Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: mD6w973gmbZ3kDE/ubqHB+KBAXG4jRRGP3T4BmDIb4U=
Subject key identifier: AB:45:42:D1:99:14:61:65:A0:FE:5C:C7:D6:B8:B7:DF:DA:52:9F:0E
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 019A72CA5C677684DDD2F76D05DAB8291F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 0580
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: mMP3R6Y_E5t6fees10l8AYe8F8o.roa (hash: GVxHnVRZ4k3nHcgJKtEX5VgjvPdVGaTcdXcLRvNp8IM=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: n9omTETMkAlllALK3W11hC1CN6b3NcxYiO4VHP3ap3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5c:67:76:84:dd:d2:f7:6d:05:da:b8:29:1f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=ab4542d199146165a0fe5cc7d6b8b7dfda529f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e0:b6:15:0a:cd:d4:a4:5a:31:76:ba:ee:24:
51:80:5f:bc:03:90:b4:95:8e:a3:e7:dc:93:49:12:
c1:eb:aa:b9:d1:37:56:69:d9:7d:af:be:b9:da:10:
4d:6d:61:f9:f2:18:ef:41:28:24:49:7e:13:db:9e:
eb:e9:02:69:5b:1d:58:45:81:85:d9:69:1f:23:1f:
28:13:96:3b:72:b3:90:58:a9:c0:6f:9f:c8:a9:7c:
bf:ef:fb:2e:70:93:20:40:10:59:3a:1c:4f:b8:27:
43:7e:9e:10:74:be:dc:53:a5:50:6b:5d:ad:28:e3:
d6:27:83:43:03:6f:24:18:9a:4a:e1:40:d5:a1:37:
6b:3f:64:13:0d:23:82:f8:c8:3b:34:40:8f:f2:65:
32:b3:34:26:6a:cc:eb:88:d3:85:dd:ec:7e:ab:0d:
8e:71:f6:58:c1:2d:b4:45:fa:21:e0:09:8c:ed:43:
25:34:41:d9:24:1b:f7:76:3d:54:52:08:11:1c:5d:
bf:62:90:a6:fb:f5:1f:11:97:d6:e8:6e:32:5d:59:
aa:55:78:dd:2d:11:a9:0e:7d:63:ae:ba:c2:b6:34:
9f:34:99:a2:6e:af:f4:3e:56:fb:53:61:e6:81:ca:
54:23:a5:67:3d:33:91:3c:34:e3:ff:10:3c:46:26:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:42:D1:99:14:61:65:A0:FE:5C:C7:D6:B8:B7:DF:DA:52:9F:0E
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ac:16:3b:5a:63:0e:0a:ca:2e:41:ed:da:b5:b5:d1:af:24:
48:70:2a:40:3a:77:e5:9e:35:31:99:71:0b:93:81:44:52:b0:
7c:70:d4:9b:7d:c2:bf:59:9c:0c:0e:ad:08:48:90:d1:85:4d:
a4:8f:07:d9:c6:48:91:44:bc:1c:1c:8a:f5:3f:d7:04:bd:c6:
bd:86:13:10:09:6e:74:9c:a6:ea:5a:65:0a:75:23:d6:f1:80:
44:de:de:57:34:cd:02:7c:a3:b5:c2:d9:6d:3f:26:c5:2b:ff:
7b:d8:d5:bb:30:45:32:4a:22:97:b3:ba:83:8b:cc:f4:2e:3a:
14:5d:98:0a:39:4b:f9:9d:7a:e3:bd:7b:00:75:67:bb:55:5d:
3f:3c:b8:93:ae:45:fe:10:ce:ce:b1:0e:7f:c6:72:b5:72:1c:
6b:5f:a7:37:cc:c0:f3:fc:cd:af:dc:ec:dc:37:15:b7:49:54:
3e:19:dc:ff:70:68:c4:7f:0a:11:e9:fa:38:39:36:2a:8f:3f:
e3:48:eb:94:a8:8b:96:da:40:b5:e7:b8:20:4e:35:72:c2:41:
a5:30:58:33:36:99:a5:18:73:04:54:c9:79:a7:84:39:f9:9f:
25:b7:de:2a:6d:96:75:0f:38:b7:db:10:63:d7:55:9c:38:f8:
41:06:75:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:16 2025 by rpki-client