Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: RQuSovw6aN73vGzFY6imA7zj7FNdfpNvnWQKW95JFFw=
Subject key identifier: A6:7A:C9:15:16:BB:B9:B3:32:9D:AF:1D:15:E9:8C:91:AA:D4:21:F3
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 019A71B792C6C4597DEFC47840D60C646FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 0974
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: 6C2Szm3cfjp9bAf9_VEG9JmuRyM.roa (hash: m6tO4ROtbLwqmMtYoGkRxelczMRQ44EOZBvyjQVDxjY=)
2: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: P90vYcsEzwdgSvjkH5IJKirTnAUk646xdq+T2pyTaBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:92:c6:c4:59:7d:ef:c4:78:40:d6:0c:64:6f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=a67ac91516bbb9b3329daf1d15e98c91aad421f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:17:44:8f:6e:d0:4e:f3:65:f3:34:6e:21:
18:07:60:d2:02:e8:b2:6a:76:4b:bf:f5:7f:77:e4:
2b:b6:7c:50:13:e3:f9:b4:cc:7d:bb:50:de:fa:dc:
72:02:51:0c:ae:2a:40:9c:56:61:d6:db:ae:a0:67:
cf:d3:52:9f:f0:a9:39:e7:e7:28:31:05:7c:08:1a:
b8:f0:71:b7:1c:eb:a5:71:c0:fa:94:08:a6:4d:15:
dd:cb:05:9a:bc:6f:72:dc:99:25:e8:54:7a:9d:78:
a4:01:ac:5b:33:04:d5:84:90:73:0c:1a:0f:4e:f1:
dd:7b:6a:28:85:be:da:26:74:4b:57:f7:d6:e9:bd:
a6:69:6d:ed:1c:6c:3a:a8:fe:ab:a8:1b:8e:7a:3a:
17:62:d2:1c:b3:6b:9e:e8:7c:c8:ac:4a:60:b7:ce:
e4:a1:0a:ce:cd:12:86:56:49:3d:97:89:ea:10:51:
f8:24:86:75:52:92:40:9d:73:ff:59:86:c0:e2:a5:
69:18:97:64:74:b7:87:a5:00:f8:38:8e:6a:5f:dd:
fc:19:7c:1a:16:f2:3c:43:e3:e0:f9:9a:ae:41:a8:
26:61:e3:d9:14:b6:1e:18:c5:a6:b7:68:48:7a:51:
81:3e:66:30:51:a2:9a:41:66:20:8a:2d:ee:41:a1:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:C9:15:16:BB:B9:B3:32:9D:AF:1D:15:E9:8C:91:AA:D4:21:F3
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f7:b8:13:6b:f4:95:6d:b2:7b:72:ee:80:ed:4c:5c:37:30:
b5:51:c5:ae:a4:ef:51:0a:37:65:fe:84:af:76:32:92:53:e0:
c0:35:e4:95:f4:39:4e:fe:2d:fc:5e:66:d5:7e:39:13:27:51:
f7:4a:c7:92:ed:f4:e9:24:47:59:76:50:d7:72:b6:6e:e7:c7:
bb:ba:d5:9c:db:6a:c0:4d:2b:ca:ac:ef:a3:e0:92:4d:4b:4f:
7f:ba:4c:95:34:5f:3a:ba:26:fe:c5:a5:00:27:c2:c6:f9:a1:
be:86:a1:e0:88:eb:6d:e5:53:fe:ca:45:f9:06:16:fd:32:cc:
e5:ea:71:c8:18:62:71:8f:0e:4a:30:42:66:2e:03:42:ef:88:
3b:f8:f8:a0:45:46:b6:56:a6:a8:35:b1:32:3f:6c:71:4e:a6:
47:f9:32:fe:49:75:34:6b:ec:ea:a0:1c:11:5a:31:d8:e7:8e:
12:11:e8:43:1f:8e:37:73:34:0c:c2:bc:9a:19:4d:16:5d:d7:
c6:95:b8:94:51:b9:d4:3e:65:2b:8b:9f:58:29:1a:8f:c0:87:
35:b1:95:85:a2:f9:b0:63:db:e0:86:21:89:0e:8d:00:50:e9:
b4:9c:19:89:6b:df:bd:44:7a:e6:92:96:87:8a:d0:88:df:f8:
a8:4d:20:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:08 2025 by rpki-client