Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: j74jJatUaEzA4/vifgX1OlYcYrgHK5tyePcdkPlo/P4=
Subject key identifier: 3D:2C:9F:F7:62:61:34:E1:6E:4C:4F:A6:9D:F6:F5:44:C6:E7:0C:E7
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 019A729334B3DFD815EDDAFE52B3C726C582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 11FF
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: 3dyW6jJMW4jJbZ8yksKoFjvGPbQIoQiQvtKwatFKwH4=)
2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:34:b3:df:d8:15:ed:da:fe:52:b3:c7:26:c5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=3d2c9ff7626134e16e4c4fa69df6f544c6e70ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:23:3c:ec:0f:45:f1:b3:c3:ef:19:93:c7:
d0:9c:a4:58:56:bc:b2:90:9b:51:03:49:44:9e:6f:
bf:c8:a4:e8:57:a1:35:54:76:42:ad:24:34:75:28:
ec:23:4e:61:80:63:80:ee:ec:3e:51:fa:6d:e1:82:
86:6d:3d:ce:07:ae:d0:80:de:49:e8:90:a3:da:e2:
24:21:c0:c0:30:0d:7b:d8:e1:3a:d0:0f:4f:4a:00:
4d:87:b9:74:a4:0d:4a:91:0d:45:c4:0e:e0:9f:50:
5c:07:17:fb:20:f7:ac:b1:0e:fa:88:bd:d9:92:be:
34:c3:46:2d:04:20:bb:02:0c:2b:5f:a8:0e:aa:2b:
df:75:f7:c2:32:9d:8b:05:30:74:bd:e3:fc:2a:8d:
b9:1e:cc:66:6e:04:88:e0:86:91:cc:05:ea:ce:31:
ec:e7:88:9e:e7:b6:82:84:02:19:f9:bf:53:02:13:
04:c4:f4:7d:a0:47:ec:0d:a1:a7:22:aa:96:a1:ef:
45:5d:b8:52:09:54:4d:37:3f:69:71:98:94:fe:a4:
0b:7c:07:d7:d8:6d:49:6e:70:66:a3:7c:07:78:5b:
f8:31:bd:96:0a:b5:37:8f:22:fa:f6:c4:6d:fb:53:
c3:de:54:e1:56:f5:bd:23:e6:56:27:02:30:85:e9:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2C:9F:F7:62:61:34:E1:6E:4C:4F:A6:9D:F6:F5:44:C6:E7:0C:E7
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:86:a4:54:32:40:01:3f:c4:74:3b:6f:9f:11:2a:04:7e:b3:
ed:99:cf:4a:5f:83:ff:3a:1d:4f:e3:6c:e2:c8:82:de:80:91:
67:05:73:43:3d:ba:99:10:f6:93:25:80:8d:88:fd:ce:1a:05:
e7:09:d3:12:5c:7e:96:19:7f:c0:0c:93:7a:52:33:3a:8c:a1:
c5:51:77:5c:0c:57:d0:a9:7d:20:49:3f:16:28:f5:f6:9f:81:
aa:da:98:c1:c7:90:f7:16:53:5b:bc:ff:13:21:26:61:9a:ce:
2b:a5:1c:2e:55:c0:09:c5:8d:f3:a6:16:ed:f8:d6:2a:58:d3:
6b:0d:5f:5b:7a:51:d7:87:6b:a2:e9:d9:9b:08:26:08:db:83:
57:a3:b0:0c:86:07:17:91:1c:32:6a:01:4f:c7:50:26:f9:98:
0c:9e:b0:bd:af:04:fe:6f:14:00:75:70:e1:40:78:63:9f:00:
4e:cb:cb:05:7d:27:47:cc:b3:ff:54:57:73:44:18:50:4e:3d:
75:0f:42:b2:37:5c:55:2f:88:5f:30:23:0c:82:5c:7b:44:69:
c8:ab:bf:d7:a4:be:ca:f9:c4:4f:8b:bc:8c:14:57:16:20:7a:
26:44:3a:cc:66:00:5e:d5:e4:20:06:1f:82:82:3d:f8:ac:0b:
8c:a2:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:01 2025 by rpki-client