Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: PXP9spbWbQlwi4aVbLdAKzO94Bzdsv3nDoAakGUO1o4=
Subject key identifier: 74:37:BE:AA:CC:23:68:D6:6B:8C:F0:C6:4C:45:B2:78:8F:C0:C4:E2
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 019A722609B9B5DFB7E22E474367539F2478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 073D
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=)
2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: 69lEzOf9hsoRg3v6X2N73PQA7m5lGA2aOQSQ0jq0oU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:09:b9:b5:df:b7:e2:2e:47:43:67:53:9f:24:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=7437beaacc2368d66b8cf0c64c45b2788fc0c4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:af:eb:ef:b7:b1:ff:4f:7e:eb:5d:32:48:
0b:87:d2:b5:2d:86:43:0d:57:9e:45:8c:66:e5:a1:
e4:48:4b:c9:24:9e:52:d9:12:a2:45:91:7b:31:56:
33:87:46:4d:6a:29:60:ab:82:03:0a:e5:61:03:59:
89:f4:38:a9:5c:61:f7:6c:0c:a9:37:cf:bb:d9:40:
ac:b1:92:f7:fe:08:27:0c:97:86:0b:57:86:60:03:
14:ae:6c:f7:43:0d:1a:99:2d:e8:70:75:55:50:cd:
64:ab:d7:df:5f:b1:c8:0b:e6:4c:78:3a:8a:b9:97:
4e:b4:f1:89:23:bf:04:41:17:58:d0:db:b2:06:d8:
0f:5b:d2:bf:53:08:80:33:93:87:29:08:2a:fe:a1:
6f:e8:ca:7a:ca:80:53:33:fa:de:2f:97:28:a4:d8:
3f:e1:b7:e5:63:d0:8b:c6:84:60:72:d1:89:1c:0d:
fe:55:47:65:5e:23:5e:05:c2:c6:e6:24:ca:8a:72:
99:3c:a3:53:47:fb:21:ff:e9:9a:d6:12:43:43:b7:
cd:4f:78:aa:01:bd:6b:c6:bd:f0:13:ea:49:bc:d9:
fb:19:79:18:bd:1d:f5:45:2f:46:ba:37:82:63:14:
d4:48:33:ec:47:ef:83:41:47:8b:d5:e1:f9:b7:51:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:37:BE:AA:CC:23:68:D6:6B:8C:F0:C6:4C:45:B2:78:8F:C0:C4:E2
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b1:69:34:f7:10:0b:1e:df:f8:89:42:87:62:f5:63:df:9e:
44:48:49:a6:cc:4e:81:1c:57:2b:34:24:47:94:e0:41:2c:e6:
c1:6f:f5:52:d4:b9:87:5d:8f:3f:68:de:85:93:8b:dc:89:28:
a9:3f:43:52:1b:9a:40:30:8f:93:ff:db:d5:63:5d:8f:fc:40:
6b:32:39:26:cf:ab:6e:bb:4a:35:3c:7b:46:1e:37:d9:d1:43:
85:78:c6:53:34:f1:d1:88:d4:57:31:dc:e1:83:e1:90:f8:4c:
10:b0:c5:57:c2:49:84:4e:fa:90:25:ce:dd:97:d5:50:08:d8:
63:99:8d:6c:f6:f1:15:a5:86:11:fe:0b:a9:b1:a2:55:5e:66:
14:8e:3a:f2:20:10:31:96:47:87:f0:ac:05:24:94:b5:02:f6:
e1:42:83:54:63:6d:cf:4f:e5:77:2a:97:9b:ba:c5:17:84:61:
e6:4d:ba:df:2a:d3:b8:f5:de:36:c4:d0:4f:7c:6e:a0:8a:02:
a8:51:64:7c:08:68:2b:26:7e:40:61:7c:09:e6:c4:42:51:d1:
76:9b:8b:8e:dd:b4:10:f2:3d:8e:9d:8d:0b:b6:7c:e7:8e:3a:
de:10:22:8f:c7:07:2b:53:8b:ca:ae:e1:fe:ca:e8:ac:2b:90:
4e:b6:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:39 2025 by rpki-client