Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
File: d_bMQsdY59p8S_q8ISEtHSghYDE.mft (raw, json)
Hash identifier: /u8GkjCmDAhZRQbJaGrKEHUt22Vm32utGukWDQnDPOI=
Subject key identifier: E4:D9:52:B1:56:C7:E8:8A:A6:CD:50:4C:83:FE:D6:19:01:A4:FA:0F
Authority key identifier: 77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
Certificate issuer: /CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Certificate serial: 019A7226478529893B819C12B178CCB0FE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
Manifest number: 06E8
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: d_bMQsdY59p8S_q8ISEtHSghYDE.crl (hash: uHMS5ruktwiP9DvE/IlxzmDfhATMXWlmD4BKYGWgl28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:47:85:29:89:3b:81:9c:12:b1:78:cc:b0:fe:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=e4d952b156c7e88aa6cd504c83fed61901a4fa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:21:cd:ec:51:94:7e:11:d1:8b:dd:53:cb:
f6:ca:92:ed:fa:f7:43:1e:e9:61:c5:e1:a2:bc:27:
f1:d4:bc:b6:e7:f9:2b:93:35:eb:78:68:4b:8e:b7:
e3:2b:b6:b5:fb:25:a6:20:4c:19:b2:66:15:1a:a3:
a6:7e:65:48:78:2a:48:2d:7c:ca:37:68:9d:e0:4f:
0c:6b:e1:46:fb:dd:70:e8:75:25:e6:91:c1:f4:87:
e3:7b:ae:6b:1b:4a:5d:7a:6f:f8:64:34:54:e1:bd:
08:49:6b:6e:f2:40:3d:d3:76:69:28:d0:bd:b4:a2:
51:5c:70:2c:56:f9:3b:04:77:83:a2:15:28:d5:9c:
26:8e:1b:7b:ae:52:7d:28:82:45:74:37:e6:eb:4f:
77:c0:cc:f0:28:e9:95:51:e7:5e:87:f7:8e:5b:af:
2a:bc:79:81:9d:76:fa:16:7f:11:d2:77:d8:12:97:
b0:3a:65:39:29:6d:23:75:c6:fb:1f:03:9d:ba:14:
78:ff:78:da:d0:bd:af:14:df:76:f1:cf:51:52:3a:
2b:c0:c3:70:9a:a4:02:21:b0:88:19:b5:a7:7e:c4:
c1:b4:d0:40:b5:fc:65:a2:23:66:9e:c1:ff:71:ea:
2a:f0:08:14:5e:42:d3:b1:f9:7c:f9:ec:9c:32:4f:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:52:B1:56:C7:E8:8A:A6:CD:50:4C:83:FE:D6:19:01:A4:FA:0F
X509v3 Authority Key Identifier:
keyid:77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b9:7e:a2:da:3b:4a:51:c4:1f:de:5f:50:d1:e2:e6:29:4c:
cc:23:d8:69:52:71:ee:14:20:9d:58:ff:65:91:50:2a:a9:1d:
60:87:77:81:a8:c1:93:4f:ba:c2:7e:11:5f:ba:64:d5:a9:0d:
25:5e:cf:f9:22:a0:9f:fd:8d:9c:87:d4:62:29:a0:0b:94:e2:
a7:97:32:aa:df:1d:41:f2:04:d2:92:0d:13:e9:0a:89:f2:09:
5f:53:31:dc:fb:cc:f1:bf:13:5c:33:68:91:de:5d:ba:50:34:
16:85:9b:61:d7:52:c4:2a:03:b1:5a:27:91:96:37:9d:04:a2:
a3:cb:b3:2b:d6:1a:2d:e9:7b:50:38:6a:0d:47:83:29:82:fe:
f1:07:05:67:2e:32:0b:de:dc:45:5b:ce:79:a0:8d:e3:60:4c:
7b:16:0e:99:b9:aa:5b:9b:89:13:73:34:b9:87:52:26:0f:7d:
e3:37:f9:5a:fb:6e:9e:98:86:9e:19:da:44:f8:b2:02:ac:5b:
ff:3e:80:dd:60:ac:63:4e:d3:23:12:36:65:ed:bc:3d:76:07:
d2:b7:46:fb:ef:d7:66:1b:96:1a:d3:fd:fb:f8:2f:54:51:5f:
03:44:65:3e:fb:0f:d3:96:07:0c:43:4a:55:69:31:04:8c:f1:
5a:2f:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:27 2025 by rpki-client