Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: zQgh1Dm4oRPsKJNMJYSjNbMuxnspc84BsJ8K6xVaieE=
Subject key identifier: BC:E9:46:AA:FA:DD:2E:01:74:F7:1F:5F:27:D3:E3:FD:28:65:BD:3F
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 019A725CAF7C827324900512E861E79E29A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0D4B
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: XgrYQrl22uzY/1Y0usPXUO8CLAF5T6mFc9cWn7CPO3A=)
2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:af:7c:82:73:24:90:05:12:e8:61:e7:9e:29:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=bce946aafadd2e0174f71f5f27d3e3fd2865bd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:66:1e:38:c9:6f:74:84:0d:5d:76:d2:e1:
8a:05:4a:84:0f:4c:58:bc:c9:e7:b2:8d:b7:fb:95:
5f:d1:81:4b:4b:6b:52:be:8f:e8:84:1b:8c:f9:f5:
8d:b0:45:f3:2c:84:42:13:b8:3d:c4:ef:52:68:59:
e2:20:b7:18:26:c2:d4:2c:ed:90:da:76:55:60:d5:
ae:d7:c7:a0:0a:9f:86:1e:b6:b6:50:1d:9a:61:1e:
67:09:12:7b:3c:20:df:2e:1a:ed:8a:6a:9c:a1:f8:
37:35:f8:70:bd:76:06:30:b2:e7:3d:46:85:13:95:
08:6a:fc:77:9b:9d:9d:7f:97:53:c1:d1:f6:fa:41:
f1:1e:4d:d7:8d:f7:37:ab:3f:86:dd:82:20:22:59:
df:32:13:11:94:94:67:72:43:ca:ce:93:36:a0:b8:
df:87:36:39:03:71:43:3d:77:ec:48:9f:26:d1:74:
b3:0c:84:fb:fc:ee:a8:22:86:da:b5:13:77:1d:27:
34:cb:e2:c7:6b:dd:61:df:b8:14:fa:5b:9d:1b:86:
d8:f5:b1:12:ed:70:3d:7f:aa:4c:a3:2f:32:a3:5e:
b4:e8:39:33:d5:40:48:1e:b0:12:b3:0a:93:e7:04:
4c:43:af:ac:ef:20:69:ef:9b:4a:e4:df:74:a9:c5:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:46:AA:FA:DD:2E:01:74:F7:1F:5F:27:D3:E3:FD:28:65:BD:3F
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ac:ba:48:1f:78:4d:3f:26:04:35:2f:87:e1:56:3a:13:0e:
8a:6f:49:aa:ac:52:bd:fa:b1:a7:39:de:30:6d:bc:1b:c6:8e:
8f:19:9d:c1:f9:95:64:db:5b:e6:de:42:79:86:67:8c:34:53:
ac:40:59:f1:42:ff:51:f2:2d:85:f3:34:0b:25:ec:aa:6f:d8:
91:92:23:ef:90:46:41:5e:9e:6a:3d:9b:6e:f6:cf:38:8d:a0:
5c:91:1e:91:78:b1:b4:dd:4f:e1:f8:10:0e:fe:02:9a:ed:32:
36:e8:ba:6b:93:d4:ed:6d:57:50:c0:d9:e6:43:42:ce:df:23:
55:71:6c:f6:71:65:a1:3d:4a:98:5d:ce:fb:39:d2:23:e7:8a:
05:66:ad:f1:6c:d4:52:4c:62:56:b8:9e:38:1e:56:48:f9:57:
46:db:1d:c2:d7:d1:ab:c3:d9:29:84:31:8e:a0:5c:8d:82:23:
97:37:c7:97:41:29:b9:43:b0:fc:b1:d8:d8:ad:82:8a:89:6b:
58:2c:d9:94:6a:19:fc:1c:52:dd:b9:aa:24:7d:d0:47:29:8f:
95:eb:fb:b2:86:86:8b:ea:e7:54:5e:3e:b7:b5:c9:42:14:31:
4b:3b:fc:83:c7:a7:38:1c:c9:85:60:d0:a3:fc:53:b5:06:0c:
28:12:05:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:28 2025 by rpki-client