Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
File: V76Px5yTUE_CH_cPukaaTLvi8Ck.mft (raw, json)
Hash identifier: j+tTGACMmXuLjPuuWDoBNkW9Pb18wOgjqpcUtamt7SU=
Subject key identifier: 44:84:95:7D:69:9A:45:5B:66:3B:74:06:21:F8:BF:8C:5A:97:76:47
Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Certificate issuer: /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Certificate serial: 019A7225D8A103C96F0DA91D7DD4AB737919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
Manifest number: 1668
Signing time: Tue 11 Nov 2025 09:01:13 +0000
Manifest this update: Tue 11 Nov 2025 09:01:13 +0000
Manifest next update: Wed 12 Nov 2025 09:01:13 +0000
Files and hashes: 1: GSq3J2YJnNyhzth3hnZMQLtfyVg.roa (hash: YjJTMfChs1ee9zRQg+5qYR9IzIwhQNNIZQcGrlL7UTQ=)
2: V76Px5yTUE_CH_cPukaaTLvi8Ck.crl (hash: nkeYIigxCTPyyAglFL0rqKj4GRZsI34QccwDFwCipTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d8:a1:03:c9:6f:0d:a9:1d:7d:d4:ab:73:79:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Validity
Not Before: Nov 11 09:01:13 2025 GMT
Not After : Nov 12 09:01:13 2025 GMT
Subject: CN=4484957d699a455b663b740621f8bf8c5a977647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:eb:5f:e7:c8:d6:92:ea:20:5e:05:f0:a4:
1c:d0:1a:62:99:f2:43:8d:8b:8a:0f:2a:e2:9a:73:
06:ce:8d:76:c7:37:f1:5e:80:e6:3c:62:93:f2:bf:
1d:f4:76:65:c9:90:76:31:f5:17:58:91:1a:97:d6:
a1:dd:49:d4:49:7b:c3:6b:73:69:18:60:93:88:4b:
df:83:04:a0:6a:c4:16:4a:48:31:75:01:4f:03:6c:
83:0e:3a:9d:29:bd:a8:61:8a:ee:73:8b:26:86:7d:
37:15:2f:67:b7:9a:93:c0:f9:78:ad:40:e2:89:8d:
95:44:39:7c:b1:db:22:03:33:65:45:3b:bd:c1:cd:
80:13:4e:ee:66:97:a2:eb:a0:d2:10:9b:eb:68:6d:
64:b8:91:ce:25:d0:8b:c6:60:26:75:ae:2e:01:f6:
75:38:e1:c8:1e:42:af:70:2b:be:36:e6:ba:ce:e9:
d5:dd:09:b0:12:9c:df:82:7e:8a:cb:b2:7f:8a:bf:
0f:2e:c5:ba:0d:7d:a7:39:35:55:d7:92:5a:3e:9e:
e3:33:bd:1c:1a:dc:46:d7:e0:9f:70:e6:12:da:e4:
ff:da:2d:96:ed:1c:06:88:6c:07:98:b1:61:e7:50:
b2:07:64:f3:f1:ac:a2:9e:48:1a:3d:0a:32:c0:c9:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:84:95:7D:69:9A:45:5B:66:3B:74:06:21:F8:BF:8C:5A:97:76:47
X509v3 Authority Key Identifier:
keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:74:f8:af:ef:a8:a5:85:2d:0a:5b:63:fc:e9:18:7a:d1:57:
9d:c6:98:cb:5e:05:b5:35:5c:c4:28:d1:fe:a8:a8:e1:0b:7f:
38:e1:9e:5a:e6:4f:fa:1e:ed:c7:19:b1:bb:16:06:99:ac:75:
04:6c:4a:dc:e6:da:74:de:e2:ab:86:1f:cd:0e:9e:ec:94:29:
08:cd:5c:17:e5:96:88:46:d9:88:87:c7:7b:e9:0e:90:31:53:
67:ec:01:af:8a:30:0f:80:35:fb:58:17:d2:5d:33:74:2c:df:
7f:e2:ac:2a:e9:9b:22:94:65:a0:89:fe:9b:fe:82:7b:79:75:
09:9e:fd:74:ef:1e:c7:3a:35:95:c4:ad:20:a0:07:74:fa:da:
cf:2c:f2:ea:32:41:70:64:cf:63:6a:b3:c9:f2:b5:3c:48:b2:
21:c4:e0:48:e3:dc:e3:47:ad:73:0b:d3:15:e8:f7:40:35:ab:
71:1c:9c:5a:90:7e:85:6a:35:31:c7:95:ca:ba:66:ee:3d:46:
72:f0:98:e5:3b:df:24:ee:31:01:f1:0a:5c:a4:7b:2a:ef:3d:
90:c3:50:57:6e:3f:6c:ab:68:c4:14:94:54:f7:ae:dc:da:31:
c1:36:da:aa:59:df:9a:fb:80:10:21:41:90:5d:ca:a2:2d:ba:
2b:b1:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:10 2025 by rpki-client