Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
File: dygFKufRD9ImGiJI_ADSArDyVXQ.mft (raw, json)
Hash identifier: C6PTemB2R/7yVC5e42gBdlT8wDPBM2aEwWhVXzl+gr4=
Subject key identifier: 2C:25:BF:4D:41:B8:5F:7A:50:85:38:AC:F5:72:57:9D:52:F7:33:BC
Authority key identifier: 77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
Certificate issuer: /CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Certificate serial: 019A7225BAB30DD81CFF8F2F28EBB63240B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: PVmSZDGrn03CmC3ystxrDr3TZfo.roa (hash: Pjr4/1MqbKXy/FJJPo44XPup/Kfr50sF5z3bYT1o0SU=)
2: XU_IzR1XNktTavIx_nI3l6sD7WI.roa (hash: QAWYFwQ7d4DDdntznflGhPwEdw+c4lyHMRKRE5reGnk=)
3: dygFKufRD9ImGiJI_ADSArDyVXQ.crl (hash: coRTj6olQsp/s5whA0++e/ARwwD540cDVWsdqa01Z8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ba:b3:0d:d8:1c:ff:8f:2f:28:eb:b6:32:40:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7728052ae7d10fd2261a2248fc00d202b0f25574
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=2c25bf4d41b85f7a508538acf572579d52f733bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:ce:28:de:a4:ba:fd:cb:b0:ce:4a:ee:6b:
64:69:dc:cb:b3:4f:94:7a:46:d1:8d:d8:5c:25:12:
3b:0b:a8:86:78:0f:05:46:27:27:ac:ee:50:c5:6d:
63:82:99:05:34:03:e7:e5:57:cd:84:58:5e:c2:4b:
6e:42:40:7f:83:f6:95:c2:81:f4:d4:5c:0c:dd:82:
ca:00:6e:56:f5:c4:cd:5d:6a:c5:83:d8:34:56:6c:
dd:97:ee:4b:8a:5d:dd:b2:84:44:88:f1:74:44:a3:
27:c5:7a:ab:85:9f:c2:6e:b3:7f:a0:96:3c:7c:91:
52:ee:92:cf:37:8d:29:54:af:37:f5:dd:1f:4e:81:
3a:a1:34:dd:77:e8:97:51:56:35:a4:31:cf:41:28:
55:9b:18:ec:94:fb:2d:10:b2:61:8a:fe:e9:f6:bc:
7e:0c:08:02:29:95:e7:45:29:1e:03:51:7a:26:1f:
d5:e2:e2:e5:3d:eb:57:82:5e:63:72:88:0b:6d:03:
b3:70:70:83:fd:99:08:44:f1:09:70:7a:8b:1c:6e:
95:b5:db:75:cd:a5:9f:a6:d0:9e:b2:72:dd:f3:e2:
e9:cb:c7:0b:19:f5:88:b6:1d:5c:02:39:27:c5:56:
96:39:bb:9a:6d:73:d1:65:c1:8d:79:63:8e:97:0d:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:25:BF:4D:41:B8:5F:7A:50:85:38:AC:F5:72:57:9D:52:F7:33:BC
X509v3 Authority Key Identifier:
keyid:77:28:05:2A:E7:D1:0F:D2:26:1A:22:48:FC:00:D2:02:B0:F2:55:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygFKufRD9ImGiJI_ADSArDyVXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4cb1b1-701b-4e42-8b05-2cbc40e5fe62/1/dygFKufRD9ImGiJI_ADSArDyVXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:f8:d1:af:74:8a:9f:7d:ca:57:8e:fc:fb:de:46:a6:cd:
d7:9c:44:e6:13:de:82:b4:6f:e5:22:32:81:ac:fb:60:10:6b:
cc:97:82:4c:34:1b:2b:e9:2d:8b:3d:df:c2:f1:84:fc:0c:fc:
72:3a:e0:84:aa:f0:d5:df:38:20:fc:bb:ac:f1:1a:37:25:d6:
94:9a:0a:73:85:ae:98:02:92:3a:57:b2:7f:4e:be:84:5b:21:
46:99:08:70:09:3f:a1:90:c5:fe:8d:d0:5a:5c:ed:a4:2b:87:
f7:fb:a4:ce:f4:65:62:29:bd:04:20:ac:09:99:47:7e:b8:8f:
41:96:ca:94:8a:48:51:79:25:e6:de:1f:8c:39:f2:a2:05:35:
31:b6:5f:dc:e5:8d:a3:73:7b:bc:41:87:e5:5e:cf:96:27:f5:
9a:3c:c6:66:21:8c:5c:68:be:ab:52:cf:bb:b2:30:80:c1:dd:
15:10:6f:ec:e6:0f:68:38:01:52:54:0c:2c:97:3b:2f:7f:74:
c2:ed:07:28:f3:af:90:cb:c3:8a:5d:f1:3e:44:8a:19:82:f4:
16:a4:62:3f:55:b7:6e:d7:f7:6c:bd:5b:14:25:0a:d2:89:73:
bb:43:5a:6a:9b:c2:9c:7e:46:da:38:5b:76:00:a2:45:03:97:
79:6c:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:07:30 2025 by rpki-client