Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: 5V/vdgL8NyKMGWvf9rmxDFzqwS2O81gZcNA261P+hP4=
Subject key identifier: 47:15:F2:C3:19:70:23:4B:7F:21:BF:15:60:70:7B:E9:55:7B:2D:9E
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019A71133B2E3363138963B40E29555FD36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0BC0
Signing time: Tue 11 Nov 2025 04:01:17 +0000
Manifest this update: Tue 11 Nov 2025 04:01:17 +0000
Manifest next update: Wed 12 Nov 2025 04:01:17 +0000
Files and hashes: 1: 9-QqvBY1hUAnRzJQw44a_LiZwk0.roa (hash: Wiz9RtceWsVgYPfDCWScaw54WuSutaiOATQ7EKmFaHA=)
2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: d9/a5biGzEMyoPZd8cgeMBXPX0IMWlyVLaXPewusUQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3b:2e:33:63:13:89:63:b4:0e:29:55:5f:d3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Nov 11 04:01:17 2025 GMT
Not After : Nov 12 04:01:17 2025 GMT
Subject: CN=4715f2c31970234b7f21bf1560707be9557b2d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:72:3c:bd:85:67:9e:23:cb:24:0e:18:78:
2e:2e:48:83:bb:18:8a:c9:8e:98:80:73:4d:57:d9:
9a:e7:04:8e:6f:a6:3f:f2:61:62:bb:3b:e6:96:59:
47:b5:82:2a:49:7c:1f:20:aa:5f:e2:23:7c:30:70:
59:a9:3e:92:7f:33:43:b8:7c:1a:5b:ab:51:54:61:
b0:d9:9f:1c:ee:d5:7f:3a:d5:35:c1:14:40:8d:79:
2c:75:fc:0a:36:aa:da:af:5e:33:41:6a:a9:52:4d:
b4:93:49:fe:aa:af:af:8c:20:5e:15:de:19:64:a0:
35:bc:78:b0:0f:3c:13:d6:c3:a3:47:e0:31:1b:3f:
a0:ba:9d:1c:79:04:ee:ea:5b:df:e8:53:1b:b2:a6:
e8:e6:1f:3f:79:f5:57:7e:ed:d7:33:cb:84:25:fc:
46:65:ac:d0:46:be:e8:09:6c:eb:d2:d3:c7:66:b9:
fa:32:85:f2:27:7a:9f:1d:19:24:cb:52:f4:b8:0e:
84:cd:6a:ce:9c:eb:62:b9:4f:07:84:d6:49:67:ba:
d9:47:c4:7f:e9:34:b4:8f:3e:5e:dd:bf:75:e7:4a:
fb:dc:49:8d:56:21:84:99:0d:5d:32:ca:b6:99:1c:
1e:2c:e0:5a:e6:e4:87:4a:9c:77:6f:2b:ca:af:6b:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:15:F2:C3:19:70:23:4B:7F:21:BF:15:60:70:7B:E9:55:7B:2D:9E
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:78:83:03:97:27:d6:6c:02:38:d2:7e:35:d2:69:04:f9:e0:
71:c2:48:79:17:06:e5:ee:59:50:50:f8:36:81:17:12:f4:c1:
bb:b2:84:a0:1a:c7:dc:bb:74:b5:c4:ae:f4:24:04:64:b6:55:
4a:b8:14:e5:79:6a:6f:31:7a:c3:a6:37:f9:a1:e0:d9:ad:a9:
42:86:63:99:bb:d8:ba:f2:36:15:78:6d:f4:a1:a8:96:c2:03:
74:6b:30:72:46:60:4a:01:81:cd:a3:5d:99:cf:58:f4:6c:cf:
5e:c4:0b:14:51:ea:e8:38:56:9d:85:a1:81:b8:5c:66:bc:d7:
21:b5:23:67:ef:59:85:54:8c:0d:5f:74:2b:32:a4:15:03:af:
7c:29:15:7d:3f:bf:74:9a:1c:e4:94:d7:a4:9e:8e:08:b9:4c:
5e:84:6c:6f:11:82:1b:f2:a8:91:00:62:16:6a:d0:b7:c6:88:
7d:58:bd:e0:0b:f4:5c:a0:9a:c3:89:ec:60:ca:2b:de:4e:ba:
a3:c9:b2:42:55:3b:2d:dd:12:0a:a7:8a:b9:15:35:47:a2:09:
75:41:82:3c:6b:60:e6:db:c0:8a:1d:75:44:d2:55:1b:ce:f1:
7d:e5:b3:5f:a8:12:03:85:be:1c:70:3d:04:db:01:8e:96:ba:
2c:dc:4f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:44 2025 by rpki-client