Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File: d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier: bx+r7c1ql5Y0LrB+bmbJem4yHl07Y9dpKdLL1wpCCzQ=
Subject key identifier: 30:84:4C:39:C2:09:BE:D1:A3:48:72:AA:C3:5C:81:DC:97:8D:CC:C7
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 019A736EF0D7B7F2F6D3267B54898F6A742A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 15:00:41 +0000
Manifest this update: Tue 11 Nov 2025 15:00:41 +0000
Manifest next update: Wed 12 Nov 2025 15:00:41 +0000
Files and hashes: 1: 3qTzEcW6UJi2N2jS10ksOP0jGPg.roa (hash: bi68C3NI8kVP+jK95/ZZuCFpomCw8AVgobu4v38Zwn4=)
2: d411kki9lFxs44QujWQtzScxM00.crl (hash: ldoK5Gxf4wLkgREjUeDC6wQX589o2Q9EndmA2lQpueA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:6e:f0:d7:b7:f2:f6:d3:26:7b:54:89:8f:6a:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Nov 11 15:00:41 2025 GMT
Not After : Nov 12 15:00:41 2025 GMT
Subject: CN=30844c39c209bed1a34872aac35c81dc978dccc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:f1:e7:e5:f6:46:ba:3f:0f:8b:33:f1:0f:
5e:50:b5:d9:f7:4c:e9:27:0f:0b:46:98:a6:05:ea:
b9:6f:21:f3:9d:9d:c1:4f:75:4c:b7:74:92:ed:66:
c6:f9:16:77:f9:b6:c1:55:e5:cf:1d:59:fb:e9:10:
d3:64:e4:1b:ae:d6:fa:1b:7a:7a:0d:5d:b5:c9:ce:
98:a8:a2:4a:b1:40:05:b9:67:8e:2e:1c:67:62:05:
7b:ad:f6:8c:ef:a7:18:11:1b:4e:8a:27:cf:2a:a1:
57:04:0a:0b:34:e1:e2:5a:7a:94:cd:b8:79:d1:d3:
49:29:56:4e:20:15:c6:b8:e3:5f:b1:b0:0b:99:d4:
4c:84:c2:8b:28:46:e4:b6:ce:6a:70:81:74:c5:80:
23:d1:ca:e0:96:d3:a0:20:13:50:32:d8:99:36:3c:
03:57:77:b9:99:61:04:80:10:a2:dc:50:1a:b7:36:
81:0f:b5:77:d2:32:21:4d:45:20:36:90:29:d2:45:
5e:de:cf:27:e7:c4:93:0b:b8:18:09:f6:5f:6e:b3:
ab:f5:97:4f:25:88:a9:b8:cf:df:67:c5:ae:d5:b8:
49:c3:f1:0c:a9:3e:25:37:dd:66:b9:6f:63:4d:d3:
90:07:76:d7:fb:da:8f:42:3e:5d:c0:11:3b:c5:f9:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:84:4C:39:C2:09:BE:D1:A3:48:72:AA:C3:5C:81:DC:97:8D:CC:C7
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:15:93:e5:f5:47:36:08:be:7d:f4:23:9d:29:7c:40:41:
7c:c1:ce:43:85:f9:77:80:25:56:f6:dc:c4:af:e9:59:10:92:
f9:70:d1:33:30:fe:8c:11:50:6a:57:f3:9a:9e:af:57:f9:61:
a7:7f:b0:94:fb:f3:10:65:b8:3d:a4:a2:6b:0c:03:37:77:be:
18:94:0e:5f:4a:3b:24:d7:be:c2:4a:6f:49:bd:32:71:fe:fc:
6a:9e:16:fe:77:9b:54:40:f2:9f:3d:e5:be:44:63:d5:9a:a4:
33:16:b1:8e:98:ed:16:d2:c9:62:b0:af:c3:8b:f5:ff:5c:32:
e7:fb:1f:27:c6:72:69:d1:12:6a:04:22:6c:66:0f:48:a7:bf:
83:bc:56:2c:30:a6:b7:22:9e:c0:5f:00:35:0d:f3:9e:bb:04:
7c:16:4d:c1:30:0e:72:07:cc:0f:8d:da:52:1b:2d:c6:54:47:
5a:a9:a3:a2:e5:3d:d8:8c:3d:cb:d7:c6:f6:c5:9f:0f:ea:51:
04:60:0a:b5:d3:8b:1f:73:77:fa:f1:57:05:4f:e6:00:59:2f:
52:50:cb:2d:c7:59:25:6b:91:59:47:3b:37:b1:e2:2a:36:98:
72:6a:81:09:53:31:08:1e:9e:38:1a:e7:25:8c:31:46:c1:d9:
b8:44:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:06 2025 by rpki-client