Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier: M4dGXcE0fMBRdvX88+EQVScnSi1LrTt48PACOeD+znE=
Subject key identifier: 1A:2E:46:2A:2F:EF:5B:0F:8B:07:45:CD:79:DC:5C:09:45:9D:2A:B4
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 019A71EE7CA7036245971D56B63F702A2932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number: 0709
Signing time: Tue 11 Nov 2025 08:00:46 +0000
Manifest this update: Tue 11 Nov 2025 08:00:46 +0000
Manifest next update: Wed 12 Nov 2025 08:00:46 +0000
Files and hashes: 1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: sSsP0PDBDeTU7LOCOPdKV69ATN8IMmsX1aroJP7o+g0=)
2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7c:a7:03:62:45:97:1d:56:b6:3f:70:2a:29:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Nov 11 08:00:46 2025 GMT
Not After : Nov 12 08:00:46 2025 GMT
Subject: CN=1a2e462a2fef5b0f8b0745cd79dc5c09459d2ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:92:7d:35:82:48:c9:2b:2e:15:bf:58:18:
20:60:b0:aa:c6:e6:99:5e:94:06:07:f1:0c:d0:43:
dd:cd:61:98:05:c8:92:3a:2e:5f:b5:0b:1e:8a:7c:
a4:14:f5:78:23:bd:6a:e8:c7:70:63:76:92:dc:d9:
c5:79:77:fe:7e:95:17:e7:b4:bc:29:a6:c0:d5:01:
83:1d:ad:7c:ad:10:61:b8:c7:db:f8:64:ee:18:58:
c5:27:eb:e5:5e:6c:aa:40:8c:32:f4:f2:d6:39:5f:
5a:03:c0:a0:4c:83:63:dd:e1:f6:55:45:ae:f7:00:
21:c3:ab:e1:d8:28:cb:c0:54:c1:62:d8:92:bf:75:
84:09:fd:51:48:b5:3e:8d:b7:4c:65:37:d9:1c:21:
8b:99:18:41:44:97:28:68:85:39:59:fc:a9:79:0f:
15:ae:89:96:db:f1:d9:2c:ea:5b:27:28:91:e4:02:
bd:a4:3a:7f:f7:e8:5d:de:49:f3:63:cd:bf:13:7e:
c7:78:21:73:58:b3:10:ce:7b:a2:96:be:ab:2b:1c:
b8:93:a0:af:9e:5f:69:7b:02:34:43:19:9e:a4:19:
04:25:3d:a0:5f:cb:ad:36:9f:ba:12:54:ac:02:76:
ed:71:c8:04:f2:a7:ad:38:09:1f:67:d0:3f:2f:09:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2E:46:2A:2F:EF:5B:0F:8B:07:45:CD:79:DC:5C:09:45:9D:2A:B4
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:64:99:85:78:e6:3b:02:9e:79:89:fe:8c:51:4b:9b:d8:43:
ef:08:7a:97:6d:41:cc:3a:64:b1:14:55:2b:ba:0b:6c:d4:4a:
18:24:0b:65:51:69:66:a7:0c:aa:37:4a:25:02:d7:cd:36:4c:
e3:a7:69:4d:3c:5e:a8:84:bb:e4:ba:70:51:76:c7:5c:cd:96:
08:fb:d3:3a:e5:f1:c6:4d:7d:3b:ab:7d:79:1a:7f:86:28:7d:
aa:94:73:29:70:1c:27:70:9b:d1:77:b1:fe:4e:7a:8b:60:c7:
bb:4a:09:18:cb:68:60:f4:d6:6b:8f:f5:c9:9b:93:dc:17:ff:
cd:3e:aa:75:e7:65:60:4e:1c:a4:1d:86:c8:e6:ca:81:7f:fe:
bb:f6:7b:96:96:cc:2e:53:7d:b9:d7:c8:0c:1f:9b:34:95:40:
af:e7:4f:fe:82:df:32:2f:7e:e6:69:2f:c5:09:8e:ba:4f:b9:
85:0b:48:91:34:e5:f9:db:a2:cd:5e:66:0d:90:11:63:c3:2f:
2e:8b:cc:66:fd:69:2a:b7:f1:ed:aa:b2:81:65:a4:03:81:49:
7c:e5:67:3e:02:60:94:59:99:db:43:cb:b1:87:9d:de:8d:f9:
b5:72:20:e2:f1:ad:90:d8:44:bd:e7:3a:8f:04:e7:ee:b0:ae:
49:b3:e9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:33 2025 by rpki-client