Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: KYd4V1AWN0LwoQPm68jXRH84ck0ys4hriL/O546XCyQ=
Subject key identifier: C1:C3:20:80:4F:89:07:EC:1C:67:47:CF:BE:92:4C:42:3C:96:80:0F
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019A4C60CF52718D7E6E6F38C1E465E8059F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 01:00:03 +0000
Manifest this update: Tue 04 Nov 2025 01:00:03 +0000
Manifest next update: Wed 05 Nov 2025 01:00:03 +0000
Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=)
2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: M0Wz6iTZzCiWa+bbolUMHVng4zc2fJLSwGxyrpM8h+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:60:cf:52:71:8d:7e:6e:6f:38:c1:e4:65:e8:05:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Nov 4 01:00:03 2025 GMT
Not After : Nov 5 01:00:03 2025 GMT
Subject: CN=c1c320804f8907ec1c6747cfbe924c423c96800f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0e:5d:90:4b:b6:e2:e1:cd:99:22:77:85:be:
8a:10:47:41:a3:9d:d5:3c:8f:2a:25:73:34:8a:f6:
9c:41:8d:68:ab:10:de:13:08:ae:9c:16:6e:f4:db:
c7:41:74:f1:c9:a2:c2:db:1b:2b:a8:e2:4c:33:f5:
06:df:60:46:57:21:55:97:3b:10:98:89:1d:a7:9f:
bc:8d:3d:6e:4d:ef:3d:d8:49:e9:6f:8c:a6:4a:ab:
ef:10:12:60:b9:dc:4e:e1:2f:a0:54:45:67:b3:6a:
3e:f8:6c:ec:4a:c5:19:0a:c1:d5:60:55:7c:55:a5:
c2:45:dd:83:c4:8f:82:48:fa:62:f2:d3:2c:e8:57:
58:72:cb:f4:23:52:c6:bf:2a:3b:5d:ec:23:69:fd:
a3:36:29:86:7f:c3:08:37:64:53:11:2a:b6:c6:25:
11:ea:e2:1e:52:a6:bb:1e:91:d3:ab:45:2f:04:d8:
89:ca:82:f8:b4:3a:66:7c:56:f9:1c:6c:f5:bc:31:
53:e5:86:39:2a:3c:a8:ce:4d:16:78:4a:7b:1f:53:
17:7e:a2:1f:a6:31:80:87:9e:c8:96:5e:d6:06:e6:
85:b3:47:4a:8c:3e:e3:15:dc:7b:69:78:8b:21:6c:
31:77:95:fa:a2:ce:95:28:30:ba:c5:ca:33:94:a9:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C3:20:80:4F:89:07:EC:1C:67:47:CF:BE:92:4C:42:3C:96:80:0F
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:69:e1:cb:b7:f7:6b:30:b7:5d:bd:42:a8:93:91:bd:a8:e6:
5b:d7:d1:5a:23:4e:78:ac:93:c9:85:37:ef:91:9d:4d:6f:e4:
b5:ef:50:53:9d:47:1b:7f:89:9b:97:b5:19:b4:15:83:71:11:
b5:1b:fc:40:d2:35:f1:aa:cb:21:ea:dd:7e:e1:ed:ce:73:95:
94:af:f7:76:d1:3c:af:53:8a:37:cd:8f:a1:a1:a3:8d:15:04:
a8:93:e9:e2:17:b7:9a:8d:6e:a7:b9:74:dd:af:41:b4:68:30:
a7:6f:29:14:a4:db:84:ec:2c:89:9b:c6:ac:9b:ca:c5:91:eb:
9f:3f:f3:4a:42:ce:eb:94:d1:f1:63:63:34:ac:d7:f1:6e:45:
3e:c4:4a:fe:cd:83:88:41:b0:55:f8:a1:dd:d3:3a:2f:e0:ab:
de:ce:6b:45:b7:25:1d:77:17:b9:b0:c0:99:cb:ab:47:37:d1:
a9:a7:aa:df:8d:28:0a:b7:39:a7:1e:fd:44:0b:c0:83:4f:19:
03:59:2e:a2:c9:72:59:0c:ed:6d:7d:ee:7f:be:a5:48:c2:47:
2e:6d:6b:7f:c8:c9:88:95:76:a4:3d:af:e6:b5:cb:ca:3e:8a:
22:57:68:60:37:7e:b6:bd:44:1c:89:eb:eb:35:fa:0c:c7:be:
81:9c:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:33 2025 by rpki-client