Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: aEnryrD/0Gams9ZIACjJ5H6OqYLQdvZJOfslCEhzzp0=
Subject key identifier: 17:5A:C2:62:0C:F9:EE:E0:78:DF:05:B9:94:2B:DE:48:F0:58:B7:3B
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 019A4E4FB3272748AA26A5308E2F63FC704B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 1290
Signing time: Tue 04 Nov 2025 10:00:37 +0000
Manifest this update: Tue 04 Nov 2025 10:00:37 +0000
Manifest next update: Wed 05 Nov 2025 10:00:37 +0000
Files and hashes: 1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: r66okVKAHyvYEy3uuPGeZTe2C2IPRhDrbzf3EKvdCrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:b3:27:27:48:aa:26:a5:30:8e:2f:63:fc:70:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Nov 4 10:00:37 2025 GMT
Not After : Nov 5 10:00:37 2025 GMT
Subject: CN=175ac2620cf9eee078df05b9942bde48f058b73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:f5:30:d6:46:56:f6:87:a4:70:82:e4:12:
92:78:e6:eb:b8:fe:13:19:02:b0:10:8a:ec:5d:37:
d4:11:19:1f:1b:b4:7c:6d:8b:54:ce:75:d8:fb:31:
08:73:af:ef:e0:af:72:b3:7d:0c:19:f3:99:60:e2:
0d:ca:74:c6:39:17:14:17:a0:62:5e:34:31:72:78:
81:9c:5b:4f:fb:33:40:24:05:8b:ab:ac:c5:4a:21:
e1:6d:4f:09:6e:d5:cd:7f:5b:12:ab:e3:65:b8:56:
15:db:52:99:5a:89:df:34:3f:df:c5:06:58:09:b8:
ce:7f:2e:ac:de:40:5b:13:10:49:95:30:ea:a5:69:
34:07:92:d1:d7:74:c3:b1:b4:ab:cd:1b:29:b3:ce:
e5:fd:2c:9b:b9:76:3a:ed:e3:48:7c:7b:24:88:f6:
e1:aa:e5:a2:03:0a:f6:ce:f5:3f:af:2f:26:f0:34:
26:43:de:32:cf:4c:47:3a:bb:ca:31:28:89:d4:00:
c0:27:2a:46:14:c9:02:4b:1a:94:38:7f:c5:57:11:
a1:17:ae:f9:1b:36:e4:2c:43:39:37:39:e9:28:32:
12:d9:9d:7a:6c:49:9e:1c:e8:c7:ca:4f:55:aa:cd:
35:c4:31:34:7c:6c:9b:a6:17:02:61:a0:1d:83:0f:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:C2:62:0C:F9:EE:E0:78:DF:05:B9:94:2B:DE:48:F0:58:B7:3B
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4a:7e:97:84:5f:dc:3c:ab:cb:b9:91:7a:34:67:75:be:56:
94:17:32:7e:03:65:4a:09:42:af:6b:25:69:d1:a8:2f:83:5c:
77:55:bb:d0:c0:30:aa:dc:f7:de:b9:74:e0:87:fd:5c:54:39:
bb:1d:75:7f:b1:a3:a8:e2:c6:75:1e:5b:b6:45:92:19:fc:41:
b0:40:60:98:b2:3a:52:74:2f:ff:37:97:b5:ff:4c:77:11:0c:
6b:d6:e9:82:5a:82:d8:35:96:33:21:e4:a5:a1:2a:fc:96:aa:
40:17:cf:93:53:fe:a6:6d:6b:3e:93:73:63:b4:8e:09:44:d9:
4f:cb:13:68:0b:11:b0:b4:df:b1:e5:80:96:b9:17:e0:6f:df:
08:6a:4a:2e:dd:c9:c9:49:75:01:76:85:e4:8a:2e:6f:d5:36:
4a:15:0f:46:30:62:a9:aa:b2:6c:e9:db:1e:1b:34:9b:14:03:
42:f7:87:66:ab:93:88:29:82:43:0d:be:2a:ae:06:d3:c3:42:
5b:49:4a:fd:55:a9:0e:67:2f:ac:34:97:2f:25:99:dd:8b:2c:
bf:97:85:a3:22:69:62:a7:c0:18:3f:10:be:eb:15:25:64:91:
90:1b:be:9b:79:a3:c4:34:38:8e:f5:71:aa:53:84:09:1f:f0:
a1:de:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:41 2025 by rpki-client