Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier: 0nqAYM4hoi6oZCuLDZu8WwiCV+Djwqn4p2wZI3wgtSE=
Subject key identifier: 05:B6:8A:ED:79:58:80:02:3C:AC:00:31:35:D5:F3:65:92:17:17:DC
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 019A4EF598433D8E53FE16D4470436EF2326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: XKPzczZZQmfmBPVWONdOWZH4RTG07mJjyHSi6++Kteg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:98:43:3d:8e:53:fe:16:d4:47:04:36:ef:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=05b68aed795880023cac003135d5f365921717dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:c3:8b:08:00:d5:1a:46:4b:ef:41:b4:7f:
6e:a9:ca:40:9e:34:9a:5a:17:f4:4e:04:bf:a5:cb:
45:28:8d:a1:28:61:f6:f2:6c:28:9a:ef:c0:91:b8:
61:87:af:80:20:ef:8e:61:88:f4:c1:e4:c3:e1:4a:
04:c6:ca:6d:95:d4:36:5d:f3:f2:d0:63:6c:ec:6d:
51:35:df:f7:93:18:e6:a4:32:5a:02:72:3a:ef:7e:
ef:81:0d:11:0e:bd:89:be:cd:f6:c2:bd:6f:6f:83:
c6:65:af:9b:03:72:17:bb:22:e8:2e:a4:2f:5b:3f:
9f:f1:2e:88:73:54:56:ce:03:c1:c8:96:e8:1d:61:
a1:e5:c9:e4:06:41:58:f3:9c:78:c6:0b:17:9f:25:
11:d3:b0:41:b6:62:b4:84:d3:51:de:a4:0e:09:6a:
94:15:9b:d6:55:2a:56:69:44:cb:df:f4:8f:c1:74:
73:5f:8d:8c:db:f3:ed:f8:a9:dd:b1:1f:27:67:76:
eb:45:11:de:d7:d9:f8:26:25:59:80:1e:ce:39:52:
b8:48:86:a8:93:8b:4c:91:14:61:3e:4a:45:8a:c9:
2e:65:41:72:3a:36:63:c5:f9:02:cc:05:87:0e:7a:
64:f4:35:08:1e:f2:0a:81:ea:25:d3:97:e7:c4:0e:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B6:8A:ED:79:58:80:02:3C:AC:00:31:35:D5:F3:65:92:17:17:DC
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:cc:75:58:8e:8f:dc:55:3b:e1:9e:42:f0:12:01:ff:73:67:
21:30:fe:cf:ac:76:f5:59:65:68:40:fb:fd:c7:73:0b:27:b9:
94:b3:a3:46:ba:b0:85:dc:de:86:82:00:85:16:70:0d:8a:75:
ef:f5:3c:3b:a5:b7:c3:a8:97:c5:bb:8c:ab:c2:23:2f:b9:c2:
8a:f6:3e:ad:50:fa:b3:6b:4a:40:84:4e:9c:83:64:0e:ae:f5:
60:f6:4f:b1:56:c3:0c:1e:8e:88:a5:16:e6:24:e4:61:d9:04:
bb:8d:00:f3:47:59:a8:26:22:2b:3d:e8:7c:c4:c8:5b:4e:75:
35:36:07:6c:59:a9:45:cc:cc:84:ce:8e:33:f9:78:4b:c4:a6:
f2:c5:05:c4:f7:e6:33:81:ee:d5:de:0d:f2:50:c1:18:f3:eb:
7d:e9:b6:1a:c7:66:8e:9c:35:c6:bb:e7:bd:d8:35:cb:9a:d6:
01:d5:5f:63:7f:c3:0d:0c:dd:ce:0b:30:76:2a:17:0b:9d:38:
31:e1:63:aa:30:50:1c:58:97:c3:e0:bc:be:72:d0:03:55:80:
de:b2:8d:37:e8:ee:a4:e2:dd:3e:a6:b7:56:e6:aa:08:81:b3:
3e:fb:ce:4b:7d:82:ce:da:79:2d:3c:34:f4:41:a0:c2:4a:a5:
f3:8a:51:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ZhDPY5T/hbURwQ27yMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDkyMDc5OTRiYTljN2Q5MWVhN2U0NzlmZWZkMWI4MDk5
ZjYyY2UwHhcNMjUxMTA0MTMwMTQ5WhcNMjUxMTA1MTMwMTQ5WjAzMTEwLwYDVQQD
EygwNWI2OGFlZDc5NTg4MDAyM2NhYzAwMzEzNWQ1ZjM2NTkyMTcxN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTXDiwgA1RpGS+9BtH9uqcpAnjSa
Whf0TgS/pctFKI2hKGH28mwomu/Akbhhh6+AIO+OYYj0weTD4UoExsptldQ2XfPy
0GNs7G1RNd/3kxjmpDJaAnI6737vgQ0RDr2Jvs32wr1vb4PGZa+bA3IXuyLoLqQv
Wz+f8S6Ic1RWzgPByJboHWGh5cnkBkFY85x4xgsXnyUR07BBtmK0hNNR3qQOCWqU
FZvWVSpWaUTL3/SPwXRzX42M2/Pt+KndsR8nZ3brRRHe19n4JiVZgB7OOVK4SIao
k4tMkRRhPkpFiskuZUFyOjZjxfkCzAWHDnpk9DUIHvIKgeol05fnxA4yRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAW2iu15WIACPKwAMTXV82WSFxfcMB8GA1UdIwQY
MBaAFK3ZIHmUupx9kep+R5/v0bgJn2LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAt
ZTUyMTI1NzRmOWVjLzEvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAtZTUyMTI1NzRmOWVj
LzEvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMx1WI6P
3FU74Z5C8BIB/3NnITD+z6x29VllaED7/cdzCye5lLOjRrqwhdzehoIAhRZwDYp1
7/U8O6W3w6iXxbuMq8IjL7nCivY+rVD6s2tKQIROnINkDq71YPZPsVbDDB6OiKUW
5iTkYdkEu40A80dZqCYiKz3ofMTIW051NTYHbFmpRczMhM6OM/l4S8Sm8sUFxPfm
M4Hu1d4N8lDBGPPrfem2Gsdmjpw1xrvnvdg1y5rWAdVfY3/DDQzdzgswdioXC504
MeFjqjBQHFiXw+C8vnLQA1WA3rKNN+jupOLdPqa3VuaqCIGzPvvOS32Cztp5LTw0
9EGgwkql84pRcg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:07 2025 by rpki-client