Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: f+beoGAMn21WI1n/Kf7f8rZ/VY+XWp4Z+2La4W2i0iE=
Subject key identifier: 9F:5A:EE:69:20:84:B5:24:94:68:79:33:6A:7D:EE:56:45:19:AF:F6
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019A7113699016B58A0942BEF34BE313F1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0EBC
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: 8K9njPVVaPxp8ftRcRgIGQ6V1nE1PLrX9c8ZiGeM0FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:69:90:16:b5:8a:09:42:be:f3:4b:e3:13:f1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=9f5aee692084b524946879336a7dee564519aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:7c:c3:20:55:d4:e8:33:d9:8c:5f:91:21:
bc:bb:6b:29:7a:bd:1d:c3:81:4a:38:8f:54:a5:36:
e9:27:68:22:dc:b9:45:3c:58:c2:56:c2:c2:d3:36:
88:0b:ed:9b:00:d1:0e:d1:3a:66:29:2c:b3:42:d4:
a2:de:a4:29:8c:e6:16:83:9e:75:09:90:f2:71:2b:
27:60:91:f4:5b:cf:bc:20:68:4b:29:8e:f9:0b:44:
dc:79:b6:74:ad:6e:e8:07:fd:65:74:87:28:b9:16:
6c:9e:0b:21:b2:6a:db:d9:71:21:1e:b4:bc:6f:b7:
1f:67:4b:55:b8:1b:6b:03:26:c4:fb:d3:fd:8b:12:
39:d7:2e:0e:7e:2f:dc:ba:db:72:3e:5d:69:9b:0f:
6b:e2:01:0c:73:ab:bf:d2:ae:06:5c:83:0f:53:68:
bb:6c:20:5b:4f:99:ef:c5:1e:b4:5e:21:9a:48:b7:
a6:25:dc:cc:a7:bd:14:7f:8b:0b:ec:ce:26:40:c5:
67:2d:57:0a:31:b1:1c:af:c9:a8:7c:d9:cb:73:29:
94:41:69:f4:fe:e4:e1:df:6d:59:e0:50:2b:f9:26:
b3:c0:90:29:c2:1e:e4:7a:c4:db:52:a0:aa:55:3c:
db:85:df:d7:67:55:a1:ad:05:88:16:57:ab:e1:9e:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5A:EE:69:20:84:B5:24:94:68:79:33:6A:7D:EE:56:45:19:AF:F6
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e2:35:5a:9b:fe:1a:02:e4:96:65:f4:d3:06:d6:80:43:02:
08:52:48:f0:5f:fa:0c:15:5b:f5:81:86:11:33:c6:fe:5b:32:
bf:31:96:f5:d2:d3:80:e1:bd:e9:d2:97:0a:a2:fb:f5:85:55:
b5:2f:bf:cf:c5:e6:83:78:24:8b:c5:f6:7b:08:79:4c:f0:8f:
08:f4:64:71:43:be:a0:c6:d7:50:51:56:37:47:eb:b8:a6:6b:
30:a8:52:9e:c2:cc:93:7e:8e:67:fd:4a:5b:96:6c:9b:48:51:
ee:e6:b2:03:d5:72:9d:1e:92:83:93:e0:9b:31:5f:79:af:e8:
25:30:3c:6b:37:62:7e:b5:44:7e:74:f8:d8:64:e1:32:30:bf:
83:ea:3d:4e:82:a1:e7:4c:a6:a1:d3:80:1b:fe:f6:41:6c:b0:
69:04:2f:52:48:28:07:81:99:d3:a6:d8:b9:47:2f:d7:29:bb:
40:2c:7b:e5:66:f8:d1:d9:be:49:2f:2a:b8:47:28:14:a5:f3:
ba:56:fe:63:f0:6c:40:75:05:a5:b4:71:22:99:db:91:24:7c:
15:32:02:9b:25:9f:fc:1e:a8:4a:52:45:8f:33:f4:e1:25:b7:
88:aa:7a:a6:c8:75:31:61:15:86:09:46:22:da:2c:16:d9:7e:
d7:fd:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:22 2025 by rpki-client