Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
File: dZ27tMoEMpvFCdbdHNULk1atiQY.mft (raw, json)
Hash identifier: jrLa9/0cT0x1EknM8zb0xYqgwNRY0hrHRkZmuYyIrS4=
Subject key identifier: C3:28:AD:57:ED:BB:70:CF:64:8D:A4:6C:E1:75:F4:F8:C6:F8:07:FF
Authority key identifier: 75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06
Certificate issuer: /CN=759dbbb4ca04329bc509d6dd1cd50b9356ad8906
Certificate serial: 019A70DC4F5958184DF25B4E449D3D78F8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
Manifest number: A6
Signing time: Tue 11 Nov 2025 03:01:17 +0000
Manifest this update: Tue 11 Nov 2025 03:01:17 +0000
Manifest next update: Wed 12 Nov 2025 03:01:17 +0000
Files and hashes: 1: dZ27tMoEMpvFCdbdHNULk1atiQY.crl (hash: ZeoDvtjxU3c+hSWunFKyYxjvmGGcyZw5jwLpjj39Hfc=)
2: rOJqhADJ5rc7U_0FXgnllg311Uw.roa (hash: Cbl9MsCAqt+xAwhZCVrGdH/26tfRlYC7HA90lZevZDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:4f:59:58:18:4d:f2:5b:4e:44:9d:3d:78:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759dbbb4ca04329bc509d6dd1cd50b9356ad8906
Validity
Not Before: Nov 11 03:01:17 2025 GMT
Not After : Nov 12 03:01:17 2025 GMT
Subject: CN=c328ad57edbb70cf648da46ce175f4f8c6f807ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:91:2a:0f:90:b8:23:97:d7:56:4b:09:cb:08:
75:f7:b7:57:c0:18:98:ce:36:f5:21:21:dd:4a:a2:
20:41:fb:23:d0:38:fb:ab:18:e5:52:8c:17:52:2e:
e0:11:ff:7a:c4:8f:a0:d3:e3:d5:e5:3c:0c:27:17:
eb:79:ce:06:f1:35:8d:26:84:90:a2:4f:0b:a2:34:
f5:37:55:f4:0f:a5:30:d2:7a:9b:6a:e1:23:13:2c:
88:6a:c8:0e:c6:55:78:21:af:fb:b1:54:f8:a5:f4:
b1:79:53:d1:cc:75:18:4a:0e:79:8c:9a:e0:5d:cd:
d9:98:61:bf:ab:95:2e:1a:a8:b2:91:dc:53:0e:bc:
6e:a5:8f:5b:8e:2c:f0:77:c9:40:96:b0:d7:83:8f:
3b:1e:dc:f9:06:db:28:b1:43:8b:bb:7a:2e:83:5d:
de:2d:53:c5:94:ed:24:2d:7a:79:b8:b7:51:a7:6a:
57:20:45:b6:b7:d3:94:d7:98:b5:46:4c:ff:f0:50:
0a:e1:2e:e3:0b:37:f0:11:68:be:2a:ca:a2:5c:49:
da:f5:04:31:37:60:7c:b0:db:38:1d:20:bf:09:18:
df:e4:23:88:3b:b7:21:9e:5f:3e:d7:69:20:fc:39:
53:18:a3:e4:4d:63:09:46:fb:28:e2:1f:ac:1d:bf:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:28:AD:57:ED:BB:70:CF:64:8D:A4:6C:E1:75:F4:F8:C6:F8:07:FF
X509v3 Authority Key Identifier:
keyid:75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bf:d0:55:75:cf:78:ff:85:f4:e7:de:a0:30:13:75:45:06:
45:b7:1f:68:83:19:38:33:38:e1:9a:16:23:fc:77:e8:0a:22:
42:3d:5c:cc:05:f8:7c:3a:11:a3:0b:1d:1d:12:1a:07:dd:84:
1c:53:b0:dc:60:8e:19:34:a9:02:a9:d1:55:db:12:99:5e:f2:
a8:06:93:9a:a8:92:d7:34:c5:b4:0a:1b:31:d6:1b:b5:a1:24:
24:14:9d:d1:8a:90:30:dc:89:d1:17:45:87:84:f4:a6:d8:85:
fd:5f:b2:b8:21:31:05:ab:8d:09:80:cb:dc:d1:76:5f:08:a7:
52:e1:a3:ad:d2:fe:50:4d:65:19:65:a2:ef:79:f7:cb:68:69:
34:71:cc:56:6d:1e:9a:8b:7c:e0:c4:bb:89:8e:08:2f:22:68:
7e:6d:80:40:4d:00:7f:25:0c:81:9c:7b:40:01:c1:4c:e0:8f:
8d:d3:c8:51:85:0e:c7:18:16:ce:83:27:05:52:fe:1a:32:88:
19:fa:2b:99:61:10:1b:34:fc:e9:54:d9:72:71:0e:c6:5b:7c:
f4:12:6a:27:ac:b8:81:03:6f:8d:69:28:bd:ea:56:01:d3:2b:
29:62:be:dc:4b:2a:86:b4:ec:0e:e3:a0:c8:56:e6:d0:21:71:
1c:b7:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:19 2025 by rpki-client