Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier: e5STTjSLFIHhThXkP4XJDQaCLE+ZCuTX2lG2mLwNLdM=
Subject key identifier: A4:B9:8C:FB:31:FE:CA:45:25:6B:B5:94:E9:F5:F3:EF:4C:45:3A:7B
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial: 019A7293EA27023FC7FDE6105766396C4902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number: 08DD
Signing time: Tue 11 Nov 2025 11:01:27 +0000
Manifest this update: Tue 11 Nov 2025 11:01:27 +0000
Manifest next update: Wed 12 Nov 2025 11:01:27 +0000
Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: LUJSZWfPylkSrC3RLcOZxkCnEusomHDRCkbHikcDTS0=)
2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ea:27:02:3f:c7:fd:e6:10:57:66:39:6c:49:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
Validity
Not Before: Nov 11 11:01:27 2025 GMT
Not After : Nov 12 11:01:27 2025 GMT
Subject: CN=a4b98cfb31feca45256bb594e9f5f3ef4c453a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:1a:a0:26:00:72:92:e5:0a:3c:8e:40:08:
a8:9d:b8:a1:01:46:f7:ef:21:82:19:0e:e3:bd:32:
35:b4:f8:fb:ec:de:75:91:a9:a5:ef:e7:59:d9:9d:
02:8a:c7:87:fc:33:8b:ce:a7:97:8e:58:5d:d5:3a:
d6:cc:6a:97:60:2e:e5:3c:6a:73:d5:4e:46:1b:f4:
5c:55:a7:15:31:b7:a2:a4:23:30:1f:23:87:dc:75:
b9:47:9f:d3:de:2d:32:f0:9f:b1:13:81:7b:84:42:
cb:b2:56:99:2c:b8:c3:ef:5b:67:7d:e3:21:ec:5a:
42:7d:fe:12:c7:5c:73:52:c9:55:18:86:46:3e:47:
d2:9e:c0:2c:76:66:72:14:16:a5:aa:13:b8:4c:97:
d4:9c:e5:ae:01:11:29:1c:01:bf:6b:af:40:d4:d1:
54:4b:43:4f:20:47:72:11:68:1b:0a:2d:62:2b:f8:
ac:47:74:29:ed:55:45:e8:5d:1b:f0:84:1b:55:d6:
dd:1e:ba:ca:bf:47:fd:36:a7:16:43:b6:61:a7:42:
9b:07:94:e2:f1:72:5b:11:9b:01:46:cb:33:7d:35:
07:ee:af:48:c5:bd:46:61:e7:d3:40:0d:f7:c8:67:
f8:7f:64:bf:af:e5:f9:1b:a7:67:9f:88:36:95:77:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B9:8C:FB:31:FE:CA:45:25:6B:B5:94:E9:F5:F3:EF:4C:45:3A:7B
X509v3 Authority Key Identifier:
keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:29:e1:38:2f:6b:bc:99:49:ef:91:a3:50:b7:ac:e9:06:8d:
f5:30:49:9c:b2:4c:6f:a5:f7:0d:f5:2f:2d:fc:74:a1:b6:46:
91:29:f4:c5:c5:32:f8:f8:54:35:b5:d5:c8:23:7c:df:66:af:
ed:5e:32:0f:40:f8:ac:b7:46:ba:e4:98:d7:cd:f4:8b:45:86:
65:14:1a:d9:46:76:48:15:18:a7:9b:64:94:a6:4b:54:e6:d0:
d2:5f:55:c7:e1:54:4c:0a:86:e7:88:79:1e:36:e3:ca:63:c2:
c1:60:67:2b:c2:33:e7:8e:25:86:ab:a1:13:94:ff:13:99:5d:
aa:1e:ba:d2:26:29:f5:ac:49:a2:07:06:21:da:d9:e2:ab:6e:
a7:0b:6a:5f:16:74:7c:22:69:7f:f7:07:85:1e:a2:54:6e:88:
5e:aa:88:ac:15:ab:bd:87:62:0c:9c:dd:31:66:b8:e8:16:b2:
c9:40:a7:51:dd:1f:88:2b:84:b4:88:6a:d8:a8:cc:92:78:f9:
55:df:14:7b:6a:9b:50:f5:e6:da:38:7c:44:53:1f:a7:7c:70:
32:85:25:79:a9:1e:66:54:5e:f8:03:d1:ca:26:c6:bc:66:68:
51:f4:8d:87:88:6b:bd:e6:8a:57:df:11:0c:f4:58:b6:d1:26:
f6:14:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:00 2025 by rpki-client