Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier: x3MdiwBgHsTpiS3Uey5zBUA3VpCnaXsFIV3uhSf3FGY=
Subject key identifier: B8:30:64:DB:8A:40:C3:5B:FC:F4:E0:28:FA:ED:8D:16:0D:E8:3D:77
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 019A73386E34D481DA1F9C62EBCE6D05DBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 14:01:09 +0000
Manifest this update: Tue 11 Nov 2025 14:01:09 +0000
Manifest next update: Wed 12 Nov 2025 14:01:09 +0000
Files and hashes: 1: 8Tg_w4jLr-o6paH7i7ao61nZQwM.roa (hash: BXi5IdwKZUBuQCj2qQLYriilM2He/krSkrWhx7hLw5g=)
2: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: zsC6VRGBAMfImMUjvFuXVjIcr8YNa0qejpXCDy6qGCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:6e:34:d4:81:da:1f:9c:62:eb:ce:6d:05:db:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Nov 11 14:01:09 2025 GMT
Not After : Nov 12 14:01:09 2025 GMT
Subject: CN=b83064db8a40c35bfcf4e028faed8d160de83d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:da:23:41:7b:3f:e7:8b:7e:4d:07:17:80:
96:35:49:ab:26:e5:55:4d:13:b9:6f:82:ef:00:0d:
2a:11:c0:60:a9:e1:b2:70:3f:cf:f6:2d:b5:b2:66:
9a:ad:2f:37:e8:3c:7d:33:64:80:e7:72:aa:9a:26:
a2:92:b2:87:65:59:1c:b8:05:d2:ae:1b:62:8a:15:
09:35:a6:e0:de:f2:e2:01:86:46:12:f1:da:eb:60:
3f:7d:95:b9:87:d0:d4:37:1d:c9:9b:39:78:29:3c:
1c:e0:2a:f5:a5:0b:1b:4f:ab:29:59:16:92:ca:e1:
5a:47:97:89:89:77:63:08:a6:a9:5d:ec:dd:e3:bf:
8e:7a:1d:9c:3f:0a:a6:13:c8:aa:a8:1e:80:d7:d2:
c4:a2:84:64:e1:2f:97:c5:b6:55:9d:46:86:e7:64:
0a:70:cf:be:a5:3b:60:26:77:88:b7:d3:0a:6d:5c:
be:40:f7:d8:f8:f8:00:d7:dc:6d:af:29:76:a4:05:
de:04:d0:88:11:44:5d:d6:73:f1:1e:00:5a:3f:1a:
e5:23:a5:11:ee:ac:9b:6f:a7:d2:a3:a1:43:8c:af:
66:55:97:3c:6c:9f:7d:11:d9:05:cc:7b:ba:de:de:
0f:06:8b:d8:9b:b7:48:7a:fe:19:e5:49:aa:14:41:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:30:64:DB:8A:40:C3:5B:FC:F4:E0:28:FA:ED:8D:16:0D:E8:3D:77
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:10:d0:25:41:ec:23:03:c1:d3:fa:ab:23:50:63:ca:e5:31:
23:57:90:ee:2e:31:ec:2b:9c:4e:29:66:db:1f:2f:ca:7a:bb:
f4:2e:10:86:ed:e3:5a:98:01:fe:62:7e:0d:59:85:e9:1d:6a:
cf:22:09:fc:aa:d5:08:76:71:1a:5a:9a:ad:3e:45:5f:3b:0b:
eb:82:10:19:0d:71:5a:d7:10:8e:f7:71:a9:0b:01:a9:7c:08:
d1:d3:67:3b:e6:78:11:ec:84:7e:6c:f9:1e:80:47:cc:51:0c:
7e:3a:6f:30:a7:bd:df:e1:24:f5:39:7d:21:60:b3:76:32:75:
f1:d5:88:e6:67:5c:93:e9:6f:64:63:e0:e7:7b:02:d3:fe:29:
49:ef:5b:93:87:68:d5:22:81:df:c6:b4:40:32:dc:fe:17:be:
10:b0:ae:91:22:8e:50:11:60:27:0e:92:e5:8e:12:8e:5f:04:
6c:5c:35:01:52:ed:f9:3d:7b:75:91:63:0c:1a:f1:18:82:cc:
7d:59:14:11:7b:e9:93:70:bf:da:e0:ff:67:7c:82:1c:09:29:
87:85:44:04:b2:65:8f:ca:b8:65:81:2a:af:95:9a:1a:d3:17:
cb:3a:e0:73:20:a3:96:86:5a:79:4f:9f:74:9a:1c:4e:4d:18:
83:9e:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:10 2025 by rpki-client