Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: J6kUX7Jgl56M8nrNlMz2VhgPtMCQPwG5s4LGUpE35c4=
Subject key identifier: DD:E3:24:37:AB:6B:0F:1A:59:48:74:41:B4:30:10:8B:0B:1F:BA:71
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 019A7149D3AAA62CE950C6DD6C09836B37A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: 1FoxhpST9b/S+I7+CzehKvrDfxcpC+GdYKAxn6kEJVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d3:aa:a6:2c:e9:50:c6:dd:6c:09:83:6b:37:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=dde32437ab6b0f1a59487441b430108b0b1fba71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:2d:dd:90:8b:79:32:50:f7:23:d7:b6:0b:
67:eb:7f:67:d4:78:59:cf:47:98:0f:e1:ac:22:f4:
75:03:77:f1:72:47:f2:39:f7:36:1e:dd:01:65:3c:
e6:c2:26:45:57:45:68:4c:a0:0b:7b:0e:08:a0:a6:
39:d9:0a:64:c8:1b:e4:f9:15:01:48:85:29:60:53:
95:8b:5a:c7:f4:aa:2c:0a:2e:cf:ba:55:d7:10:e4:
0a:00:50:d7:33:1b:d9:93:50:13:92:68:06:2a:75:
96:62:ae:d8:aa:ac:b1:c5:66:b9:50:2a:40:f1:13:
32:55:75:f7:7b:55:81:cb:59:c7:90:12:5b:40:9b:
8e:4c:9d:77:a5:fc:d6:ca:f7:b0:f8:f6:a2:23:dc:
cb:81:76:55:6d:c1:aa:a2:43:66:63:54:65:21:39:
dd:fa:08:17:bb:d5:7a:af:07:8d:46:5b:68:3b:b4:
e7:05:48:3c:a5:52:af:61:97:9f:43:0e:87:dc:dd:
1a:26:19:28:e0:06:83:a6:d8:d8:66:47:c0:b4:ab:
d1:44:c8:e1:19:e7:b5:64:c7:0b:54:63:04:9d:bc:
42:40:8d:35:0c:2d:6e:df:13:68:9d:e4:25:ac:68:
3f:94:63:40:9a:2a:5d:05:69:d1:83:2b:9b:c6:38:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E3:24:37:AB:6B:0F:1A:59:48:74:41:B4:30:10:8B:0B:1F:BA:71
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:61:c7:2b:18:c1:37:cf:bf:6a:f3:52:3b:5c:ba:44:de:04:
f3:50:07:4b:5e:fb:f4:cf:ae:4c:9f:8d:e0:09:b6:9d:11:13:
a0:2d:4e:f6:cc:a5:40:c7:fa:3e:28:6d:4c:c3:6c:2d:1e:2e:
bd:e0:65:c8:05:ba:17:a1:f0:b4:f9:86:49:c0:a1:f5:de:d5:
c8:b6:76:4d:52:e3:0b:d3:0b:8e:74:ac:bb:f1:2f:0d:18:81:
d9:dc:6b:66:0b:ca:3c:df:1f:19:dd:f7:9e:bc:46:2e:33:3c:
1a:55:29:51:10:27:c4:57:8a:da:c4:71:b0:da:c4:9e:39:1f:
9b:af:04:60:8f:37:96:81:e4:3f:f9:16:63:69:dc:52:9d:9d:
9d:5b:e9:71:85:bc:ce:84:e7:f9:ec:bb:dd:a7:b3:ae:e6:4a:
b7:a3:15:a3:d7:07:c4:dc:34:a1:23:cb:96:f8:6f:b9:6a:78:
d3:62:33:d2:a2:03:91:c0:3e:b0:cc:2c:13:8c:1d:20:20:47:
cc:94:16:2e:de:5a:3f:90:c9:7c:1c:00:a7:b8:42:51:17:57:
4d:e1:5e:d8:a5:86:d4:76:aa:23:e7:8b:4e:3c:6e:64:e4:31:
b6:b2:a5:ae:be:65:d2:9b:07:82:a3:e6:78:ec:24:35:d3:eb:
4a:93:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:25 2025 by rpki-client