Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
File: RDNmA3i76zplxtyp7Qp3b70gRhA.mft (raw, json)
Hash identifier: gOl9tZAuMEOrbhnsB2/DFMaw/Ki0UeWPTuVjK7C/vHI=
Subject key identifier: 9A:4B:7E:FF:5F:E0:1B:6E:BF:E6:F8:AA:A5:D6:1B:9D:DF:4D:23:6F
Authority key identifier: 44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
Certificate issuer: /CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Certificate serial: 019A729371F6CDE6D0C343B71D789008CE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
Manifest number: 045C
Signing time: Tue 11 Nov 2025 11:00:56 +0000
Manifest this update: Tue 11 Nov 2025 11:00:56 +0000
Manifest next update: Wed 12 Nov 2025 11:00:56 +0000
Files and hashes: 1: RDNmA3i76zplxtyp7Qp3b70gRhA.crl (hash: nzhFV8vQ2xMIryWn0YlY4pqXYKkQ2Qy/tGvGKGod3p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:71:f6:cd:e6:d0:c3:43:b7:1d:78:90:08:ce:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Validity
Not Before: Nov 11 11:00:56 2025 GMT
Not After : Nov 12 11:00:56 2025 GMT
Subject: CN=9a4b7eff5fe01b6ebfe6f8aaa5d61b9ddf4d236f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:cb:98:0d:fc:72:83:ea:a2:c6:7f:40:a2:
43:b5:ec:3d:bf:f0:2a:a8:2d:64:b2:1f:e3:de:0b:
d0:fd:dc:85:72:f7:a1:6d:36:fb:79:83:10:e7:6e:
d1:de:92:a7:e5:5b:09:a0:80:0d:38:7b:ab:8c:0a:
6f:0e:9f:73:1b:d0:4f:0a:09:fc:09:f4:51:f4:18:
05:c8:e5:16:96:b6:9b:38:8d:b1:3d:72:5d:23:b4:
63:5b:99:bc:2b:98:d0:92:4e:03:77:c8:14:20:f6:
70:9b:ec:fb:22:2f:e4:f3:01:74:a4:20:bf:01:47:
1b:c7:30:51:48:5d:fa:8a:50:e1:c3:8b:23:a6:00:
26:90:15:44:4d:33:e9:e2:69:24:f9:9b:1b:5e:7b:
1e:82:02:be:61:d9:66:5e:87:a9:6a:24:b1:9d:b5:
42:cf:67:7f:39:de:e2:dc:99:d5:3d:49:9e:37:24:
f7:45:1a:94:4a:29:61:6c:14:cd:5d:ed:84:87:67:
a6:95:07:1b:68:a3:86:eb:24:32:64:3d:b8:e2:44:
2b:cf:e8:fe:62:da:77:07:d1:2a:36:62:49:23:de:
63:3a:bb:92:cb:2d:d2:10:8c:57:c3:e1:08:32:24:
d4:48:36:97:e9:0d:7a:6e:e1:6f:c2:42:c4:b2:3c:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:7E:FF:5F:E0:1B:6E:BF:E6:F8:AA:A5:D6:1B:9D:DF:4D:23:6F
X509v3 Authority Key Identifier:
keyid:44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a2:a8:af:fb:46:b6:ad:0a:34:f9:8c:e3:35:bd:ca:97:8a:
04:6d:95:af:4b:29:e1:1f:2b:cd:02:2c:1b:17:e9:bb:e0:d0:
84:53:de:74:61:1e:e4:ec:8f:05:89:92:d6:ac:b2:58:4a:de:
22:eb:81:1f:0c:85:9b:53:09:05:91:43:2e:0b:d5:7f:f7:39:
9f:e9:75:80:80:03:db:9e:a5:5f:06:64:33:49:c5:67:f8:e3:
e4:38:61:4e:06:3d:0c:eb:77:c9:f5:20:f2:e3:df:9d:7c:06:
da:20:52:b2:bf:4f:cb:da:d8:4d:c7:d8:12:ba:cd:c3:dd:17:
e2:58:2f:ec:62:67:2f:36:d5:7f:3f:d7:ae:d0:73:d9:52:6d:
41:f6:10:56:77:46:b2:46:8d:f9:ab:27:cc:a5:db:51:a8:ae:
12:f2:ba:29:0c:e7:df:43:78:82:1e:ac:e1:0d:c1:ff:c4:a3:
15:fa:aa:f3:54:37:b5:26:da:ce:70:15:67:2b:4a:27:b9:a5:
f8:dd:07:24:2e:04:3b:1c:a8:eb:4d:74:a8:2e:4b:fb:38:eb:
ef:28:af:49:b1:7f:92:58:74:58:6f:cc:33:37:5a:0e:5b:03:
51:95:51:2c:0f:d7:02:2f:67:e6:78:e5:d2:a4:3e:d0:1a:f2:
ab:09:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:06 2025 by rpki-client