Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: 73R0pY69U9G07okJMCfWKpFPeLn4wTYHKj7UshDPEpI=
Subject key identifier: B0:28:1D:33:B8:F5:76:C5:99:09:04:9B:95:B0:96:F7:4A:83:5A:53
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 019A5A8BF14C152EAF28798C85BD0B1E7FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0D13
Signing time: Thu 06 Nov 2025 19:01:51 +0000
Manifest this update: Thu 06 Nov 2025 19:01:51 +0000
Manifest next update: Fri 07 Nov 2025 19:01:51 +0000
Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: v5YsbcrnBzQwNgJimVlJbkW1pPe7/pAd2HZ63oE47AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5a:8b:f1:4c:15:2e:af:28:79:8c:85:bd:0b:1e:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Nov 6 19:01:51 2025 GMT
Not After : Nov 7 19:01:51 2025 GMT
Subject: CN=b0281d33b8f576c59909049b95b096f74a835a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:2c:28:e7:bf:c5:a8:80:ea:d2:c2:da:55:
13:ea:dd:06:03:a3:17:e2:6f:59:27:32:68:86:7b:
b8:75:ab:18:e0:6e:b6:00:8b:c0:2f:f7:d4:c2:9d:
47:02:72:67:9c:6c:9a:1a:32:96:70:8e:04:b5:bb:
2c:fe:ca:84:23:15:79:a3:a0:56:a4:98:71:f5:89:
00:c0:ea:35:f1:22:73:ca:ca:50:1b:7e:1d:b1:3d:
09:1d:56:b4:d9:d5:77:0a:45:19:23:84:0f:4d:7f:
08:cd:5c:97:5a:7a:5b:74:68:27:aa:e9:2e:58:d9:
78:23:b4:e3:7b:63:ba:db:40:ae:de:43:6b:8b:3e:
34:2c:4f:b3:db:e3:c4:ec:34:b6:71:f9:25:34:72:
2f:5a:f9:bb:c3:38:05:2b:a6:ef:e0:93:9f:f5:26:
0c:f3:ea:e6:db:4d:17:6f:8f:80:63:64:7b:19:5b:
0d:a1:06:74:f9:89:f9:f4:32:bd:99:49:09:28:98:
75:bc:b4:0a:50:f3:13:f9:18:f6:fc:62:5b:72:8d:
46:2d:b2:4e:a7:b1:bd:db:89:24:45:0e:b3:a4:67:
38:bd:d8:07:a4:d0:bb:d4:d8:85:c4:e3:18:48:c9:
0f:f3:f9:f7:15:11:01:c7:b0:94:64:3d:f6:29:5f:
fa:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:1D:33:B8:F5:76:C5:99:09:04:9B:95:B0:96:F7:4A:83:5A:53
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:84:3e:35:d1:ba:6c:b3:6e:fd:54:a7:78:fd:11:cf:e5:f6:
43:b3:d6:d2:e3:08:58:13:97:da:17:cb:3a:14:a9:8f:60:3a:
75:9c:f3:34:f2:a8:19:f9:8d:9a:f0:3d:b2:0f:ae:cd:3c:d7:
e5:89:12:8d:d6:71:ad:fc:b1:b4:14:dd:af:be:8b:b7:ea:9b:
4a:3f:8a:c0:a5:58:dc:f2:7d:e5:9f:11:e9:12:1c:8b:28:98:
ed:d3:aa:94:0b:45:27:5d:b4:40:37:c8:01:ec:34:f0:44:d5:
36:a3:59:6d:c6:ed:38:6d:e0:5b:3a:ab:c9:0f:b5:54:e2:06:
14:2b:c8:42:6c:b7:06:f7:fb:33:64:b4:3d:c3:88:b7:79:dc:
7d:78:8b:61:52:3a:6b:7b:14:e8:1c:92:a2:a7:1d:35:c5:d0:
3e:f4:47:8b:c3:73:66:96:48:b9:ad:e8:e3:57:8f:ee:a8:7e:
5a:57:ec:02:52:17:32:57:47:0e:09:8b:6e:72:ae:11:3b:b2:
94:76:03:d7:67:73:c9:8a:59:79:e9:82:61:af:4d:db:5a:f1:
30:62:21:96:1d:69:aa:a7:ee:31:f6:12:a0:55:12:c9:fc:cb:
8e:09:03:38:b4:17:73:cb:75:ec:01:72:98:40:44:ec:7a:bc:
9a:8b:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 04:39:06 2025 by rpki-client