Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier: /KK2iIWnDLgU5G+GA9af+v0PxkcnqUfYX0vkAB3Lij8=
Subject key identifier: AC:F0:05:D8:B6:00:6E:08:2B:09:04:8D:43:84:53:56:4C:AC:4F:BB
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial: 019A7293D5DBC92E4167087444305E2F2A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number: 0FF1
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=)
2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: oYmjOpeyLdq7w7Wc2Db7uTNqFEwivMu6V7Eh8fSUlL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d5:db:c9:2e:41:67:08:74:44:30:5e:2f:2a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=acf005d8b6006e082b09048d438453564cac4fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:3b:3b:c8:17:5f:f4:b5:af:95:92:61:0f:
ae:d9:da:f2:87:e6:85:12:c7:c4:71:f4:7b:cc:a6:
b4:e3:7d:e3:07:90:27:04:a4:3d:3c:1a:e0:58:9a:
dd:74:9c:09:39:78:66:83:22:c5:d2:10:06:40:a9:
25:7d:ed:e9:ab:37:3d:71:d0:04:12:8a:b7:f1:91:
07:32:8e:27:2b:73:b6:96:0c:92:e8:d8:4e:dc:ed:
cb:17:bc:d6:52:79:3c:72:f2:8f:cd:a7:eb:22:c8:
43:78:98:67:6f:36:af:46:be:e1:97:84:58:7f:87:
a9:7d:24:bd:44:26:69:b6:62:67:74:4f:bd:af:94:
c2:c3:d9:7c:3e:7c:4f:e1:21:eb:f2:83:9b:67:38:
04:62:6c:6a:98:e2:8b:ae:5f:09:64:12:ae:9c:89:
33:20:8d:7a:c6:9e:f2:3f:73:17:8d:c6:40:93:7f:
52:c0:22:93:3e:a1:09:4e:cd:1c:a4:f3:e0:c1:76:
00:59:07:2d:ca:5d:4f:5a:69:28:d4:29:1d:13:b7:
51:6f:10:95:60:09:63:a7:a2:f0:68:e1:86:96:87:
b2:fa:ac:b7:57:45:26:ab:13:88:28:1e:4d:d8:5b:
f1:a4:bc:3a:8a:b4:5d:96:d5:9b:a9:1a:ea:19:48:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:05:D8:B6:00:6E:08:2B:09:04:8D:43:84:53:56:4C:AC:4F:BB
X509v3 Authority Key Identifier:
keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b6:80:55:86:36:d2:58:dc:9e:fd:b5:a7:16:4d:7a:b8:c9:
37:4d:36:bd:40:8d:e1:48:0e:34:dd:65:53:6c:9d:a3:79:56:
ea:7c:da:fb:2d:a4:a4:94:b5:b9:2c:03:da:5f:7c:b5:52:d3:
76:4f:f6:5a:db:05:4f:82:d1:e7:3a:c5:a6:2e:99:64:d1:6b:
82:5e:e9:88:38:41:82:fc:44:c0:57:7c:3a:84:23:d1:15:65:
21:a2:43:3b:dc:9d:95:59:60:65:d7:cc:7d:7d:50:3f:d3:2b:
51:8d:0a:68:d0:8d:74:12:d6:24:d8:72:2e:ff:3f:1c:43:ce:
c9:53:42:9d:79:01:24:b9:4a:7e:6d:f4:71:5c:05:8c:bb:a7:
bc:69:7f:d9:ab:bb:00:d6:79:41:3a:70:68:9f:b9:ad:63:11:
ae:9f:b8:bd:23:0d:e3:8c:27:3f:ab:34:5e:fd:91:17:94:21:
ed:a5:58:eb:b5:82:67:38:3f:18:82:2a:2c:59:ac:f7:91:b9:
f2:60:e4:65:66:74:4c:d4:11:fb:f3:b8:c4:e0:d6:45:2c:4b:
c4:4f:d3:e6:46:b8:63:3b:c0:ac:42:ad:c7:d9:e5:a2:da:0c:
e5:48:a8:31:48:42:0f:c2:15:e5:e1:af:37:0d:1e:f7:cb:a1:
e0:fc:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:07 2025 by rpki-client