Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: yF1T5XUaemBbPKCfFVxNIe21XK8aPF/smWygepi/IIk=
Subject key identifier: 5D:58:FF:CD:EE:CB:96:11:B4:1D:F2:DF:8A:D4:0C:36:ED:2B:4F:6F
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 019A7293ED1C3D3B1B9DF947B449AAC81758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=)
2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: 0Eo4g6xjUyPkFkJq/OW1nYT7EMAR2nWiNImhAcnIixs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ed:1c:3d:3b:1b:9d:f9:47:b4:49:aa:c8:17:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=5d58ffcdeecb9611b41df2df8ad40c36ed2b4f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:5c:c2:9e:c3:ef:f3:1c:34:c6:ee:d5:51:
80:0c:67:bd:33:08:60:ea:43:96:92:01:f3:21:4b:
4e:fd:8a:c9:d6:ec:d6:e2:6b:db:d8:d9:5c:a8:41:
3a:de:6f:58:73:b5:99:91:9a:81:05:ef:d6:40:3c:
eb:7d:79:cc:ca:6f:85:3c:d3:5f:4a:e7:fa:43:a7:
3a:cc:c7:8f:1f:ee:a5:13:6b:63:ce:d3:ce:d2:1f:
db:16:47:0a:e7:f3:30:e7:40:08:7d:7f:d5:fb:8e:
9d:50:4f:d0:7b:8b:aa:1a:19:1e:a1:7e:70:b8:d5:
e1:2a:13:93:ca:dc:bd:a5:c9:51:ea:a8:ad:f0:39:
b7:84:79:a7:b9:09:40:d4:98:02:2e:d4:84:43:4a:
7d:77:37:09:29:f4:1b:be:2a:44:8b:72:a8:75:70:
35:fa:cf:b3:71:d3:3c:18:ea:8d:44:e1:d0:7a:69:
c8:ad:59:49:c7:34:b6:80:61:ca:cf:43:11:26:0a:
08:42:15:f3:59:5f:ee:46:b7:18:d8:6e:ff:6e:04:
c9:a0:04:69:86:ac:29:90:35:43:05:6d:e7:95:7a:
f6:ac:df:69:74:82:8e:7c:9a:9d:6d:d6:e5:08:fa:
98:7a:7a:7a:53:ee:12:cb:c7:79:4d:ff:4c:54:dc:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:58:FF:CD:EE:CB:96:11:B4:1D:F2:DF:8A:D4:0C:36:ED:2B:4F:6F
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:25:96:93:32:eb:7d:3c:44:6d:58:49:53:ec:17:35:b4:ce:
4e:5a:9e:e7:b2:6d:25:36:c3:19:a2:39:23:ef:aa:b2:13:2f:
4d:c4:d1:f1:a0:03:ba:51:3a:41:ae:28:f5:29:dc:cb:03:35:
86:3b:6c:41:81:09:82:bc:85:11:ff:04:a6:50:c1:f7:9a:77:
64:0e:0b:79:a5:f1:6c:57:8d:d6:7b:03:27:97:ac:5c:2d:ad:
51:13:89:f4:52:ec:62:33:c2:e4:7c:66:df:23:94:85:94:9c:
e4:62:da:de:57:2b:20:d4:20:82:18:ba:6e:34:01:48:66:20:
0c:32:f6:be:75:64:82:3e:77:29:22:27:83:7b:7b:af:b7:d3:
91:76:c7:07:d9:1e:8f:83:2e:06:3b:7f:97:6a:d5:af:8e:38:
03:7a:de:b5:6b:e4:90:76:4b:f5:18:6f:f9:69:4c:c5:ab:4b:
1d:1b:83:29:1b:8c:91:f7:7f:2e:4d:c0:bd:ef:d8:4f:6d:81:
59:c7:e3:64:f1:10:2b:f8:f1:10:13:22:a4:3f:df:67:e7:27:
89:b8:ba:57:22:89:90:f4:4d:f9:c9:17:dd:96:58:b8:0f:5d:
40:6f:ae:a1:79:13:42:dc:fb:26:b7:d4:7d:e1:44:76:8d:b7:
6a:c1:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:50 2025 by rpki-client