Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: WOU9Ust3lTZXZ7mxlkdjn/PWH1bkl9npqXDisZTKo0I=
Subject key identifier: 6B:60:CF:0A:27:CE:AE:80:62:0E:63:38:83:38:AE:72:AF:B2:8A:39
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 019A70DBEA7E286F0E93B013BCDABADF2D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0D27
Signing time: Tue 11 Nov 2025 03:00:51 +0000
Manifest this update: Tue 11 Nov 2025 03:00:51 +0000
Manifest next update: Wed 12 Nov 2025 03:00:51 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: EUpDxh3bE1Smb5erMg6bWRy6CY8IsYBERyXTs2FvhDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ea:7e:28:6f:0e:93:b0:13:bc:da:ba:df:2d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Nov 11 03:00:51 2025 GMT
Not After : Nov 12 03:00:51 2025 GMT
Subject: CN=6b60cf0a27ceae80620e63388338ae72afb28a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:53:a8:ac:f4:56:18:7b:b3:bf:54:a4:8f:
c2:74:95:7e:f8:df:e9:92:2b:ba:76:42:33:a8:a2:
40:91:04:92:91:91:dd:06:e0:4c:87:f2:d5:27:2b:
bc:32:62:6c:24:2c:7c:2d:c1:f1:b6:c0:62:89:89:
f4:b6:e8:2a:4e:ad:77:2d:61:eb:19:bc:28:c1:1d:
2f:9b:9b:54:11:73:f3:fc:30:b9:b8:6d:3a:ea:ce:
a9:8f:49:df:fa:a5:48:2b:08:aa:27:ca:3e:fc:22:
cc:56:ec:ed:ee:88:05:27:7c:5e:61:a1:8a:b1:89:
ef:1f:d5:71:b4:1b:10:03:77:f1:a9:93:9d:c2:5d:
f0:fa:03:80:62:cf:3e:57:6d:1c:b1:ef:83:71:5f:
2a:9e:06:5c:92:2d:ea:4a:09:d6:7c:4a:ad:28:73:
30:af:93:96:bb:a9:d8:e6:ab:d0:01:3b:d8:db:a8:
c1:5a:92:5a:0f:9e:35:32:d1:80:70:49:d7:c4:05:
2a:29:05:ed:cb:83:7e:d6:89:62:a5:52:65:64:04:
3f:68:8f:e1:30:24:85:67:30:72:9c:bf:c6:93:98:
50:cd:ce:51:2f:90:8c:0a:3d:23:d9:b6:84:32:3d:
bd:ae:8b:f0:15:d3:f3:06:7b:4d:2d:8e:5d:6d:fb:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:60:CF:0A:27:CE:AE:80:62:0E:63:38:83:38:AE:72:AF:B2:8A:39
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:04:06:41:11:16:83:8b:6d:98:a5:b4:12:70:af:06:bc:a1:
8a:1a:66:66:5c:55:4d:de:d8:f5:aa:4a:2c:8f:90:00:89:60:
c9:0e:b2:6e:71:5d:16:9d:14:42:58:6c:1b:fd:89:be:5f:59:
e0:20:31:3b:74:93:85:d7:16:0a:a1:dc:71:7e:68:3a:76:bb:
6a:c8:6c:e6:2f:07:7a:55:0b:d0:3f:ed:86:c5:30:29:f4:11:
26:e7:3c:92:e5:e1:74:82:2a:6c:cd:8d:03:49:02:56:b5:4f:
a3:81:19:cb:24:e3:61:11:b8:3e:f6:eb:48:da:5c:28:25:f5:
4e:d5:1f:14:0a:de:15:84:bb:e6:eb:68:f8:a4:e2:8a:c7:df:
ff:6a:c5:e2:ef:e4:13:1d:63:98:0d:eb:28:29:d8:8f:b1:4d:
cd:cf:6b:36:69:ca:a8:86:00:15:48:20:dc:da:56:37:cc:63:
82:aa:f6:4c:e1:8e:c0:04:93:a8:bc:c7:c6:0a:f3:27:5e:3b:
dc:f0:ba:24:5e:cf:97:32:b7:1f:98:29:85:54:85:5b:6c:8b:
1a:fa:9e:fc:06:2b:37:39:73:b0:b5:0b:72:93:86:3b:99:9b:
e5:07:63:af:e1:2c:6c:51:5b:55:55:30:c2:1b:53:5a:f6:c7:
14:d2:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:52 2025 by rpki-client