Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File: dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier: XITVWUW0zvRQDG61UFrvm7/a8k8ubz7sB2Zyc28VvNc=
Subject key identifier: 07:88:55:A0:81:B4:40:C8:D1:33:E3:AF:59:A2:4C:69:AC:46:DC:9F
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 019A7293F034BA2E5FB22D3A316036251957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number: 0AE7
Signing time: Tue 11 Nov 2025 11:01:29 +0000
Manifest this update: Tue 11 Nov 2025 11:01:29 +0000
Manifest next update: Wed 12 Nov 2025 11:01:29 +0000
Files and hashes: 1: _yLmchLwIYVTnPdJc9fw9h7BqNI.roa (hash: jQg4aqJLhfqC2o9cWdzjV4aGpmH8JtaZPWEi/oExAo8=)
2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: yABSZbKp4dBlJ0x7T3ZWceCdR2IzP40/0qF6pPqvZwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f0:34:ba:2e:5f:b2:2d:3a:31:60:36:25:19:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Nov 11 11:01:29 2025 GMT
Not After : Nov 12 11:01:29 2025 GMT
Subject: CN=078855a081b440c8d133e3af59a24c69ac46dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:99:7e:29:6e:88:a9:99:61:ad:ef:3a:3b:
ea:87:9c:1a:b6:9a:1a:f6:62:a1:28:50:13:c1:5a:
c8:00:41:15:e9:06:ef:47:cd:67:c3:d9:bb:ee:e9:
f9:61:de:26:7c:64:c1:ec:9a:39:09:9d:63:a3:9d:
45:c9:9c:5c:a3:0e:ca:19:40:d1:cb:6c:79:da:86:
bd:36:02:a7:2e:36:ea:5d:92:8b:5e:59:27:10:c3:
c6:8f:21:3b:9f:94:ba:da:aa:47:d7:9e:d0:ab:3a:
68:e0:ed:0e:56:61:e8:e5:18:87:6c:a7:21:25:20:
4b:0d:d7:80:5f:d5:81:d1:63:ff:11:d7:ff:ee:9d:
cd:e3:ae:b0:03:62:04:7f:7b:97:04:52:12:b3:59:
59:9b:23:4f:4a:32:96:1b:ba:ff:30:9b:f5:20:3c:
2e:88:a9:bb:3f:c2:68:9e:82:12:3e:1f:be:1c:77:
93:35:2c:47:99:36:77:65:87:b2:35:11:55:1e:0d:
92:c0:f1:f7:a0:bf:b6:4a:6e:a0:5a:89:9b:13:f3:
e3:21:da:bc:a3:01:ab:dc:66:cd:f7:6d:4b:1b:eb:
77:16:3f:5d:0f:f6:ab:da:b7:b2:9b:c9:07:19:27:
f6:b4:fe:e2:de:0c:76:01:da:82:dd:f3:08:c4:38:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:88:55:A0:81:B4:40:C8:D1:33:E3:AF:59:A2:4C:69:AC:46:DC:9F
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8e:4f:82:0e:e1:b2:67:ae:e7:5b:53:65:6f:c8:48:3e:d4:
64:49:a1:f8:7d:34:2f:fc:c0:9e:b6:d0:78:e2:0c:36:3d:d3:
2c:c0:46:c7:71:65:b7:8c:47:4c:df:3f:64:0b:73:84:e9:40:
93:13:96:e7:ac:3c:7d:80:89:d4:23:cb:72:3d:7a:c0:85:28:
01:b3:27:40:06:3d:29:31:5c:24:8e:cf:a4:95:e7:be:1e:c1:
ff:db:af:01:81:3c:8c:aa:4c:63:ce:0c:74:b2:25:44:d9:9d:
53:25:09:09:b6:1d:8a:66:70:f9:f8:09:d5:76:ed:c3:32:d8:
58:f5:03:26:93:41:20:7c:66:e4:b2:f0:ac:dc:0d:cc:f5:e5:
af:87:3f:90:3c:2a:5f:30:e0:43:0f:b9:55:9b:72:36:5b:24:
61:b1:6a:d2:25:15:33:26:28:1b:1c:36:03:3d:b6:e2:cb:bb:
12:e9:17:c5:90:d4:8b:e8:1e:44:ad:58:e0:2a:52:6a:18:e4:
1b:02:2d:07:ff:96:ae:80:63:df:a9:f2:af:a0:ad:17:cb:0b:
d1:7e:e8:b6:61:10:a1:cb:f7:fc:df:41:d6:98:10:93:9d:8c:
16:f1:fb:7c:7a:08:a8:2b:0e:40:a6:0f:ec:00:b6:16:d5:a6:
c1:44:c5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:01 2025 by rpki-client