Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: NcNspB3wtUTFSMGcGlOnoPOtl04W8mxtboeCTGeV5Lk=
Subject key identifier: 9A:94:F7:92:7A:21:FB:71:DF:08:14:D4:9F:BC:3E:C3:A0:52:E3:91
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 019A71B9157FDE7F6E6A65CAD586D6CC40DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 06A2
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: 5qU9a0oGWmmroynSN69UsFF4Lyw.roa (hash: ck+/DYuUP9vUcXqAS40voGKy/13DDBxa+VF1/FTp/II=)
2: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: 7W58YtkFB5gQFWyjvxqqLe/jZGAgjWdL0ZgnPgdLnAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:15:7f:de:7f:6e:6a:65:ca:d5:86:d6:cc:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=9a94f7927a21fb71df0814d49fbc3ec3a052e391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:81:93:7a:b5:e6:f7:36:71:8d:fa:10:c6:
06:ab:f3:8a:fd:d4:ec:58:ea:6b:6a:e7:5a:cf:c2:
97:27:68:f0:e7:bb:a3:bf:e3:0e:af:40:70:f2:24:
56:66:3a:32:c9:ac:b4:88:12:8e:3a:4e:5b:ef:7b:
68:96:53:00:36:b1:c2:9a:3b:62:47:79:47:61:2f:
22:9f:f6:d7:c5:00:8c:90:35:5c:66:88:26:ff:f3:
9b:d7:b3:be:4e:be:70:b9:08:18:37:be:a7:15:c8:
d1:b7:94:0e:53:38:b5:fa:26:ca:72:3a:d7:67:6e:
b5:10:09:0a:82:67:9b:59:88:cd:64:c7:02:1b:46:
11:96:a2:a0:32:4a:10:6d:fb:df:67:fa:c6:23:57:
eb:86:92:97:3f:5d:f7:84:bb:59:43:1d:93:cd:b6:
04:44:d2:84:24:a0:eb:61:03:57:6f:d3:06:60:d8:
ae:8a:60:80:80:d2:e2:58:cc:1b:74:42:92:cf:bd:
1d:97:d2:ca:3f:d2:b7:04:aa:d8:eb:77:fc:0e:f4:
a3:6b:35:e0:b4:17:67:e0:b0:30:a0:24:30:0f:5a:
a5:e4:87:f4:99:e1:4c:95:cc:27:2c:9b:35:83:3b:
9a:7a:af:c9:4c:0a:0d:18:db:d0:9a:bd:92:ee:55:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:F7:92:7A:21:FB:71:DF:08:14:D4:9F:BC:3E:C3:A0:52:E3:91
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:78:30:f2:c1:60:a1:22:37:cc:1c:77:f5:d5:32:8e:e8:80:
ab:c7:cd:f4:0d:22:ea:d7:f0:7f:0d:c7:3e:cd:7d:91:c4:91:
90:bc:7a:7b:3c:16:33:f5:a9:03:81:9d:34:7e:b8:ce:da:ca:
9e:12:d5:5f:d0:5b:bd:22:ec:53:ae:db:82:81:4b:ff:78:92:
ee:88:ed:10:96:d5:61:66:b4:dc:e5:9f:34:9d:11:c2:46:37:
6e:43:63:fd:09:88:ba:8e:0f:87:6e:04:d4:00:11:d0:54:48:
c8:25:6a:19:ec:76:be:94:35:35:16:eb:b6:e3:50:01:17:52:
f3:b3:0e:0d:c4:89:dc:34:5a:d5:4f:71:51:41:bc:ca:36:d4:
80:b8:fe:97:6a:0c:56:90:6b:73:44:5e:5e:e1:12:9d:20:16:
af:2d:95:7b:31:fc:bf:6a:d3:aa:22:2b:05:4b:55:af:b9:4c:
3e:a7:5b:bd:c6:66:fd:77:db:86:f9:4d:1d:c1:26:76:ff:d7:
e8:1d:fa:f2:4e:3e:22:16:6c:e5:38:a2:5a:1e:bd:cc:8a:da:
f1:a8:72:39:72:e0:3a:9e:ae:04:d1:af:ad:76:cf:6f:21:bc:
69:69:82:ce:ab:a5:62:88:f2:85:11:1e:c3:46:e1:e8:4e:37:
d0:b0:e2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:07 2025 by rpki-client