Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
File: dNUnZVf32kEAET2Fc5VmSBVA5hw.mft (raw, json)
Hash identifier: 2WweNTR8NbmNo1KeSaTgjpDTd1qSgn8o5sE8cMhxQpA=
Subject key identifier: 14:19:D1:C6:29:84:56:47:B5:79:A8:AC:DB:CA:FD:93:AD:B9:6B:74
Authority key identifier: 74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
Certificate issuer: /CN=74d5276557f7da4100113d85739566481540e61c
Certificate serial: 019A7225F216C4E5A7194AD7120927EDAF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
Manifest number: 09D1
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: dNUnZVf32kEAET2Fc5VmSBVA5hw.crl (hash: wmhDtP0IOqSSIa8ezz0tL7F4hWMcbYBiQr4K/jTChms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f2:16:c4:e5:a7:19:4a:d7:12:09:27:ed:af:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d5276557f7da4100113d85739566481540e61c
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=1419d1c629845647b579a8acdbcafd93adb96b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fa:34:0c:34:ba:1c:03:f5:cc:10:3e:c0:70:
85:f9:e8:cd:b5:52:98:a7:ff:68:f7:98:b2:6b:b7:
64:5f:98:89:26:2f:79:30:ec:d3:e0:7c:ed:b2:dd:
67:0e:9a:e8:2d:de:26:6b:67:cc:a6:27:3b:28:43:
d8:01:63:8f:52:5c:a8:9b:64:58:19:23:4a:0e:bf:
fc:16:3e:05:d1:49:50:55:21:e6:02:c3:a7:bf:a8:
fc:93:f0:b1:6e:3e:b2:ab:56:00:a3:87:eb:2c:cb:
e2:47:19:ef:2c:4b:30:93:f3:d5:da:c1:8a:fa:3a:
54:ed:6c:39:ab:c2:d3:60:42:ad:dd:c3:79:61:de:
1f:a6:8d:77:f8:27:be:ae:9c:c7:3c:34:c6:52:83:
87:19:10:71:85:18:19:f0:26:33:5d:e2:7a:bf:c4:
77:ed:4e:d6:0c:2c:14:01:ad:a9:42:89:05:2d:ca:
02:07:24:19:25:52:69:b0:8a:b7:79:63:f8:8e:db:
14:6c:47:a4:09:ef:c6:e1:82:4b:98:2e:62:6b:ec:
9c:d5:5b:f4:bb:2e:91:5b:81:58:8e:53:0a:ff:a7:
30:1d:ce:6c:e2:f7:5a:99:82:55:36:ca:bc:55:86:
4d:18:02:d9:1c:ec:5e:f5:28:e4:18:0c:4f:c4:21:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:D1:C6:29:84:56:47:B5:79:A8:AC:DB:CA:FD:93:AD:B9:6B:74
X509v3 Authority Key Identifier:
keyid:74:D5:27:65:57:F7:DA:41:00:11:3D:85:73:95:66:48:15:40:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNUnZVf32kEAET2Fc5VmSBVA5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e5af16-ddfd-4f3d-96a6-5c5a78bb2b8d/1/dNUnZVf32kEAET2Fc5VmSBVA5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b7:b7:eb:93:cd:8c:09:fe:1c:be:07:7c:6e:ac:57:64:9c:
af:09:25:e7:51:7d:85:d4:34:1d:08:23:e2:0d:15:72:5a:ae:
97:d4:5b:45:28:5c:bb:c8:4e:a9:c0:b3:08:51:b9:27:26:9e:
54:9f:f7:d1:ef:e3:8b:e5:34:c2:de:5c:77:6b:d2:9a:ff:ba:
ee:b2:d9:6c:20:1f:d4:56:40:c8:f6:87:c1:ee:3a:ba:d9:1b:
4d:1c:a6:e9:8c:fa:96:f7:cf:1a:b1:2b:6a:fe:d9:26:72:f6:
0d:d5:81:5e:43:49:fb:e4:3a:ac:ad:53:5d:3c:ea:56:d6:67:
d3:4d:7c:d7:d3:81:fa:ff:de:ec:c7:f9:7d:af:45:28:a9:9d:
5b:8d:e2:bb:57:6c:60:8c:94:9e:82:08:57:a6:90:18:c4:f2:
34:0f:9f:c5:9c:2b:e2:7e:1f:26:81:76:72:05:6b:fc:2c:6f:
5c:77:db:83:67:1a:c1:fc:e7:35:65:a8:b6:77:ed:63:99:ae:
c8:d3:49:fd:a5:43:32:77:b2:7e:31:35:e6:72:f4:5e:35:a4:
7c:0b:2f:9e:c8:93:88:19:62:99:c4:e9:f3:dc:ee:84:14:ab:
fd:91:66:f7:00:ff:85:21:17:59:c8:6e:ae:85:38:14:d5:3b:
58:5e:03:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:20 2025 by rpki-client