Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: AO1expH1SUCXMVidU1zQ4EgXD5sAfdHLAfZidDR0/+Q=
Subject key identifier: 2E:76:8A:79:B5:01:27:39:7A:56:D1:D4:52:E4:DE:3A:49:2D:C2:52
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019A1E082A8112BC2AE2A15918B140B6C6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 013D
Signing time: Sun 26 Oct 2025 01:00:42 +0000
Manifest this update: Sun 26 Oct 2025 01:00:42 +0000
Manifest next update: Mon 27 Oct 2025 01:00:42 +0000
Files and hashes: 1: YkbGKc-LGqIQZMDerpDN8XDOTbw.roa (hash: RY+DUa9ZajYzyfuzC6xFjBj7ICr29ESsVlrxpHdgeWw=)
2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: CUPrWnDMJfGY2fq8bzv4+J1mjrdw1e8ZR018ZMN58ms=)
3: zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa (hash: OEzd69K7Il75QSQW6UQvA0dRBfsE2azJdJL9XybJ68I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:2a:81:12:bc:2a:e2:a1:59:18:b1:40:b6:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Oct 26 01:00:42 2025 GMT
Not After : Oct 27 01:00:42 2025 GMT
Subject: CN=2e768a79b50127397a56d1d452e4de3a492dc252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:ec:45:d0:63:ad:e4:19:f9:06:fc:7a:2f:
b0:74:1b:d2:6b:90:ef:77:00:3f:f4:72:85:78:66:
59:47:c5:70:9f:02:88:b7:fe:1c:97:e2:d4:e8:93:
39:0c:dd:45:59:19:42:57:32:06:19:7c:b9:47:2b:
38:e3:11:3b:7d:08:2e:ee:a6:1b:69:39:04:1c:2e:
50:03:50:78:1a:f4:ca:d5:0d:fb:96:c6:3c:13:c4:
33:70:69:3f:14:02:5d:24:2f:77:48:bc:f0:39:55:
b4:05:60:c3:0d:fa:26:c8:a6:54:03:6c:a0:0a:93:
6f:58:d1:53:9d:da:e5:12:2b:80:23:fe:2d:9e:d6:
5a:a5:bc:f5:4f:4d:82:ea:d1:4f:9a:70:90:5c:36:
db:bb:bb:6e:92:98:2c:c7:ff:06:f1:53:5b:7c:f2:
24:89:2b:6f:8c:54:5e:2c:00:27:86:6f:38:5e:b5:
14:a8:96:a0:3d:c0:7b:17:ee:bd:dd:5a:2b:16:7c:
20:38:a7:b7:0d:54:0a:cf:b6:06:81:84:ec:61:ea:
ba:eb:68:8b:0b:ef:38:51:03:21:40:55:c1:d4:68:
cc:fc:08:a9:5d:b6:a9:cf:4f:89:64:1e:c4:b0:6d:
63:9d:4d:a8:56:cb:f0:4f:98:f3:b0:7d:c5:6f:7e:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:76:8A:79:B5:01:27:39:7A:56:D1:D4:52:E4:DE:3A:49:2D:C2:52
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ca:d6:8f:ee:f4:2f:fb:2f:6e:36:25:77:d7:b1:82:e7:e4:
87:88:1a:df:23:9a:63:7a:5c:97:79:fa:b1:ec:6b:12:57:9f:
93:ef:63:89:22:22:51:9c:fa:1c:04:90:46:61:18:5f:31:9a:
03:69:3e:47:18:7f:f7:c7:78:cc:a1:61:9a:46:c9:06:a5:fc:
01:48:b4:83:e0:ff:57:91:9b:86:0e:5e:00:65:4f:80:fd:f5:
62:a4:1f:9f:9b:bd:a0:94:61:0d:e2:d0:a7:7b:25:c6:b8:41:
cb:e5:13:2e:b1:f3:00:ee:1e:6c:20:e7:d1:18:ce:45:d9:0c:
73:17:6c:b1:08:c3:b8:24:7f:12:51:7f:19:50:8b:c9:18:6b:
3c:bf:f1:a1:2e:ff:78:07:7a:cc:aa:4f:11:29:f2:51:85:18:
eb:34:7e:23:de:7e:cb:2c:6b:e9:92:28:44:aa:44:03:e6:68:
05:a6:ba:8f:5e:cf:e2:95:21:b9:c4:f9:9a:e0:ce:da:f3:75:
1d:9f:9e:01:aa:36:4f:fe:d0:5f:1a:43:98:a4:db:3b:4e:34:
c7:44:59:21:72:7c:0c:2b:6a:a1:07:9a:56:b3:3a:ce:63:1c:
b9:6b:09:16:63:7e:db:59:6e:0f:40:9f:df:ad:28:15:82:59:
aa:1d:9e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:07:03 2025 by rpki-client