Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: E5vmG69d0M1ZO/OqpVWwM9mz5IUu1Q3k3xW0NUV2bA0=
Subject key identifier: DF:78:76:2F:A0:9E:B1:3D:04:15:7E:C6:53:A6:98:B7:68:57:EC:2C
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 019A4F2B113981A487992FF2665656B9F2BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 14:00:13 +0000
Manifest this update: Tue 04 Nov 2025 14:00:13 +0000
Manifest next update: Wed 05 Nov 2025 14:00:13 +0000
Files and hashes: 1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: FJLPBrqX18Q3bUNnM7K8RYo/V5oJvgWcVZw8Sx6M/HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:11:39:81:a4:87:99:2f:f2:66:56:56:b9:f2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: Nov 4 14:00:13 2025 GMT
Not After : Nov 5 14:00:13 2025 GMT
Subject: CN=df78762fa09eb13d04157ec653a698b76857ec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:14:2b:b5:f1:69:70:0f:50:78:66:51:6c:
d9:68:9e:27:10:e5:0f:db:17:f9:2f:4f:43:68:72:
16:de:55:8d:f8:bb:39:ca:76:2d:e5:77:83:c3:0c:
21:f4:d2:38:cd:29:df:fa:5f:4f:a2:35:e1:d0:a2:
07:a0:09:bb:80:6f:be:fe:70:a4:e5:7e:53:ec:4f:
e1:e9:f3:41:f3:7f:d3:1b:64:3d:00:68:9a:a8:57:
ac:fc:9e:a3:c9:ba:a3:45:3f:8c:9c:15:37:bb:01:
89:f1:f3:02:ca:e8:81:6a:00:5c:75:e3:3e:d5:a1:
f2:fc:3e:c2:9c:65:6a:f2:c9:33:da:a2:5f:0b:33:
7f:a5:e4:1c:8b:98:84:3b:45:25:4a:1f:d4:ca:ec:
ef:56:c1:16:12:34:5e:dd:49:94:d5:95:03:1b:4b:
28:6e:6d:9b:2c:65:48:f9:e4:0c:2d:88:91:04:1b:
f1:a1:01:2f:da:74:8f:88:f5:b0:36:0b:ed:01:31:
ea:aa:b4:f4:88:45:55:31:ed:b9:af:0b:c2:75:09:
21:57:e7:da:49:0e:3a:77:10:ba:d3:cb:3e:26:08:
5a:82:b2:c7:51:f3:90:f7:6c:d6:da:80:44:bf:8b:
21:95:f2:58:5c:3b:14:92:92:e4:a1:04:13:4b:50:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:78:76:2F:A0:9E:B1:3D:04:15:7E:C6:53:A6:98:B7:68:57:EC:2C
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cc:eb:21:48:b1:b9:a6:11:94:2f:c7:30:25:4f:c2:fd:8e:
63:4f:a3:0d:ec:a1:30:c2:8a:40:d5:16:90:ec:d3:88:c1:07:
ff:3c:02:9b:49:fb:dd:64:14:d5:44:7a:41:8c:bb:0c:9e:b0:
82:3f:5c:3e:e2:ab:7f:48:12:bc:fe:a2:6f:29:01:b6:83:c6:
99:53:26:61:d1:e5:dd:01:d4:a5:36:25:3d:b6:ff:3e:57:e0:
55:fa:3e:83:23:7e:54:e9:77:67:bf:ab:6a:c6:06:c8:c1:04:
a3:12:62:62:c9:69:2a:16:f9:81:cf:ab:5b:b0:6e:dd:25:4a:
30:ab:81:bd:84:dc:24:d4:46:7f:2e:f0:74:f3:ee:45:3d:a7:
7e:1e:51:8d:b6:6f:a3:19:f8:71:73:34:1b:ed:d3:55:a0:4d:
51:67:67:29:fd:6e:cb:5b:eb:0c:b0:08:f1:b4:27:54:22:89:
25:08:f5:35:a9:8c:a0:c7:37:4a:d7:93:98:71:2b:1c:8c:c8:
24:e8:00:17:c1:5e:38:67:32:2e:8b:f0:9a:c0:ec:7f:fc:6d:
11:2f:9c:3b:4a:e4:00:92:9f:30:1b:04:f3:e7:8c:22:f7:27:
6d:72:0e:aa:44:57:72:2a:84:21:92:59:fc:3f:f7:da:51:38:
f6:7a:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:13 2025 by rpki-client