e2:35:d7:ef:e7:a0:7b:0c:24:a9:0f:7b:14:b8:
4c:9d:f5:e4:87:bb:28:1e:2a:9d:e7:a0:0e:2d:1b:46:e7:46:
09:bb:7d:57:4a:74:d7:83:33:c8:27:05:03:f9:d2:a2:bb:2d:
c5:29:f7:88:fc:56:2b:c4:f5:e8:95:96:6b:7e:6d:95:e5:3f:
f8:88:84:a4:00:d4:79:5c:04:27:f5:ba:f2:9d:49:71:f1:41:
c4:06:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:58 2025 by rpki-client