Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: ThSTqkmNcJeZp8RWUjEZzkEVhxxdyheKyqofdiznJ1c=
Subject key identifier: BE:DA:E5:92:3B:94:2B:E5:CD:61:00:22:37:5F:17:C1:57:DC:80:16
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 019A4B4EA1258BEEFE096B8C128E1D1A9F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1709
Signing time: Mon 03 Nov 2025 20:00:35 +0000
Manifest this update: Mon 03 Nov 2025 20:00:35 +0000
Manifest next update: Tue 04 Nov 2025 20:00:35 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: r1Ecbg3F4vQFwclQmm+otJu6PJ42YVxsIWXfJtwtvDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:4e:a1:25:8b:ee:fe:09:6b:8c:12:8e:1d:1a:9f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Nov 3 20:00:35 2025 GMT
Not After : Nov 4 20:00:35 2025 GMT
Subject: CN=bedae5923b942be5cd610022375f17c157dc8016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:79:88:5e:46:6d:34:c7:10:07:a8:bb:21:
6c:7f:e9:fb:e3:7f:ee:cd:29:8f:c5:3f:ed:e7:89:
f6:b3:47:cd:58:c0:6b:6d:bb:2c:92:83:2f:9b:ac:
55:29:e4:88:a8:fa:f4:f3:d8:6b:a7:c5:bf:81:33:
c1:7e:91:3e:fb:ce:b6:9e:fe:73:10:72:f0:94:b8:
2c:bb:20:ea:25:e7:f8:d7:3a:ca:f9:e7:fa:18:85:
25:d5:ae:49:a4:ff:e1:b4:31:80:c3:49:3a:14:08:
89:b0:ab:83:a1:50:f4:93:75:e9:6b:d3:9b:ea:18:
44:83:38:b1:c5:6b:33:99:01:dd:b2:b5:89:53:cb:
56:b3:59:a5:df:4b:65:9b:e2:4b:31:47:e6:eb:53:
fc:e0:a7:43:84:9b:15:d0:9b:85:3c:0f:34:3c:6a:
8a:a8:e3:b2:b8:4e:3d:c8:8d:1f:e8:58:0f:26:97:
c8:73:9d:a7:bd:15:ad:da:84:04:42:7e:da:02:7b:
01:11:f1:28:b8:07:75:44:81:d3:e0:c1:52:96:23:
b4:ec:ec:c9:eb:c5:bb:00:e6:b2:34:2f:7e:fe:25:
94:6f:5d:17:47:70:5e:ff:84:e3:cb:ab:4b:1b:e7:
3d:0f:65:f0:6c:fa:5f:d5:f8:d6:4c:1a:46:d0:89:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:E5:92:3B:94:2B:E5:CD:61:00:22:37:5F:17:C1:57:DC:80:16
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:46:76:b9:8e:77:87:9d:4d:74:af:79:9e:d0:b5:1a:06:5e:
29:ba:bb:71:1e:2e:af:8d:78:d6:10:4d:54:98:3b:3a:0e:48:
3d:b9:ad:57:0c:05:23:ee:5a:d4:7e:50:ec:af:91:36:c1:7c:
db:a7:7d:99:0e:5c:58:16:88:a8:2f:b4:c5:2b:45:a2:52:19:
0a:3c:6b:e0:1b:35:01:11:29:9c:66:a1:04:cb:27:9c:fa:b2:
cf:58:96:b8:d0:6a:40:26:d9:38:bb:78:57:2e:c6:54:e2:6a:
bc:8c:76:8e:94:07:d4:3f:4a:6c:b4:4c:88:80:ad:b7:8a:df:
d3:27:36:ff:2b:22:c6:d3:75:d3:a9:dc:50:28:25:d2:3e:fd:
e8:24:4c:9c:11:e4:21:12:77:47:60:63:09:d1:e5:da:9a:82:
92:6b:b8:53:9f:6c:79:02:51:04:93:33:61:19:97:e1:01:a3:
14:8c:a5:a3:e6:44:1d:7a:6b:e7:44:ef:59:49:1c:b3:fb:7f:
e1:48:b5:60:ff:12:d0:45:54:53:b9:b8:00:32:30:de:0c:d9:
a7:e2:df:e8:b4:2c:dd:09:d9:22:fd:a8:a6:0d:b6:ad:1a:bc:
bf:8a:77:38:56:a9:4d:2c:f4:53:30:83:99:c6:85:dd:f2:fc:
f4:19:d5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:04:25 2025 by rpki-client