Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: RJ73M+iH0zlHzOoFhAeeDXE+0Yl0mkO4CNNC6FrbD6c=
Subject key identifier: 8E:BE:61:3C:D8:B9:AF:6D:7B:FA:4D:E7:70:A1:D8:FA:D4:DB:F5:11
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 019A52D17BE6056125EBCC9F5EE0B51068B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 079A
Signing time: Wed 05 Nov 2025 07:00:51 +0000
Manifest this update: Wed 05 Nov 2025 07:00:51 +0000
Manifest next update: Thu 06 Nov 2025 07:00:51 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: GoS+uY+UihiBjiI0KZj6pa4qggpxWBaQ5W/Q9zA27Ds=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:7b:e6:05:61:25:eb:cc:9f:5e:e0:b5:10:68:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Nov 5 07:00:51 2025 GMT
Not After : Nov 6 07:00:51 2025 GMT
Subject: CN=8ebe613cd8b9af6d7bfa4de770a1d8fad4dbf511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:52:c6:ac:a9:e8:52:2c:41:c5:05:39:d9:25:
54:0d:fe:91:17:22:cc:1c:8a:9f:94:98:70:58:40:
38:fa:5c:8a:ba:77:a7:d8:4d:9a:20:f2:fb:67:3e:
89:a6:be:31:e4:07:21:de:6b:3c:4d:10:63:7b:a7:
d0:62:7f:49:a8:70:89:04:9f:53:bd:39:85:ac:0c:
c5:9d:15:e3:15:68:0d:8d:09:7e:82:29:d6:74:c7:
38:49:e0:41:62:16:32:12:df:0c:5e:e0:66:84:1c:
ae:d4:32:05:f4:5d:60:54:82:3b:c0:a9:b5:60:a7:
7b:71:cb:6d:91:35:1f:51:34:11:7c:8f:0e:7c:cb:
4a:98:b3:79:f7:c9:f7:c2:92:cc:b1:30:85:f8:53:
f4:69:38:8c:0b:8e:b1:48:3e:26:27:ea:2f:ad:4e:
e0:73:70:86:c7:5b:6e:f3:8c:50:8d:ac:44:2b:66:
a3:a2:b9:88:59:28:2d:c2:75:91:ac:39:bf:37:3c:
21:92:6c:ab:55:64:e7:92:d8:0c:cc:2e:8c:4f:0d:
58:f8:60:2e:a8:92:8f:ce:a1:ce:31:19:43:ec:3f:
52:b1:98:79:23:5f:8d:5d:2c:0c:02:06:94:8e:80:
51:80:e2:c1:43:5a:a6:14:15:4d:04:3f:01:1b:48:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BE:61:3C:D8:B9:AF:6D:7B:FA:4D:E7:70:A1:D8:FA:D4:DB:F5:11
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:86:04:ce:3b:d9:d3:b8:c1:3a:42:14:92:a5:b0:e1:7f:64:
00:00:35:20:72:ef:8c:d9:43:c6:73:5d:94:60:7d:ab:11:d7:
42:a6:78:e9:d3:ef:08:15:a4:d8:c9:30:c8:b7:e2:fa:0d:88:
c5:fe:6f:4c:b6:e4:be:f2:f8:27:d3:01:9d:55:5e:cf:b8:6a:
9f:74:2f:6f:1b:ac:f8:de:7c:a2:ad:bb:66:29:a3:49:97:21:
e5:38:25:ad:1e:75:02:24:43:54:f2:db:2e:54:6c:4c:a4:8e:
2d:14:e7:b8:22:5d:2d:02:1d:57:16:51:d8:97:76:49:24:69:
b8:4a:d7:3f:7f:bf:09:86:f8:80:42:b3:e5:1b:cc:1b:f1:2e:
87:74:23:b4:92:e6:b5:52:97:7b:52:9d:56:b4:37:d6:3a:ef:
24:95:ff:94:d1:04:93:f8:41:f1:ac:cb:50:bf:2e:67:f8:84:
06:56:46:93:10:2e:fe:c1:bd:19:81:2d:56:32:44:c3:02:88:
0c:0a:a5:f9:c8:88:ef:32:a4:09:83:df:4b:aa:2a:4e:bd:4f:
e7:c4:ca:7b:00:01:f9:fd:36:26:12:c0:51:04:82:55:e4:98:
03:39:57:eb:b5:83:54:60:f0:38:62:6e:38:4d:01:1e:c6:1f:
60:da:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:43:50 2025 by rpki-client