Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: 7ackpdq57mgAlWt95E8ObY32UyHGWWgJksEGnaQCKfo=
Subject key identifier: 51:D3:77:72:E7:50:FE:25:E5:FB:98:84:2E:3E:87:82:B8:BB:38:DA
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019A71B82BFEA20B9FCF3AB6A4688162DD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 1552
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: Kjq4x68r6rfK07ksXieBsCCYNfEtzV8mEYTlB/nlOvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2b:fe:a2:0b:9f:cf:3a:b6:a4:68:81:62:dd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=51d37772e750fe25e5fb98842e3e8782b8bb38da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:40:c4:da:81:9a:b8:79:09:6f:30:84:53:
92:0c:69:80:9f:b3:26:a8:16:d3:fa:7f:87:62:aa:
d0:46:6d:97:6d:1b:92:7d:c4:60:26:d6:21:a9:3f:
18:08:00:bf:81:46:8e:d2:61:35:ee:51:1b:5e:36:
16:f9:d3:2b:57:70:92:b4:4e:cc:9a:6e:e5:74:a3:
08:ff:5b:f0:8b:2b:d6:71:51:a0:ea:4b:ee:3c:78:
95:6d:3c:35:9a:12:c1:66:9d:ba:8f:96:6c:02:84:
3e:b1:b5:11:ce:c2:bf:f9:fd:3a:c3:4b:51:d5:df:
12:28:cd:19:5e:49:eb:33:4f:e9:ef:bf:dc:6a:2d:
b1:25:a6:3c:ae:60:b5:79:60:62:47:b4:19:d3:d0:
aa:bb:8a:0f:74:a4:2f:81:7c:07:5c:38:d9:d7:05:
ca:7f:3e:5b:c2:23:36:0a:d5:0a:20:39:37:f9:c9:
3a:a3:35:f9:4a:f3:9b:f4:d3:1e:5f:b1:4a:7e:27:
8f:98:6c:fc:ac:d0:b0:09:43:6d:69:ce:26:22:67:
11:02:97:cc:da:2b:59:77:fa:7c:5f:16:6b:ba:2b:
1e:70:9b:ba:a6:98:92:55:93:0a:6e:f5:81:ac:95:
56:6d:75:3b:fc:4d:e8:bb:bd:3c:3e:8a:fa:08:4c:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D3:77:72:E7:50:FE:25:E5:FB:98:84:2E:3E:87:82:B8:BB:38:DA
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2c:8b:50:a7:c5:e9:65:98:37:e1:8c:4d:dc:39:20:05:28:
06:38:ea:06:34:cf:e8:e2:0a:6c:f1:6b:c0:f3:49:39:c2:ff:
1d:36:11:18:76:bc:81:7f:84:eb:97:12:22:52:3b:35:6a:c0:
5e:e8:66:77:7a:bb:88:c4:d3:b8:65:9e:ef:6a:5b:b9:fe:0a:
3a:06:c6:fd:66:76:c9:90:f1:ea:dd:7a:50:de:40:f4:08:3d:
02:63:bc:ff:d5:79:ff:e7:5d:6c:ef:db:d6:61:eb:e2:d5:cb:
70:3a:d2:76:dc:62:2d:73:fa:80:da:43:40:a2:94:a8:0f:dd:
0f:82:ca:c5:e5:4a:24:a9:5c:7c:e9:9d:a6:19:3f:d5:31:b8:
01:28:67:de:f2:60:0f:fe:86:b4:e1:96:76:8e:93:3a:0d:04:
e2:cc:8c:cc:13:bd:e2:f8:9b:9d:d5:a1:be:ee:73:1c:1b:34:
52:70:10:3c:99:12:a4:0f:8e:0f:a1:53:99:01:56:4d:4b:0a:
71:7d:bd:07:e6:fd:ee:f0:da:f9:3b:0d:8c:08:4b:ba:e2:c9:
2f:24:e2:e3:cb:14:ac:54:74:2a:91:3c:59:7c:c7:c5:47:41:
2d:4c:a3:f5:ae:ba:8e:a1:a4:35:8e:b1:ee:7e:47:1b:09:75:
48:c3:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:57 2025 by rpki-client