Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: wXLsSBCvE8VERaCh0iCodQCOAiqRLkx55OYN55FyK0Y=
Subject key identifier: 49:78:38:F5:F9:F1:D3:16:27:90:F8:80:C8:EC:F5:C3:9B:BF:96:74
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019A72CA29189D068BC11C1C1246FA750E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 12A1
Signing time: Tue 11 Nov 2025 12:00:42 +0000
Manifest this update: Tue 11 Nov 2025 12:00:42 +0000
Manifest next update: Wed 12 Nov 2025 12:00:42 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: 6b1oiuwvltRpU9SC+jcAMmD7Qbw+2xqdw+dWDJZ2M8M=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:29:18:9d:06:8b:c1:1c:1c:12:46:fa:75:0e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Nov 11 12:00:42 2025 GMT
Not After : Nov 12 12:00:42 2025 GMT
Subject: CN=497838f5f9f1d3162790f880c8ecf5c39bbf9674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:54:a6:f5:1f:d6:9d:29:43:06:57:b8:fa:
46:0f:fc:0f:f8:1d:ef:22:3d:61:3b:32:04:af:48:
e2:3b:55:2b:71:c6:4a:1c:7d:95:e7:92:23:f4:55:
4e:b6:ba:e0:e1:fb:43:60:4a:e8:42:21:b0:53:2d:
76:78:58:ea:b5:e7:3b:c0:ff:1b:6c:4f:b6:c1:96:
3c:71:b6:41:07:f0:ff:0c:0f:d6:1a:da:75:8b:b6:
4a:6e:1d:f0:fc:a7:68:78:f9:6e:df:d4:ec:be:8d:
25:68:57:ad:22:bd:6c:d6:22:2f:36:b4:f9:5e:8d:
3a:3b:2c:f5:2e:96:9e:da:c1:99:e9:a9:1e:ea:e8:
68:97:be:ce:28:c0:12:96:29:97:ef:1c:d6:ce:80:
d1:6f:94:5f:20:d5:5e:da:d4:2b:85:a2:7d:46:90:
d1:c6:f9:a3:fe:3b:16:36:be:3c:49:e8:8f:af:ad:
74:03:b5:8e:0f:34:e5:e2:8b:7d:fe:09:8e:67:3e:
73:60:94:26:83:2a:69:a9:ed:1d:4e:fa:5b:33:cb:
71:6c:e0:54:a3:4a:35:3f:da:d4:2b:d5:e4:ae:42:
cb:10:bf:f3:e1:78:b7:9a:6c:5a:bc:eb:74:6f:3a:
83:fe:4e:15:4d:13:ec:97:ea:af:db:41:85:f7:a4:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:38:F5:F9:F1:D3:16:27:90:F8:80:C8:EC:F5:C3:9B:BF:96:74
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7f:0f:4f:e4:d2:3a:00:96:69:77:c8:29:ce:f6:a1:c0:bb:
fb:e5:df:93:27:63:b7:dc:08:4b:81:e5:48:80:46:ea:79:5e:
c1:4e:8c:69:fe:eb:69:8a:b2:87:e9:2a:ff:7d:09:1e:10:4c:
f9:ca:5f:33:e3:c7:f5:5f:71:56:bd:5c:37:d8:f0:60:c1:0b:
f4:6d:b1:31:6a:99:bb:78:d6:a5:a0:e1:3c:4e:2b:b8:c9:5d:
bd:5f:12:bc:db:05:b7:d0:01:27:d7:0d:29:62:9c:f9:73:32:
66:57:2a:5e:be:ae:50:5e:87:bf:b2:50:a8:68:e4:2f:c3:4c:
25:73:b5:ae:24:86:88:03:38:93:df:cf:d2:bc:ea:6e:32:a0:
57:91:78:7d:da:82:ee:1c:b5:41:a3:53:e6:de:0e:4b:6f:b7:
71:05:51:ec:a2:eb:bd:bd:3b:7f:9f:64:ba:bd:a8:61:aa:a4:
5c:a0:82:61:22:bb:8c:01:18:17:df:d4:40:fe:e6:fc:cb:a5:
34:51:05:77:c9:c7:67:f8:26:83:0c:f5:d2:97:c9:7f:b6:a1:
96:f6:33:6b:46:8e:b5:35:cd:11:7f:dc:8f:4b:c0:d2:b0:69:
59:ee:50:e2:17:6a:2d:35:ea:63:cd:9a:19:0d:95:b9:7d:53:
a8:40:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:39 2025 by rpki-client