Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: +onNYyQ4pDgaUF2HsoUpDlCGBrr8yW7mujGzne+MFHs=
Subject key identifier: 5D:83:2F:06:46:C2:81:D3:D3:79:A0:FC:0D:81:8D:30:0E:6F:1F:48
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019939EFFEAF807C4E570BD9AD7EED73ACF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 11FF
Signing time: Thu 11 Sep 2025 18:00:53 +0000
Manifest this update: Thu 11 Sep 2025 18:00:53 +0000
Manifest next update: Fri 12 Sep 2025 18:00:53 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: iwDXED+ddsfn4jpgVLpmaIYyXSD5hm/fAESuDpst4mE=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:ef:fe:af:80:7c:4e:57:0b:d9:ad:7e:ed:73:ac:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Sep 11 18:00:53 2025 GMT
Not After : Sep 12 18:00:53 2025 GMT
Subject: CN=5d832f0646c281d3d379a0fc0d818d300e6f1f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:62:6e:b7:cb:2e:f7:90:c2:5d:dd:1b:c6:
cc:7b:b0:40:f4:bc:86:16:95:ee:54:28:d9:14:9c:
83:ad:91:6c:28:4e:67:93:e1:57:e0:01:5a:15:e5:
b8:1c:f0:e9:84:6e:59:4f:fa:47:94:66:8d:05:03:
f0:9b:be:2c:43:95:f8:90:76:df:ea:69:7a:d0:6c:
94:df:9f:17:96:c6:30:b1:72:18:65:29:1f:c3:4b:
3b:5f:ff:27:db:eb:55:74:1c:98:17:bb:07:7f:aa:
7d:cc:b8:4f:4d:6e:69:72:ea:4c:4d:3a:c4:dc:b1:
38:4d:2f:af:f8:95:f7:13:7a:98:cc:ac:7e:4c:b6:
de:6e:45:fd:51:94:f0:e3:f1:ff:a2:3f:99:bd:e0:
5b:28:52:a8:80:7c:0b:a7:6b:a7:f6:73:46:2f:e1:
7f:3b:5a:3f:7d:62:73:1e:d1:52:09:3f:ae:50:5c:
5b:b0:7d:ba:1c:21:36:48:5a:9f:7d:2f:98:9e:4b:
62:c2:9e:1b:81:c2:80:00:de:31:5f:e9:29:b3:f5:
0a:cc:0e:72:53:ef:f5:e1:1c:3b:bf:f3:fa:98:93:
26:a6:bf:41:5d:88:f6:87:f8:47:1d:b8:cb:76:cd:
1d:0d:e9:4e:0e:94:63:93:cc:e4:55:12:4f:9f:09:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:83:2F:06:46:C2:81:D3:D3:79:A0:FC:0D:81:8D:30:0E:6F:1F:48
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:42:a3:d1:e8:44:ff:cc:b4:54:5c:8a:44:29:0a:a2:01:bf:
1a:34:f7:1c:52:11:94:6f:f8:87:f4:02:19:77:e9:79:9c:ac:
f6:a4:e0:d3:1f:66:ac:94:4f:df:b0:39:a7:50:21:68:11:61:
32:b8:50:e3:bd:60:cf:d5:64:3c:68:ba:3c:1e:6b:a4:e6:aa:
d8:d1:82:92:e5:f0:cf:5f:5a:f2:bc:3a:26:b7:a3:91:f3:1f:
d0:8e:8c:b9:b2:49:b4:e3:4b:32:75:f2:dc:6a:2c:dd:ce:ea:
25:8c:66:96:30:be:cb:ac:c9:09:df:97:3a:ca:cf:55:35:e8:
a2:39:36:f9:04:4a:0f:d0:d6:ae:83:72:04:fd:c6:54:81:d2:
1e:c5:69:13:2c:ef:7f:ac:4c:a1:b5:2b:ed:0f:e1:bc:4e:3f:
d9:bb:e0:5c:c5:2f:1b:07:53:83:15:35:f0:83:d3:1b:0a:8d:
ae:67:45:e0:c7:2c:83:78:76:a9:35:ad:3f:8b:ea:a6:67:b9:
37:9d:f7:8e:75:94:22:63:f9:9e:03:6a:ba:9a:de:c1:89:f4:
35:ec:8d:df:cb:e2:f5:fb:10:98:9b:10:e2:18:2e:74:32:0f:
62:02:f2:d9:9c:04:72:77:6c:65:0c:94:1c:88:56:4e:fa:0e:
51:d1:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 23:10:44 2025 by rpki-client