Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft
File: dTxuAUKu56nlon0Vd5su7LaI3ac.mft (raw, json)
Hash identifier: b0CmgO3nijEprWr3Y4ZXNX78a58djdqjSkbG8Qn9OzE=
Subject key identifier: F4:54:0E:9B:AD:67:E1:22:C0:5E:1A:44:17:B9:4F:87:4E:C3:A5:22
Authority key identifier: 75:3C:6E:01:42:AE:E7:A9:E5:A2:7D:15:77:9B:2E:EC:B6:88:DD:A7
Certificate issuer: /CN=753c6e0142aee7a9e5a27d15779b2eecb688dda7
Certificate serial: 019A7149B7BBFF73EF378584558DC1DE96EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft
Manifest number: 0109
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: dTxuAUKu56nlon0Vd5su7LaI3ac.crl (hash: PK6J7oSOCpMGVLx6wUz/ICoabYjstaRUxRnvSlf8mfk=)
2: pSR-rZwOGiE17rW57fz_6H8OuhA.roa (hash: hndxTaLME4hMNFfxFHRJ5PuHa6bS13FEZVnlx7XE/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b7:bb:ff:73:ef:37:85:84:55:8d:c1:de:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753c6e0142aee7a9e5a27d15779b2eecb688dda7
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=f4540e9bad67e122c05e1a4417b94f874ec3a522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b2:ae:4d:7f:4c:2d:fe:fe:42:ae:03:88:11:
ef:09:da:48:3e:28:f2:e1:fc:fc:d4:f7:43:2e:a3:
65:ed:4b:ce:53:23:d3:83:13:22:6c:b9:8b:20:a8:
9e:10:d9:fb:50:9b:6f:cb:91:55:c8:80:a9:7c:aa:
7f:37:d1:b3:77:bd:8f:fa:de:5f:7c:b8:a8:8b:82:
a9:c6:a5:76:1c:99:87:7c:67:36:0b:c0:91:20:70:
2f:bd:d7:2b:85:01:41:31:d5:c3:7c:3d:8f:a3:34:
af:a0:6d:1f:4d:77:26:f9:12:59:1c:b6:72:c7:e9:
1c:55:4c:f3:d0:a9:5f:cb:b7:4d:63:6d:a8:2a:b0:
3b:86:06:73:e2:13:66:d0:db:df:26:f0:93:2f:3e:
af:21:50:26:57:82:44:ff:52:de:66:42:a1:3d:52:
28:8f:21:ad:02:40:60:69:99:4a:1d:92:81:78:b2:
60:a5:d5:e9:b7:d3:8e:37:33:79:bb:c4:5b:1a:7b:
99:81:f6:0f:93:42:cb:9e:21:2e:e8:ca:3f:81:f3:
89:a0:f4:fc:85:98:5b:aa:22:ba:ac:c3:25:58:eb:
2f:4c:a1:2f:d3:1f:11:c0:75:b5:3b:bc:55:23:51:
25:a5:30:fd:2a:9a:18:0d:3e:ed:70:c5:d4:75:9e:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:0E:9B:AD:67:E1:22:C0:5E:1A:44:17:B9:4F:87:4E:C3:A5:22
X509v3 Authority Key Identifier:
keyid:75:3C:6E:01:42:AE:E7:A9:E5:A2:7D:15:77:9B:2E:EC:B6:88:DD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a9:dc:15:45:b3:1c:b3:1e:cd:82:18:24:d8:83:f0:c9:5d:
cc:47:d6:51:85:1b:c6:06:fc:2e:23:4d:c5:61:82:b9:94:18:
58:76:4c:85:3c:36:13:23:3c:32:91:84:2f:00:82:53:c0:0e:
0e:b3:c3:3e:af:ee:c3:7b:94:ae:7c:43:b6:0c:3d:95:da:c6:
63:fd:ec:57:5d:6b:14:70:97:d6:4b:47:f6:db:a5:93:a3:aa:
a7:6a:30:25:56:77:d0:28:85:c8:95:45:e6:d3:d4:c3:5a:14:
dd:dd:65:13:b8:57:e2:bb:2e:21:41:40:7c:59:24:4e:e8:81:
9e:31:aa:14:67:6c:39:f7:dc:61:93:76:04:c2:7c:23:27:cd:
d4:9f:4f:0d:7b:91:b2:49:2a:02:41:f4:4f:e9:47:0e:49:09:
09:9f:96:6f:c6:de:9b:4e:4f:ab:5e:2a:ca:90:67:a1:39:d3:
16:0d:c1:d9:67:b6:1c:6e:f9:4e:13:15:1c:84:87:ba:c4:b7:
cd:c6:f8:8a:e3:e2:63:98:f4:a2:b9:f8:d8:38:d1:9b:3e:5b:
5f:0d:95:ab:4d:7d:61:45:d8:3e:1b:a5:28:91:30:1b:2e:12:
10:d0:8f:98:3d:19:3d:9c:78:44:ce:ae:d7:72:ad:71:c6:dd:
cc:59:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:45 2025 by rpki-client