Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File: rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier: EKkGkxuwkIjPmajpGY/5TYRQ6eh4C5Dirmtv6sdXD4w=
Subject key identifier: 9D:8A:D7:84:55:38:6D:81:92:FD:15:3E:05:58:F0:71:D8:3C:37:F0
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 019A70A561E2AA3D9037E25AE2A69043A8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number: 15D2
Signing time: Tue 11 Nov 2025 02:01:17 +0000
Manifest this update: Tue 11 Nov 2025 02:01:17 +0000
Manifest next update: Wed 12 Nov 2025 02:01:17 +0000
Files and hashes: 1: 53yfdczv1so3h7m6p_kJKapwYb0.roa (hash: 8fm3UETmOMmwp3oE4jpSkcDNkIYvAEXotF2eKRsyjLw=)
2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: M4M7YPO6ABG6Zi+Q+nwodwAFESZ052wkfwLLuJ7fj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:61:e2:aa:3d:90:37:e2:5a:e2:a6:90:43:a8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: Nov 11 02:01:17 2025 GMT
Not After : Nov 12 02:01:17 2025 GMT
Subject: CN=9d8ad78455386d8192fd153e0558f071d83c37f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:2a:f5:58:cb:de:ba:75:f5:15:2b:a4:b1:
e3:ec:7c:30:f1:4f:84:cc:fb:fe:89:9c:1c:d6:d4:
ee:64:7b:35:d1:2e:5b:0a:90:f6:ba:08:b6:f1:30:
83:85:f0:11:4f:a9:0f:04:9a:b5:b5:ed:65:1c:83:
af:df:dc:cd:76:cf:62:2d:af:a0:1e:7c:80:bf:13:
e0:85:56:d9:99:1a:44:e7:8f:78:4f:e6:b8:45:e8:
89:61:b9:d9:ee:94:85:89:c0:30:41:68:70:f3:42:
69:9d:ae:16:eb:b6:7a:c1:c4:41:ff:b4:ae:c2:53:
cb:77:2c:fb:e3:cf:67:a7:fe:69:16:0b:64:05:19:
ab:4d:85:5b:0d:0d:4c:c2:6e:de:aa:8e:5a:0d:15:
fe:fb:56:d2:cb:d8:18:b6:a5:5e:06:f0:36:57:88:
ed:77:17:fb:06:65:ab:b6:3c:25:27:be:e8:4b:88:
0f:77:41:0b:6b:42:38:10:4e:01:9c:53:c4:c6:e0:
c3:95:a9:94:72:a6:19:c7:a2:db:13:3e:42:0d:45:
6d:9f:29:26:bd:01:4b:ff:e6:8e:cf:0d:03:e3:27:
71:46:a1:38:da:3a:aa:2a:14:cd:b6:09:72:50:06:
d9:83:53:24:88:54:4a:4b:ea:e1:49:23:b3:7c:16:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8A:D7:84:55:38:6D:81:92:FD:15:3E:05:58:F0:71:D8:3C:37:F0
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f3:ff:54:6e:45:c8:5f:42:0c:c6:53:9c:22:d5:43:55:63:
3c:d9:5d:a4:54:ef:ec:d3:c7:61:c1:86:ef:ca:87:64:6d:6c:
2a:ef:aa:78:01:2e:c6:1e:99:cd:13:51:8e:99:a2:ca:de:01:
fe:81:a8:de:87:c9:e0:c6:41:70:e9:de:d5:d6:09:7c:c5:38:
81:77:6a:6e:8b:da:aa:ee:9c:52:73:fa:93:9d:fd:ea:7d:9f:
72:b4:60:1e:d5:66:7d:7d:6e:fe:b0:55:02:2c:48:22:29:33:
e5:96:a3:36:1e:be:a9:9e:3b:90:80:b0:05:b2:19:79:30:f7:
2a:04:d1:7d:ca:68:9a:e4:48:f3:ae:fd:a9:49:65:aa:5c:a3:
72:11:02:97:a9:0d:13:be:d6:fe:3c:76:bf:db:09:5c:35:d2:
11:7d:31:22:a7:11:ae:36:d1:8e:ea:45:7d:a2:39:ad:aa:a5:
62:b0:25:54:be:d1:95:41:83:e5:23:91:fc:a6:f5:7f:4e:52:
2a:74:0f:4c:c6:e7:35:63:5d:2a:8c:f5:89:d0:cc:2d:0b:49:
4a:fa:7c:a6:9c:56:b4:e5:96:92:37:8c:8e:81:ac:a0:6c:d6:
58:dc:e7:4b:ce:ad:bf:57:19:b0:2b:c4:4d:09:75:9d:1e:02:
0f:d0:f2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:47 2025 by rpki-client