Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: Mee58F2TOySwSh0ri+EPUubHehUZmjJ+9uQPVI1708A=
Subject key identifier: 95:B3:80:6C:0C:EA:59:AA:01:FF:DC:17:AF:AA:A0:F2:FF:D4:DA:AE
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 019A714A25C9316D2AA0370B13F8F6303D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 1733
Signing time: Tue 11 Nov 2025 05:01:16 +0000
Manifest this update: Tue 11 Nov 2025 05:01:16 +0000
Manifest next update: Wed 12 Nov 2025 05:01:16 +0000
Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: CMAuBc8MRHgW6AeZVIkVKDHNj4/8zWdDO2r/Kv9CxGU=)
2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=)
3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:25:c9:31:6d:2a:a0:37:0b:13:f8:f6:30:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Nov 11 05:01:16 2025 GMT
Not After : Nov 12 05:01:16 2025 GMT
Subject: CN=95b3806c0cea59aa01ffdc17afaaa0f2ffd4daae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:ab:e0:fd:e8:70:c1:9b:00:1d:da:bf:81:
ab:bb:5f:fe:38:74:7e:8a:1c:b4:75:8c:64:35:87:
aa:c4:de:39:10:4d:05:da:56:1c:57:e6:bc:80:5d:
95:46:ca:68:89:d9:52:8e:80:43:d0:f1:9b:e2:8a:
49:27:44:e6:da:2b:c2:7c:8e:64:d2:6d:6d:a7:9f:
ad:30:db:a7:fb:67:91:af:22:06:60:ae:e8:74:9b:
b2:db:60:cd:16:ea:a3:bc:9d:c4:c3:03:0f:b5:83:
df:fa:28:07:b2:ff:ec:59:fe:81:21:54:72:88:f3:
cc:e6:dd:d1:f6:67:09:31:93:96:2a:6a:6f:21:54:
ff:70:22:e2:43:35:f3:4f:8c:13:d1:87:aa:01:82:
a2:97:a5:bb:30:dc:20:6f:1f:0d:8f:88:8c:12:c3:
e9:27:ed:de:c7:9e:e6:e8:dd:db:04:6d:ee:ba:90:
5c:3a:02:88:4b:8e:8d:4d:85:ca:9a:91:a6:e1:24:
03:3c:b9:87:5d:f1:d3:2c:46:bb:85:4c:17:52:aa:
da:d3:0f:07:eb:ed:a1:c7:95:6c:bc:80:80:97:32:
43:00:41:1f:a8:59:bb:9e:17:2e:d6:2c:77:7a:26:
bd:be:4e:07:13:42:43:1b:05:03:73:a9:f3:19:e2:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B3:80:6C:0C:EA:59:AA:01:FF:DC:17:AF:AA:A0:F2:FF:D4:DA:AE
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:f1:9e:b3:3a:52:e7:92:1a:8b:7f:78:eb:ba:92:64:75:
56:11:2b:2c:a5:5d:72:36:25:77:08:cf:5b:dc:d6:cf:78:0f:
c7:34:4d:cd:a7:a2:3e:d1:17:91:60:45:c3:59:73:28:f3:42:
0e:64:63:b0:1a:bd:10:7d:74:21:b9:bd:e7:4b:43:db:38:9f:
cc:d9:a1:62:72:59:4c:e9:65:29:24:ce:32:18:c3:77:a4:a2:
c5:44:7f:66:e1:a3:6d:c5:29:22:d9:e5:51:61:10:6d:f6:38:
79:a2:b6:da:2f:6a:85:89:e1:6e:21:5b:18:da:77:96:12:3d:
a1:ae:7e:7f:d9:b8:90:05:9b:a6:46:7a:b8:86:d5:2d:ba:e3:
c3:de:78:0c:59:4a:d3:90:0c:46:d0:ca:34:73:97:bf:f0:8d:
69:c9:96:e7:02:ce:bc:9d:66:76:77:4e:15:08:ff:56:a1:c8:
0a:2b:ba:9a:1f:03:c7:c3:66:85:3c:9e:ef:45:c8:e5:2e:c5:
ca:47:9d:2c:69:02:17:ea:f0:0b:33:e3:57:66:f8:e4:f9:93:
14:68:b1:86:80:53:a3:d1:1e:66:12:16:f1:e1:16:67:22:f8:
f3:6e:3d:ab:78:d5:1d:8d:4c:f3:39:2d:e0:e3:63:0f:e0:a3:
e9:83:47:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSiXJMW0qoDcLE/j2MD0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDJiMzYyMDY0MzliYmNlMTViMzYzZjA5ZWVmZjFkNzM4
Y2VjYzcwHhcNMjUxMTExMDUwMTE2WhcNMjUxMTEyMDUwMTE2WjAzMTEwLwYDVQQD
Eyg5NWIzODA2YzBjZWE1OWFhMDFmZmRjMTdhZmFhYTBmMmZmZDRkYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCur4P3ocMGbAB3av4Gru1/+OHR+
ihy0dYxkNYeqxN45EE0F2lYcV+a8gF2VRspoidlSjoBD0PGb4opJJ0Tm2ivCfI5k
0m1tp5+tMNun+2eRryIGYK7odJuy22DNFuqjvJ3EwwMPtYPf+igHsv/sWf6BIVRy
iPPM5t3R9mcJMZOWKmpvIVT/cCLiQzXzT4wT0YeqAYKil6W7MNwgbx8Nj4iMEsPp
J+3ex57m6N3bBG3uupBcOgKIS46NTYXKmpGm4SQDPLmHXfHTLEa7hUwXUqra0w8H
6+2hx5VsvICAlzJDAEEfqFm7nhcu1ix3eia9vk4HE0JDGwUDc6nzGeLOMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWzgGwM6lmqAf/cF6+qoPL/1NquMB8GA1UdIwQY
MBaAFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQt
YjAxZTAyOTdiMDcwLzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQtYjAxZTAyOTdiMDcw
LzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5nxnrM6
UueSGot/eOu6kmR1VhErLKVdcjYldwjPW9zWz3gPxzRNzaeiPtEXkWBFw1lzKPNC
DmRjsBq9EH10Ibm950tD2zifzNmhYnJZTOllKSTOMhjDd6SixUR/ZuGjbcUpItnl
UWEQbfY4eaK22i9qhYnhbiFbGNp3lhI9oa5+f9m4kAWbpkZ6uIbVLbrjw954DFlK
05AMRtDKNHOXv/CNacmW5wLOvJ1mdndOFQj/VqHICiu6mh8Dx8NmhTye70XI5S7F
ykedLGkCF+rwCzPjV2b45PmTFGixhoBTo9EeZhIW8eEWZyL48249q3jVHY1M8zkt
4ONjD+Cj6YNHrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:21 2025 by rpki-client