Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: IeSbp66uGovfZjXIzeFGEVqqnfxAZDR9kScDY/oAM1s=
Subject key identifier: 7B:F0:62:4B:2A:7C:53:51:C9:A6:CE:BE:E7:6E:B2:09:73:B0:14:D7
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 019A71B80F89B9360665528F560477EF62F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 17A3
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: u1p7PsrPLLNJjnTFEFyQnd1yNMAPjtUO7LzcAQMVzMg=)
3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0f:89:b9:36:06:65:52:8f:56:04:77:ef:62:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=7bf0624b2a7c5351c9a6cebee76eb20973b014d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:2a:da:8e:2d:44:99:91:20:62:03:95:0b:
d7:bf:70:65:a4:7a:36:ee:54:4a:14:30:12:23:b5:
22:4f:82:64:97:ad:41:98:61:4f:a0:77:26:23:45:
77:60:c3:40:d8:a8:c0:ee:6e:c9:88:db:8e:54:f6:
f6:f7:e0:55:8b:98:c6:b5:62:35:f8:2a:e4:1d:1c:
7b:8d:de:9a:c4:6f:54:35:ec:f5:6e:14:36:e7:37:
24:df:c9:17:ea:d5:17:17:de:e2:83:2b:28:c0:a5:
65:9e:c8:76:b2:ac:9f:49:bf:86:b8:85:69:10:74:
90:08:46:27:3e:18:bc:ca:6b:c3:df:ab:fe:e3:5a:
14:0c:69:8d:b7:ea:ec:81:9b:92:86:93:29:a1:ea:
e7:f7:65:92:e8:d6:24:46:67:2d:e0:6f:27:e1:4c:
25:ab:cc:7c:52:46:bc:8b:de:8a:af:7e:18:20:e8:
4e:56:cc:f1:5c:64:a0:d6:a5:81:4e:af:52:0a:20:
75:3c:ae:04:02:0f:aa:f6:49:c6:03:91:ef:a1:a5:
c6:86:0a:6e:02:88:06:a1:e9:4f:9b:0a:11:8b:a2:
d7:a7:5e:56:bf:b2:08:5a:48:d9:4e:69:8a:41:b7:
68:65:80:c6:24:a0:ea:34:db:72:d6:0b:aa:ac:52:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F0:62:4B:2A:7C:53:51:C9:A6:CE:BE:E7:6E:B2:09:73:B0:14:D7
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:39:ab:0c:80:c2:61:10:11:a8:56:34:83:48:b9:e1:5d:c6:
56:aa:ca:8f:9f:33:46:a5:20:90:32:ee:f4:8b:1e:52:74:fb:
6d:6f:5e:7b:15:13:11:59:f6:e9:e0:6c:f1:f8:e9:50:e1:1f:
19:98:51:f6:31:a4:b1:93:84:1d:92:7f:3c:a5:9f:1d:ff:7b:
ef:96:43:bd:74:f4:68:40:f8:78:93:ff:53:70:57:26:76:5b:
0e:33:2a:79:c9:7c:a8:2f:ca:a2:b6:fc:8c:be:56:da:88:35:
fe:de:2f:37:29:62:f6:61:8c:bf:db:ba:fa:3e:02:53:73:e1:
29:00:72:8d:43:7e:2a:ca:ab:5b:7d:4f:ce:72:d6:47:3e:28:
4e:39:cf:8c:5a:8e:0a:34:dc:07:38:18:80:6c:7b:18:3d:73:
ab:03:e6:e1:29:ce:90:58:d3:ab:d3:a2:0a:2b:39:55:50:41:
8e:68:e1:2f:31:66:b4:65:7a:61:b6:27:0e:11:95:72:de:9b:
2d:75:15:cd:56:6d:f2:0b:eb:63:68:33:7b:8f:c7:e8:76:c3:
46:0b:3a:65:21:aa:4c:52:fc:1d:b5:69:21:75:dc:88:e9:c1:
0e:70:3b:3b:10:92:94:b6:5a:76:cb:95:61:f3:72:58:47:c3:
9c:c9:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:12 2025 by rpki-client