Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: y09a6Ds5BYh/7SgLiYbQFc0k7H8qltL8/l0tk0WMwu8=
Subject key identifier: 80:51:B8:64:56:B4:3A:34:23:02:0C:B7:83:23:4A:0D:42:42:BB:22
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 019A4E18CC9B54104B1FE6355FD3138D0826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 11D8
Signing time: Tue 04 Nov 2025 09:00:39 +0000
Manifest this update: Tue 04 Nov 2025 09:00:39 +0000
Manifest next update: Wed 05 Nov 2025 09:00:39 +0000
Files and hashes: 1: IqOWD9aJ14QW67iQSHAr_IsG4xE.roa (hash: w3ZVvZLPlnQKzQOQmLMJRlyI3uHeVIilgUta/ectFxM=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: 60kI0jaXxMQ5njaH8obo2RQ879rJ3jOnt3YFku+M+Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cc:9b:54:10:4b:1f:e6:35:5f:d3:13:8d:08:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Nov 4 09:00:39 2025 GMT
Not After : Nov 5 09:00:39 2025 GMT
Subject: CN=8051b86456b43a3423020cb783234a0d4242bb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:f5:ec:38:05:74:fe:4b:6a:1b:1f:03:78:
a0:da:ac:97:72:fa:d2:b3:36:07:f0:68:09:fd:72:
5e:aa:75:99:d7:f1:6f:73:df:10:61:ff:99:56:2e:
b4:e5:d9:e3:50:06:61:de:a3:38:98:e5:a9:1a:21:
e5:0d:dc:ee:be:26:c7:a7:d8:6f:2e:9a:07:de:d6:
63:4a:fc:bb:6f:12:08:fe:0c:ba:57:4f:e2:0f:2a:
8b:e4:b3:d4:11:9a:c1:8d:96:ec:ee:74:4f:f7:53:
68:9a:c5:4d:d3:5f:47:76:1e:31:0b:4f:20:c1:ff:
de:c8:08:b9:b6:fc:43:d1:49:73:68:a4:46:4b:31:
88:19:73:3a:4f:69:79:60:f9:ba:a9:f7:33:58:89:
c1:0d:11:15:00:62:87:38:82:f7:63:54:51:95:2c:
3f:ad:e8:2e:fd:64:74:67:c9:95:c1:00:56:de:76:
12:aa:ad:62:86:73:2e:cb:8e:cb:92:4a:69:6f:92:
6d:5b:27:7c:64:a3:18:79:fd:b0:14:fa:39:fd:c6:
35:02:cd:f6:f5:68:9d:54:39:9c:ae:f3:cc:d5:1d:
39:51:66:b2:f2:c2:88:69:fa:99:f6:19:6a:0c:25:
76:05:93:ba:99:7f:34:c7:49:66:33:44:2e:e1:2e:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:B8:64:56:B4:3A:34:23:02:0C:B7:83:23:4A:0D:42:42:BB:22
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:0a:55:d8:40:a9:a4:bb:be:6d:55:22:2d:4f:8f:ee:cc:
cf:9e:0a:53:c6:bb:2a:40:f2:68:b5:cc:c4:86:8d:3b:8a:e7:
30:cd:df:76:aa:07:ae:8f:dc:c8:42:fc:ab:1b:6c:37:92:13:
5d:23:47:74:1e:c4:f4:e4:2a:94:31:ba:9f:d4:3a:73:51:f1:
dc:a9:48:54:db:34:ad:4c:96:a8:b6:f3:db:3e:d3:85:1c:d0:
f6:46:c7:ad:50:d5:3a:3e:8e:54:71:ec:34:e9:ab:ce:ad:79:
05:f2:50:66:ad:51:40:fd:87:55:28:8c:2d:e1:a8:f2:70:97:
f7:3a:41:a3:01:fb:26:ba:f7:85:19:10:4e:c2:ee:7a:0f:67:
38:87:08:70:35:a8:ec:89:cb:5d:ba:db:ed:21:a8:59:81:9e:
93:a7:5c:ca:af:4c:78:dd:fe:3b:fc:79:0c:57:a4:1c:83:c2:
b5:32:1d:eb:1b:2d:85:74:cf:c3:20:22:44:b9:84:23:bb:dd:
af:d1:0e:9e:7c:4d:90:c8:7e:67:c2:09:a1:8f:75:d1:4f:d0:
fa:54:90:9a:18:ba:42:1c:23:70:50:b7:42:69:f7:89:fa:92:
cd:db:8b:4d:d1:6c:6c:f6:31:a9:be:ad:83:4f:c7:fd:3e:8d:
cb:1f:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:45 2025 by rpki-client