Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
File: 96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json)
Hash identifier: xr49Z2Q88c6asuhMFpvsYEAozLv/kzbeMydac7noCEw=
Subject key identifier: 01:28:BD:4D:06:6D:59:7E:DD:15:95:DB:E1:CF:C7:0F:79:38:8A:11
Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Certificate serial: 019A4EF5B2AEBC0F147BE53B88012E268C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: VNRO0OdYc2K5q0Sq2k1XfYlbbmzvBf/KXwrL550mAhk=)
2: T-ndwyW2lzOqFwfi0HlwvxGN6hA.roa (hash: SwBUiR0PUxgXxZT0VaCgm/zNAN819Fxo/yeUtptTXzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b2:ae:bc:0f:14:7b:e5:3b:88:01:2e:26:8c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=0128bd4d066d597edd1595dbe1cfc70f79388a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:13:74:4e:8b:e0:39:4a:92:04:8f:bb:a4:
3f:2d:e6:b7:bb:91:a6:b2:cb:cd:48:1e:45:09:e6:
2a:f7:f8:75:b0:91:0b:82:d4:b2:97:48:c6:db:e4:
fe:ea:4a:a2:5c:1c:b5:01:b7:0e:6f:b4:2a:8d:98:
bf:18:57:16:cb:a8:47:34:0d:2d:91:04:6a:b6:02:
59:f3:12:07:17:62:21:0d:fc:e3:9f:16:4a:2c:30:
46:c1:ac:55:19:15:34:d3:f6:e5:db:27:a1:1f:6a:
07:2e:f4:b3:ed:f3:fc:2b:f8:6e:00:ff:74:18:49:
c2:09:21:81:8d:79:35:fc:11:39:c0:02:b9:d1:08:
36:aa:96:36:e7:52:63:3d:cf:67:7f:a1:d1:07:f1:
1e:42:e9:f5:76:84:0c:62:90:e4:e3:5d:74:74:5d:
52:c4:7b:d2:1a:54:90:36:d1:84:34:dc:d6:85:95:
3b:a5:eb:36:c0:48:43:a8:13:7d:fe:92:b1:60:90:
7d:68:f9:d6:57:b1:4f:7b:2b:c4:73:5b:6b:3b:4d:
40:82:55:5e:c0:11:dd:75:f1:bf:35:6a:f1:0d:9d:
f1:1b:a8:f4:41:80:02:e4:d2:5e:d4:b1:6b:ae:ed:
36:cf:64:50:5e:ff:b9:0c:d6:2c:75:d1:d6:c9:ca:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:BD:4D:06:6D:59:7E:DD:15:95:DB:E1:CF:C7:0F:79:38:8A:11
X509v3 Authority Key Identifier:
keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:74:a1:7e:72:a4:4b:c0:d2:5c:d5:50:ed:e8:a3:05:c2:b6:
fa:bf:05:ed:54:18:55:39:66:bf:c6:e3:49:db:a2:28:16:f7:
93:0a:e4:10:e7:96:c3:aa:05:c7:d2:a1:f5:b8:26:11:e4:13:
3e:55:6f:ad:b4:73:00:de:f4:a6:4c:88:d8:9d:0b:3a:f3:ae:
ef:57:6f:ab:c4:3e:31:e2:5b:ca:f2:f7:65:86:26:6f:d9:1f:
47:51:b8:61:31:02:57:04:c6:03:45:91:be:ee:6e:d2:ca:ed:
d9:87:9d:1c:37:ce:21:17:18:7b:43:3d:c6:31:a2:28:91:89:
f0:55:89:4e:9c:67:5e:3c:8c:d2:5b:92:67:3d:17:27:96:5e:
07:5e:95:30:21:f4:d4:e9:80:01:46:29:51:c1:80:12:02:8a:
23:52:34:0e:e9:6c:f7:0d:09:00:54:04:dd:61:19:6f:56:16:
19:e3:bf:36:2a:35:04:46:5b:7a:55:38:d2:6c:7b:50:94:c1:
17:06:db:d5:5d:b4:b7:eb:fb:da:61:c2:96:e1:55:e6:30:3d:
fc:80:ea:c2:f1:8d:ba:30:d0:c3:12:a6:ec:4b:50:3a:5f:b7:
42:fb:69:7a:fe:c0:69:e2:0c:d5:b1:03:09:f3:e1:03:1d:f3:
49:2d:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:45 2025 by rpki-client