Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: yBnrC83lvi/Hbm6ujF9bBHxjuflpsecjZ4T8YVVgP8Q=
Subject key identifier: C6:1D:99:68:E0:A6:F5:20:6E:35:EE:3B:C3:6E:8D:8F:F0:4D:87:A4
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 019A7293FA4EEA3669C59033D1E743D3D38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:31 +0000
Manifest this update: Tue 11 Nov 2025 11:01:31 +0000
Manifest next update: Wed 12 Nov 2025 11:01:31 +0000
Files and hashes: 1: T_e8rESGCEo93LhSN21hTfmrTUk.roa (hash: atiJpHuf3SkNFx9qJY7AqgXkIGShTie6KIKrkLdR6O0=)
2: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: IxTFVCnsps0HpqIkQc6p5zJL8CK1kOlIUufQF2lnfEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fa:4e:ea:36:69:c5:90:33:d1:e7:43:d3:d3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Nov 11 11:01:31 2025 GMT
Not After : Nov 12 11:01:31 2025 GMT
Subject: CN=c61d9968e0a6f5206e35ee3bc36e8d8ff04d87a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:0a:f6:fb:df:ec:7a:d1:fb:54:f0:82:a8:
e5:ca:07:30:5e:8d:11:4e:7d:6e:99:eb:ec:e0:a3:
77:6c:d6:72:4d:b4:f4:7a:43:a1:6a:e6:17:84:df:
00:37:a7:11:5f:90:8e:da:39:f3:04:13:87:98:11:
d1:96:d1:b5:c1:66:f3:90:15:4e:89:f6:ca:f4:7e:
ba:0b:00:a8:d5:a8:d1:81:4b:4e:5e:32:0f:ac:2f:
8b:4d:1c:6b:da:a3:d0:df:b0:8a:c7:8e:64:10:ee:
ac:a0:3c:80:20:71:d9:d3:b9:ed:a1:72:5f:6e:31:
3d:77:f7:74:22:ad:15:a1:4b:88:b2:b2:3a:92:7b:
c4:99:93:71:22:e6:37:80:1a:b6:b4:fa:c0:d8:5c:
17:fe:24:7c:a9:bc:bf:df:6c:75:a2:06:21:80:db:
a2:6f:84:53:4d:c0:18:0d:dc:f5:c1:20:c9:18:f6:
80:ae:7b:09:a8:95:4d:bd:94:03:98:ff:a7:28:52:
da:f0:b3:3e:06:fa:5e:ca:62:41:bd:e9:b8:8d:c8:
20:6a:1f:b3:00:18:55:99:5c:36:b2:36:cf:e8:04:
1d:ae:14:bb:07:60:6d:5f:93:a1:49:7a:11:20:25:
e7:55:47:73:3e:b7:ed:cb:0e:13:17:22:26:2f:fb:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1D:99:68:E0:A6:F5:20:6E:35:EE:3B:C3:6E:8D:8F:F0:4D:87:A4
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:b2:be:4d:48:1d:95:23:2f:41:c4:4d:c7:50:63:0b:38:
55:28:eb:bb:e3:10:fe:34:3b:48:cf:70:68:d0:8f:7a:9a:17:
34:b5:7e:44:ab:3c:c1:3e:69:aa:1a:77:3e:2d:ee:e4:cd:4c:
aa:17:94:82:4d:9e:0b:1f:53:1f:cf:f5:21:c7:06:d6:68:d0:
44:71:ed:4f:f3:1c:3e:22:9e:de:e5:46:e2:b6:2f:45:e3:88:
99:53:d4:61:a6:6b:60:94:b4:4a:a5:88:aa:0a:78:3e:27:2a:
da:52:78:89:13:97:ec:c3:20:7d:db:a5:c9:08:76:c8:a5:c8:
24:43:29:19:05:fe:3d:a4:fb:72:66:32:61:57:ea:82:fb:28:
36:2b:de:c4:db:d5:aa:f9:17:87:ca:3f:da:11:7e:0f:e1:db:
ab:9d:82:33:09:87:1c:18:b4:2d:91:b6:1f:c0:2c:3d:6a:dc:
76:4d:87:48:3b:f4:f4:07:e3:bf:f4:93:e5:98:40:36:a1:89:
75:4d:07:db:cc:db:9d:fe:7c:da:d1:c9:b5:94:f1:0e:3b:6b:
a9:9c:49:37:9e:f7:b8:98:b4:d0:d8:dd:9a:4d:82:09:76:cb:
71:e1:b3:03:50:fa:c0:0f:2f:a0:8c:f5:1e:09:32:3f:d1:54:
b7:78:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:33 2025 by rpki-client