Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File: dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier: E4nSYzjArH+hFFdJg8Yqgmgs+os7GfpRHrODJHMOlQE=
Subject key identifier: 5F:CD:2D:5F:6C:68:71:F6:54:AD:A7:81:A3:0C:C3:8C:15:29:32:E5
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer: /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial: 019A71B84002B5CEEC940E35B9B0E564D8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=)
2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: zkSZGqS/h7gUkC5W9AoSQb+wVi/qVFFk7d6CPnqKOVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:40:02:b5:ce:ec:94:0e:35:b9:b0:e5:64:d8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=5fcd2d5f6c6871f654ada781a30cc38c152932e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:23:0f:74:e0:ad:f7:5a:31:95:6e:2b:1a:
48:55:f7:3e:4e:71:23:ae:94:ef:dc:8f:38:3c:82:
85:2b:5b:ae:00:bf:16:e4:f6:2b:01:00:0f:f7:83:
15:91:de:e3:27:9c:dc:15:78:73:ec:fb:ac:fa:6e:
d3:1c:4a:8f:f7:d1:62:85:92:23:0e:dd:d3:c5:64:
d5:87:d7:4e:6c:9a:a3:0e:6d:80:e0:7a:09:31:47:
57:20:ff:1f:9e:06:e0:61:5a:65:54:4f:6e:f3:c0:
14:1c:40:99:9b:cd:27:06:00:b7:7a:71:8c:69:29:
28:ab:07:00:fa:eb:7c:e1:34:21:39:8c:7b:58:42:
44:ff:ed:a7:95:d2:33:d5:d5:58:35:8b:41:1f:05:
bc:83:d6:28:ac:04:a9:3d:42:c3:ed:1a:84:fe:33:
ae:be:75:a5:07:80:19:93:b4:b4:81:8f:3d:34:2c:
8c:ea:6d:eb:8a:88:28:13:3a:74:b3:c6:81:54:78:
b3:89:a9:6d:e9:d0:ad:58:4f:f2:00:1f:27:55:a4:
39:44:e7:43:11:57:91:43:e9:a7:cd:55:19:28:93:
ca:fd:7c:16:16:a4:c7:5e:80:f0:84:c4:c6:3b:fc:
a4:71:29:64:a6:86:47:ec:8f:35:f5:4f:28:20:2d:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:2D:5F:6C:68:71:F6:54:AD:A7:81:A3:0C:C3:8C:15:29:32:E5
X509v3 Authority Key Identifier:
keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3d:c5:02:96:a2:24:28:08:a6:dd:ee:4e:37:55:68:37:7d:
99:1c:f2:b3:ac:a8:a6:05:73:14:d8:70:da:87:8e:3f:4b:6a:
28:2d:60:78:b5:fd:00:35:1e:7a:d9:99:fb:73:a4:bc:35:59:
ec:d4:0a:70:07:4e:5e:4e:71:9a:94:0f:cf:e1:70:5d:fc:3b:
61:9b:39:d6:51:88:e5:0d:3e:34:16:71:6e:67:63:71:3d:90:
1d:56:62:64:b4:33:e3:61:84:c6:f6:c7:36:d2:47:e5:a8:53:
cf:6f:b3:2d:cb:56:64:80:f6:92:6d:6f:f6:4a:c2:b4:a9:41:
5c:3a:fa:3a:b1:45:0c:41:6c:73:a0:47:95:e0:ad:59:de:64:
81:57:55:56:92:7d:6e:8b:de:6d:25:8f:92:a1:98:95:e6:f7:
1f:75:0c:dd:72:72:98:70:80:be:b7:ea:81:b3:7a:78:1f:16:
28:b9:db:d1:c8:35:a5:32:69:41:99:76:0d:e5:cc:f4:52:e6:
e4:ab:fd:14:4d:a9:15:17:aa:ae:f4:3b:cf:90:13:21:34:10:
04:f3:66:5d:3a:f0:0f:cb:f4:9c:49:13:fa:79:68:d1:fa:98:
59:c9:42:cc:a1:97:31:55:d1:dc:f7:e2:7a:e6:ea:cd:30:9a:
db:3e:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:16 2025 by rpki-client