Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: wfJ0GPOfYCEOjrkqoUVcTujhFyE/m98vh6xfWkYMzuI=
Subject key identifier: A5:1A:01:FA:2A:B3:C1:C1:62:23:44:6A:E7:FC:76:C4:59:D4:D3:B2
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 019A23D37BBAE757C3C7F3F18E89D3A6FD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 04:00:53 +0000
Manifest this update: Mon 27 Oct 2025 04:00:53 +0000
Manifest next update: Tue 28 Oct 2025 04:00:53 +0000
Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: oS7uZitP/DFUUlRmpwThfBE4AOsaewxupkQELt3NQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:7b:ba:e7:57:c3:c7:f3:f1:8e:89:d3:a6:fd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Oct 27 04:00:53 2025 GMT
Not After : Oct 28 04:00:53 2025 GMT
Subject: CN=a51a01fa2ab3c1c16223446ae7fc76c459d4d3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:a2:3d:c0:6e:33:13:a4:9e:6c:b1:26:28:
12:2e:0c:e1:1e:5a:70:2f:55:28:79:c6:8b:bb:cd:
ae:7b:ff:ba:30:42:dd:22:44:36:bd:bd:63:11:ac:
96:ba:03:39:cb:4a:fd:8c:2b:43:b2:97:3e:b8:4e:
7d:20:d7:cb:b4:3f:35:4a:b5:e5:fa:5e:53:66:67:
47:04:f4:34:85:f4:7f:c5:0b:a3:fa:6a:c7:34:9a:
a2:fa:d3:be:e7:ba:9f:66:d4:cd:cd:b5:7c:f3:9e:
40:9a:ec:9b:3e:c4:4c:70:0e:95:b3:c0:1f:d4:0d:
60:39:82:5a:12:7b:dc:b2:8f:19:c5:f2:c4:d5:9f:
58:75:98:f3:cb:dd:28:1f:2b:b4:2c:ae:c8:cf:6a:
db:f9:2a:5b:7e:c3:33:29:95:1a:fc:d2:21:79:bf:
2b:a6:e3:8d:d9:6a:5d:cb:3e:c3:78:7b:f5:84:e8:
e5:2b:8b:bf:03:52:7b:1f:c9:c5:95:de:81:36:9f:
4c:9f:75:58:ef:29:c1:7f:19:c9:7b:b1:57:65:08:
af:ea:51:37:b4:59:ca:ab:09:ae:91:7f:d7:da:0d:
fa:75:62:71:56:e0:be:2c:b0:55:bc:7c:03:f2:35:
32:51:89:e9:90:64:16:f4:96:e5:45:3f:15:18:05:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1A:01:FA:2A:B3:C1:C1:62:23:44:6A:E7:FC:76:C4:59:D4:D3:B2
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:10:82:c9:ca:87:2b:aa:eb:48:f5:9b:58:e2:f1:9a:51:90:
64:43:46:5f:e2:08:b0:1e:66:18:2c:ab:a7:66:8f:66:f4:1c:
e6:a3:bb:a2:3d:14:2e:c5:77:1c:d4:ea:61:2d:06:20:5e:6d:
ad:59:c4:56:8a:f5:ee:9a:86:ea:b4:88:60:15:6e:31:92:78:
01:bb:9a:db:4f:e0:f0:04:e1:fb:02:58:01:42:8d:55:2e:f9:
5d:1e:b6:b2:c5:1c:cc:6a:d9:a6:5a:0d:00:68:77:08:46:88:
35:cc:59:05:ef:9c:76:33:af:65:ac:66:a5:cb:2e:a7:de:08:
e6:4c:2d:42:67:a8:65:0a:b1:9f:70:24:59:3a:02:16:e2:39:
cd:fd:18:8b:1f:1c:1c:a0:a8:ee:96:22:ba:64:e9:42:25:d4:
fa:b4:20:f1:01:1f:2b:86:50:26:5e:61:42:b9:fd:3f:99:53:
aa:62:78:14:71:34:a1:86:26:94:4e:48:c9:74:18:12:33:91:
43:6f:e5:fc:b3:43:78:e3:47:17:0d:1b:ba:52:a4:32:5e:3a:
76:cf:2a:51:4f:13:9c:5e:32:9e:59:98:44:fa:8a:a5:6d:86:
af:56:0f:57:68:90:20:4f:8e:aa:eb:d5:b5:8c:fa:5f:c8:ed:
69:9c:d3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:25 2025 by rpki-client