Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: 1fgTlXBzqxMBeO0IYT/iDWTKBQmPBjS22N9fzSHyVts=
Subject key identifier: 94:FF:9B:80:68:F5:96:3D:99:25:2D:EA:3A:7F:1E:C8:42:67:0D:78
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 019A2289E21F06856BCEB21718F7ACE8FD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 0781
Signing time: Sun 26 Oct 2025 22:00:52 +0000
Manifest this update: Sun 26 Oct 2025 22:00:52 +0000
Manifest next update: Mon 27 Oct 2025 22:00:52 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: 7cFCAOm5T42J/sdRQj8xsdP3GCRm7g8MEDe+MEDeCtY=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:e2:1f:06:85:6b:ce:b2:17:18:f7:ac:e8:fd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Oct 26 22:00:52 2025 GMT
Not After : Oct 27 22:00:52 2025 GMT
Subject: CN=94ff9b8068f5963d99252dea3a7f1ec842670d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:10:e5:84:85:20:a4:80:52:90:dc:28:5d:
b8:71:30:50:24:fc:27:78:1f:cd:a4:98:98:05:e0:
12:71:7a:5b:a8:5e:f3:6d:38:51:b9:f7:74:a1:85:
c8:7a:05:ac:2a:67:ce:9e:02:ee:f2:ef:5f:46:ac:
7b:43:16:ce:5b:b3:c4:1d:34:81:cd:5b:ea:26:62:
ae:31:fd:10:18:46:a8:56:44:70:11:88:4a:1a:4a:
bb:bc:96:32:f2:b3:3b:5d:79:81:8b:08:b4:00:30:
92:9f:38:10:19:73:5b:d5:01:76:3a:10:ba:83:f4:
ae:88:e1:62:e7:d2:0c:1d:98:37:bc:ea:5d:9a:d6:
e2:bc:40:00:68:41:37:c1:03:bb:5e:41:76:b2:b8:
c2:57:3b:f5:fc:d6:a1:61:c6:d6:77:63:2d:4b:fe:
a2:b0:e5:b6:51:a5:25:52:31:49:7b:af:a2:22:fe:
2e:4f:9e:5b:86:5e:0a:24:a9:48:86:65:eb:8f:ef:
e7:ac:8a:82:50:e0:84:60:df:73:51:cf:1d:2c:d3:
28:6b:38:77:ef:7c:5a:84:88:fa:1e:5a:ca:c3:71:
58:ab:ba:09:9a:22:80:ba:94:04:02:a1:f8:ca:f1:
20:cc:1e:bc:a3:47:65:d6:3a:42:ca:db:6f:b2:34:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FF:9B:80:68:F5:96:3D:99:25:2D:EA:3A:7F:1E:C8:42:67:0D:78
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:87:18:fc:f3:e7:e1:d8:2d:fd:ed:f3:b2:78:71:fa:f2:8a:
c3:89:56:7b:12:89:54:55:2e:e0:4c:06:f6:e1:df:a0:d6:59:
27:2b:1a:bf:61:7a:54:2d:6b:45:b6:47:a4:ba:9a:4f:72:d9:
02:16:46:f7:56:c1:a4:01:bd:da:a6:4d:31:5d:1c:19:c9:60:
de:44:04:bc:ff:9a:66:9b:f1:8f:be:0b:53:e1:c7:de:eb:af:
97:a7:0d:b4:9b:cb:94:d5:77:ce:d5:b7:16:2f:b9:e8:b2:a0:
5e:c2:f8:f9:02:d2:34:3d:c0:e2:60:c5:55:ca:72:4a:b4:a8:
b5:dd:31:f3:1c:f3:25:33:1b:c7:02:1f:c6:ab:93:46:68:c3:
e7:f7:3c:9a:1d:7d:28:56:4e:ef:55:bd:e4:8d:84:26:52:50:
86:f5:9b:47:d0:70:2f:b6:e6:85:43:6e:7b:cd:c9:4c:e7:75:
a7:cc:f1:1a:bd:01:59:23:c7:fc:18:16:52:ae:57:1c:29:b7:
39:34:40:f2:2e:de:60:44:03:e4:b9:d1:a9:34:37:4e:f8:fb:
41:cc:cc:c5:f8:fc:ea:af:14:fe:59:8a:ee:30:68:21:6e:27:
6f:c8:13:65:2d:75:0f:58:ab:07:66:eb:67:ed:be:7a:08:4d:
4f:68:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:44:49 2025 by rpki-client