Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier: MSejvABvzwoA7y1nob2hCbYBCd57T3s0BaWliVUWm4I=
Subject key identifier: 0E:E3:85:3C:EE:0E:A9:A8:6C:41:50:0C:8A:94:01:17:80:8E:AD:01
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 019A71B7D468DD41BCA031D1FCB796902D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: 0bz4UBMhC12QQRgycYeNY+ELnO5I3fZj9dV2i84EGnY=)
2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d4:68:dd:41:bc:a0:31:d1:fc:b7:96:90:2d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=0ee3853cee0ea9a86c41500c8a940117808ead01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:4a:d1:7e:23:76:19:b1:3f:3d:4b:7f:b8:
83:2f:f8:09:1d:69:f9:47:d7:3d:76:1a:22:ac:62:
3a:bf:4e:cb:39:91:25:8b:4e:02:3b:81:1b:37:1e:
a0:c0:d6:72:45:e9:8e:d4:df:2d:fa:dd:65:4e:e7:
d9:85:0e:b5:3d:cd:71:4a:d4:bc:0e:be:e9:95:65:
70:c4:3f:85:8f:5a:b5:df:51:97:1f:0a:cf:d5:46:
06:3d:12:e1:ac:e8:32:d8:8e:1b:89:5d:6a:42:c5:
09:3d:0a:c4:15:cc:86:cb:aa:b5:62:53:59:7f:be:
df:fc:18:c4:fb:2f:a6:4f:28:7e:a2:b0:65:de:58:
05:3a:a2:a8:f7:94:cc:f1:97:0d:0d:91:13:e6:35:
f9:7f:6d:7c:41:15:4a:e2:04:e0:bd:90:c4:a2:61:
53:52:c6:6b:10:91:ff:ac:bc:e4:5a:68:c9:ca:04:
5c:a9:6b:9c:2a:08:36:69:b8:61:46:47:ee:99:2a:
06:d4:d5:7e:88:1c:77:e5:61:d6:70:9a:74:c9:c4:
83:7f:a4:dd:42:96:ac:9f:81:8c:4d:cb:eb:a8:52:
ac:9a:10:31:86:9b:63:94:03:db:c4:2d:9e:29:9a:
d6:bb:5f:e6:b0:51:e4:1e:84:68:fc:49:1d:2e:83:
4e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:85:3C:EE:0E:A9:A8:6C:41:50:0C:8A:94:01:17:80:8E:AD:01
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:9e:46:56:6e:ca:7b:78:34:fd:39:44:66:44:aa:04:b5:23:
6c:80:99:1f:0d:4d:8a:c0:b9:de:0d:6a:86:af:ef:13:b1:65:
07:19:50:18:1e:ff:75:5d:20:fc:4e:c7:27:8b:bd:b9:e1:db:
57:30:25:e4:8a:ae:66:01:b0:de:29:84:b7:6d:f3:2b:ae:71:
fd:64:dc:64:e2:60:eb:a5:03:e2:f1:f9:cf:4e:3b:99:28:10:
ef:38:61:e7:e3:1f:07:44:39:6a:cc:e6:ed:40:31:be:de:fb:
d5:b8:05:71:c4:7c:3f:f5:ac:ae:67:56:68:0b:67:65:eb:1f:
7b:3e:b0:00:3d:57:00:57:d8:09:18:b1:50:80:e9:cd:08:80:
c3:b5:e1:23:bb:47:da:3c:e2:93:7c:b6:0c:06:c1:b9:a2:50:
27:74:13:25:02:dd:c2:e2:07:d5:8b:86:b9:74:36:04:58:a5:
cb:3b:1e:58:e7:92:64:b8:9a:f1:ee:b4:43:00:e1:d3:05:97:
7c:04:9d:1d:6a:52:86:97:f2:8c:70:76:49:c3:15:25:bc:43:
7a:c5:43:e6:a7:29:af:d1:9c:06:a6:b6:1e:5c:d4:01:ae:87:
a2:40:97:cd:cd:44:ec:cd:00:82:e2:8a:83:6e:df:e9:ad:e8:
1c:f8:1b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:07 2025 by rpki-client