Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
File: dIisPOfpHiQMr_IZy-OPzwI78rY.mft (raw, json)
Hash identifier: d6xYP5uXJoIYZSZrtQUY6CdOO85bE23jRFdWi3Vj5uc=
Subject key identifier: DE:09:CB:42:00:B5:C7:62:68:EA:CB:DD:1F:5B:A8:B6:B7:7F:14:36
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 019A70DC216EC3D578C024F19227E46B0DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
Manifest number: 0C3B
Signing time: Tue 11 Nov 2025 03:01:05 +0000
Manifest this update: Tue 11 Nov 2025 03:01:05 +0000
Manifest next update: Wed 12 Nov 2025 03:01:05 +0000
Files and hashes: 1: WUxc8OaDvlLuIRaGhHw99-2pQV8.roa (hash: pHL2ka3zZ/EpxZTpD28h5nmQm9ygfk2G3CW5wJONDzE=)
2: dIisPOfpHiQMr_IZy-OPzwI78rY.crl (hash: x7w/XajZXsZoGVbTOmKSpDt4Fi7N8QYzhzqIoWGJEj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:21:6e:c3:d5:78:c0:24:f1:92:27:e4:6b:0d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Nov 11 03:01:05 2025 GMT
Not After : Nov 12 03:01:05 2025 GMT
Subject: CN=de09cb4200b5c76268eacbdd1f5ba8b6b77f1436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:56:86:9f:6d:55:22:c2:02:b7:47:a9:96:
44:f6:c8:b8:88:83:e5:fc:78:6c:0a:b4:24:f8:68:
c6:68:ac:53:f3:84:6f:1b:27:dc:87:e5:c8:30:91:
9a:54:8f:9c:63:54:d4:75:2e:71:97:10:41:ef:e1:
d1:42:46:17:8e:79:25:3c:2d:99:a3:7a:6b:ac:5f:
27:e6:29:ab:ad:c0:43:b9:ae:96:15:dd:ae:e2:ac:
88:90:11:55:cc:ac:62:6a:28:a8:10:e0:4b:0e:2b:
bd:db:e1:2d:c2:88:87:86:70:f6:31:6f:3d:50:7d:
cf:72:82:18:a9:25:1b:c9:d9:12:a1:aa:56:62:68:
e6:c9:6f:f8:a7:1e:22:3e:c5:3d:76:ee:58:7d:25:
20:79:47:a0:d2:0c:af:0b:e9:ca:60:68:89:4a:95:
2d:48:5c:ec:52:b3:b7:8e:79:d7:fb:1c:02:6d:b6:
bf:ec:ca:6d:c2:f5:4a:ba:f8:74:f0:65:8f:fb:56:
c6:92:b3:03:90:0f:a3:16:af:7f:36:73:3d:b6:a7:
3e:3b:22:45:ec:25:a7:e2:7e:05:a1:3b:e1:f3:ef:
6d:a2:7d:92:e3:fe:5e:a7:d2:7f:4a:9c:68:94:2a:
ad:f2:6e:82:a1:5d:91:a3:1c:d1:4b:cf:17:e0:d8:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:CB:42:00:B5:C7:62:68:EA:CB:DD:1F:5B:A8:B6:B7:7F:14:36
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ca:48:f9:d9:9b:9b:f5:0c:eb:b7:03:87:bb:22:92:a2:3c:
6e:96:a4:3c:0b:31:b4:65:c3:6a:a7:7e:ef:dc:ee:b1:00:e2:
2b:9e:30:af:1a:86:c2:b0:d4:02:67:9d:7e:a5:6d:5b:53:a7:
d5:c7:11:a8:6f:30:77:be:f1:a8:84:59:c0:e4:ce:f4:34:23:
15:d6:b9:e9:1e:7c:17:63:87:36:61:b1:6e:89:2d:47:ca:5d:
22:f6:a0:e4:f6:92:3f:ce:7e:b6:33:9a:4b:52:7d:8c:23:74:
6d:09:b7:90:99:8b:ef:38:62:aa:40:46:5b:fc:23:48:04:7e:
c2:c1:09:0c:fc:cf:cd:30:b7:2f:2f:33:59:26:12:06:ec:6d:
59:1c:01:96:c4:90:0c:89:b8:6a:cd:cd:d7:28:bf:d7:66:46:
1d:1c:c1:eb:b6:38:42:9f:6f:c1:46:e2:db:01:85:50:d6:92:
5c:22:e9:23:d4:e3:03:eb:45:0b:26:c9:31:c0:bc:9d:f7:a8:
54:33:16:1c:dd:79:ac:1b:31:66:a4:3c:eb:6c:40:8c:96:84:
b7:04:93:d6:9d:90:36:2f:fa:41:9c:6c:9f:56:20:f6:b0:d2:
10:ca:c0:5f:37:e9:fc:53:8e:83:f0:4c:b9:a1:8b:8e:7a:bd:
bb:33:58:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:57 2025 by rpki-client