Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: 5wpPfD5FCm/BIgvw5X2yQR7bQrybrItsvQ0vqw0hcFI=
Subject key identifier: F6:2C:61:6B:1D:09:8F:C6:15:35:5E:1E:17:4E:D7:D9:6A:71:C3:17
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 019A50071AD95E14F03B2F499EEB43E0D783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 18:00:34 +0000
Manifest this update: Tue 04 Nov 2025 18:00:34 +0000
Manifest next update: Wed 05 Nov 2025 18:00:34 +0000
Files and hashes: 1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: rwFWO3yx6dEuQPWR7hjbpInwCvKMdKhIldEQQScm5Cc=)
3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1a:d9:5e:14:f0:3b:2f:49:9e:eb:43:e0:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Nov 4 18:00:34 2025 GMT
Not After : Nov 5 18:00:34 2025 GMT
Subject: CN=f62c616b1d098fc615355e1e174ed7d96a71c317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:d4:97:65:dd:d0:c0:38:e3:4f:60:58:d0:
e6:58:de:45:76:77:a5:6e:a9:b5:ec:2a:1f:37:9d:
9a:d4:5b:6f:19:05:43:1d:7e:b3:26:b9:8b:12:e6:
40:03:5d:de:5d:bd:6d:b8:7e:9f:c4:46:af:cc:4a:
be:ef:28:4c:5e:1e:bf:49:95:c6:6b:82:0c:e1:ec:
49:af:a3:86:8d:9a:85:c5:38:1e:0f:ef:a8:37:3e:
ee:90:d8:02:08:3c:47:f4:00:9f:73:47:7c:db:f0:
44:4d:02:c9:3a:be:1c:6f:59:1d:54:7d:b7:ff:ae:
eb:1b:7c:7a:0b:21:22:1b:db:43:c5:17:9c:01:9f:
aa:99:88:74:b7:d6:63:4d:fb:0b:3a:58:a9:8a:ef:
ef:bc:b1:20:f9:b4:3e:9b:33:f3:f8:9e:3e:03:cc:
f3:e6:72:83:89:59:80:4d:6f:ec:01:d9:61:ae:54:
3c:47:4f:23:3f:89:34:d2:9f:5d:3b:9f:13:81:47:
62:ec:dd:f7:37:88:77:31:7c:16:97:3f:22:ae:8c:
58:92:c5:c4:1f:12:e2:64:b2:d7:c3:e0:b6:c8:90:
d8:f1:ac:37:23:19:f1:79:2c:ac:98:15:cb:cd:3a:
07:ee:24:cc:a5:92:8c:67:b9:d2:17:d6:5c:bf:69:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2C:61:6B:1D:09:8F:C6:15:35:5E:1E:17:4E:D7:D9:6A:71:C3:17
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a2:84:59:02:0b:37:75:1b:b8:7c:a4:e2:ea:b1:ba:c4:96:
b5:d8:d4:f7:77:b3:59:f9:14:2a:15:f2:ca:ac:b2:7e:2f:18:
ec:8b:cc:59:d3:55:97:82:a5:a8:d7:4e:68:56:27:6b:43:1d:
57:84:67:9c:87:a2:d3:75:da:1c:ca:04:2e:a3:23:c4:c9:e5:
8e:96:59:8b:f2:e5:8d:ba:db:53:7f:86:12:a5:79:ff:97:07:
8e:04:5b:b5:f2:64:b7:63:c6:0e:fa:aa:9b:5a:96:41:97:ea:
b6:8d:05:a6:8c:1f:0a:a5:de:97:f6:2e:1f:3b:b4:ba:6f:44:
44:ac:da:88:9f:4d:21:ba:fb:e8:e6:a9:08:68:a3:4d:4d:2e:
0c:de:05:e4:3b:bc:e9:4e:d1:e7:e5:ce:a2:17:3f:29:26:ac:
11:86:99:00:a4:62:98:1a:59:c8:9e:f6:c6:7c:5f:a8:74:15:
4c:f0:7d:56:b4:b6:97:a7:81:a5:fa:9f:49:76:1e:8d:d1:6d:
b1:05:00:db:b3:02:8f:c7:34:82:65:6f:cf:49:74:d3:bc:99:
2f:65:3e:f1:12:b2:f4:2e:6a:f3:75:2a:e0:57:27:47:90:9b:
82:d6:76:64:e9:22:48:77:11:a9:21:93:b0:36:5a:da:48:49:
ca:da:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:31 2025 by rpki-client