Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: DZpFFxF/yLQDlZbYDv0SqiHJzSP6t3skai4hZxZORMk=
Subject key identifier: 99:52:60:E1:45:EA:B7:4A:7B:FF:65:00:D7:5A:88:95:3A:5C:CC:10
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 019A60567658A92AEEC21AE85546A0162607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 1717
Signing time: Fri 07 Nov 2025 22:01:10 +0000
Manifest this update: Fri 07 Nov 2025 22:01:10 +0000
Manifest next update: Sat 08 Nov 2025 22:01:10 +0000
Files and hashes: 1: HoDvxsQA4iXxpxVk1_co_JtvvPE.roa (hash: cWutlJOtBJ4KMx+ET4BMORGB6H9YK5+9Bn/1o272ZUM=)
2: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: zAzB6S8rs2QE55WIlQZ8VdpWicN6l/sUG1YfmzPZB1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:60:56:76:58:a9:2a:ee:c2:1a:e8:55:46:a0:16:26:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Nov 7 22:01:10 2025 GMT
Not After : Nov 8 22:01:10 2025 GMT
Subject: CN=995260e145eab74a7bff6500d75a88953a5ccc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:21:65:92:fc:70:d0:b2:07:00:36:d7:1d:
93:3e:29:05:98:ce:78:a6:fb:91:74:70:8c:a2:7e:
c6:a9:68:88:75:7f:99:fb:1c:76:3a:55:65:51:6b:
3b:76:64:82:72:2d:4f:11:57:45:30:01:71:1e:39:
0b:b4:05:6f:07:07:df:12:70:79:6c:85:17:1e:42:
20:df:c3:3e:2d:f7:cf:46:66:fe:e9:f6:bd:1c:e7:
08:1f:61:39:86:db:29:82:01:7f:f8:fb:d8:3c:84:
fa:91:17:7b:73:a1:c5:79:6f:a8:b5:64:da:15:d0:
4d:e0:4b:ce:5f:38:e5:fb:d3:b3:3d:61:5b:e4:85:
29:39:52:4e:d7:13:a1:ab:3e:62:38:1b:6e:b4:84:
cc:ba:f8:00:6f:3c:24:25:90:29:bc:07:0e:61:38:
c9:c2:84:c2:cd:42:07:25:9a:3e:6e:9f:fe:c6:9d:
83:fe:3e:70:c8:10:d4:56:09:2c:fa:9a:87:77:f8:
c3:cb:25:8d:0d:0f:90:23:59:0c:4a:09:8c:f1:dd:
03:43:b2:e5:e6:22:83:03:7b:1e:9b:1d:f9:87:97:
9c:3c:3a:d6:fa:3a:3a:14:59:f3:66:b7:2b:c7:28:
3d:9f:4a:bc:14:91:57:3d:b8:a3:e1:0c:21:b8:0b:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:52:60:E1:45:EA:B7:4A:7B:FF:65:00:D7:5A:88:95:3A:5C:CC:10
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:17:83:28:51:b2:09:11:dd:9d:ee:74:a3:b3:ca:77:38:d0:
34:51:35:5a:78:b7:11:f7:87:29:e2:c1:91:0c:bf:c5:74:ee:
1d:c1:cc:c3:ac:0b:46:5a:d9:0f:4a:cd:70:43:40:89:da:9a:
52:b7:d9:57:72:72:9b:37:98:c6:4b:f2:94:b4:e1:74:53:06:
70:0d:81:60:d5:2e:a1:da:4d:c2:cf:5a:c6:4a:2d:85:31:2b:
99:29:20:a1:09:2b:7d:07:ce:6b:02:64:dc:3f:cb:47:76:72:
89:fd:6c:dc:d9:f7:0b:13:f2:0c:72:01:4d:33:60:25:c3:60:
df:6f:8a:93:dd:f9:a7:e7:af:d2:c4:c3:49:4c:e5:43:ea:2e:
b7:ef:68:56:ce:ff:cd:7b:40:19:f0:ec:c3:64:6c:f0:5a:0e:
c5:89:bc:bf:ed:3a:c1:93:12:9a:0a:a5:50:5e:c5:a5:0b:c6:
3d:08:70:07:ba:37:bf:86:c0:e3:dd:c9:6e:fd:0c:d7:56:c3:
8c:21:13:01:bb:2f:71:ce:07:2b:79:c7:9c:a3:f1:2e:17:ec:
51:39:4e:8f:e8:76:2c:17:00:cc:5e:bc:b1:27:98:9e:2b:7f:
e7:5b:e5:87:a4:a1:ae:18:5b:be:38:d1:d5:69:d6:23:fb:91:
83:56:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 23:41:57 2025 by rpki-client