Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
File: dPs6a3_CjoZ05hHLCYB28OTFV8I.mft (raw, json)
Hash identifier: iyen3+/hZX/4NSmk3mDZuWSs7GWlXaAzNQ5ZJISD1zk=
Subject key identifier: 09:0C:55:D7:73:30:33:D3:1E:42:55:93:E1:45:43:27:FD:14:7E:87
Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
Certificate issuer: /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Certificate serial: 019A4E862163BD3037B5EAC84BA54C251324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 11:00:04 +0000
Manifest this update: Tue 04 Nov 2025 11:00:04 +0000
Manifest next update: Wed 05 Nov 2025 11:00:04 +0000
Files and hashes: 1: EbZ-PzExvsrKZ1aOLdbMth19YQY.roa (hash: Y23B6h9Jehv4hPRBbE1Q/MgzAwC8F0dy1/k/s/bejkY=)
2: dPs6a3_CjoZ05hHLCYB28OTFV8I.crl (hash: gg1l1WZFi07guUy2mFjTQ83px+Cv5+BmVeS3yTtwewY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:21:63:bd:30:37:b5:ea:c8:4b:a5:4c:25:13:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Validity
Not Before: Nov 4 11:00:04 2025 GMT
Not After : Nov 5 11:00:04 2025 GMT
Subject: CN=090c55d7733033d31e425593e1454327fd147e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:65:14:c1:d6:bd:1f:ea:2b:a2:e1:45:cb:
f8:85:f6:58:e3:f1:9a:d5:3c:92:2a:95:0c:64:8c:
2b:05:77:7b:17:c8:00:6f:7c:65:10:fa:b8:1b:e3:
7e:5d:21:9f:a6:bd:db:91:ff:cd:17:7f:b7:84:15:
0d:04:05:68:b7:09:8a:60:ac:88:2a:46:d1:4e:51:
77:e2:a0:45:82:24:d7:cc:8a:a8:86:91:d6:a9:01:
f2:f8:88:4d:6c:b3:45:50:0d:51:f1:b9:31:a5:23:
e4:13:82:68:14:b9:96:65:f0:c0:e5:1c:c5:db:24:
3c:dd:37:90:49:eb:82:5c:ab:76:90:34:0e:73:cd:
b8:c2:66:e0:08:f7:5b:f6:fc:e9:47:f2:78:19:f1:
15:7f:1d:e2:42:ae:1d:37:e5:e8:54:57:cf:3e:de:
66:13:8d:fa:f1:4d:93:e4:8f:93:2c:23:a4:39:3e:
54:22:03:bc:c3:75:38:c0:54:92:75:79:d7:92:bc:
62:be:d8:38:37:4a:8b:4c:1f:e3:6a:6b:af:f4:f2:
e8:cc:a5:d5:79:af:7f:c9:31:36:e3:0a:6d:3f:9f:
67:14:bc:97:0d:f6:37:32:cb:73:35:87:63:75:a3:
af:c6:81:b2:08:c6:3b:95:f7:52:74:7c:ed:a6:6c:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:55:D7:73:30:33:D3:1E:42:55:93:E1:45:43:27:FD:14:7E:87
X509v3 Authority Key Identifier:
keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ac:ad:00:e7:a4:56:10:e0:ac:56:02:cb:74:c2:08:e3:33:
18:46:fa:4b:64:5d:97:11:08:87:c8:22:41:27:e4:bc:dc:f2:
78:9e:3d:47:73:1d:ba:7f:12:46:f2:7c:5f:79:9a:41:78:d7:
cc:ea:5b:42:b9:03:1e:36:d9:99:27:32:df:13:16:58:4c:5f:
1b:25:64:0b:65:54:1c:fd:a2:a5:e6:86:29:9d:84:3b:66:16:
79:0f:ae:3b:f1:e3:db:81:6f:2f:cc:ab:cc:fe:d6:8e:01:5c:
24:65:8c:e0:f1:1d:af:1e:a0:71:c5:42:9b:4e:82:ab:07:c1:
9e:4b:81:51:27:4e:1a:e9:84:cb:3d:b4:be:6d:78:bb:43:1c:
15:fd:61:f7:94:ee:be:df:a7:e8:e4:36:f2:15:67:d2:2c:42:
5f:9e:13:9e:67:8b:91:a9:54:a6:8a:ed:14:7d:60:8b:2c:0c:
cd:70:2a:44:2f:8e:3e:7f:0d:bb:8e:55:bf:42:c6:27:8c:1b:
b2:d3:7d:fb:c8:98:60:ad:01:e1:12:12:1f:e5:35:e7:9b:d8:
21:c7:69:eb:0f:53:3a:b6:29:54:2c:0b:11:39:6a:a4:0f:69:
ac:54:a8:a7:73:19:51:95:75:ec:1b:4e:8b:00:5b:85:fc:51:
a0:6b:48:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:53 2025 by rpki-client