Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: Uy2l2VCPxPXXyb0jZJMRO/IzUoyJtJid06ckECNMMOI=
Subject key identifier: 36:E7:A3:6D:79:65:23:D0:22:8B:5A:6B:6C:82:9F:C8:C7:5D:73:E2
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 019A7113028EBFCA4C1210F666279458687D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 1008
Signing time: Tue 11 Nov 2025 04:01:02 +0000
Manifest this update: Tue 11 Nov 2025 04:01:02 +0000
Manifest next update: Wed 12 Nov 2025 04:01:02 +0000
Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: IIZrHhPBJEdGv0GXQUmv9lJoKUml/pOZF9iT7nEcBa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:02:8e:bf:ca:4c:12:10:f6:66:27:94:58:68:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Nov 11 04:01:02 2025 GMT
Not After : Nov 12 04:01:02 2025 GMT
Subject: CN=36e7a36d796523d0228b5a6b6c829fc8c75d73e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d6:e0:72:26:45:8d:4a:a8:f5:f0:16:8c:70:
1e:53:61:a9:60:5f:d9:b5:b7:f4:25:cc:9e:3e:7b:
75:ee:46:e8:de:77:4f:2a:9e:43:17:18:51:1c:28:
35:c2:20:3f:60:d8:a8:93:92:42:b5:b1:28:2c:20:
9a:44:bb:a9:bc:48:b9:a5:8d:63:e5:3c:24:17:d7:
46:3b:a2:28:50:5a:14:fe:12:0b:ff:51:bd:46:ca:
47:c2:5a:ab:36:c7:4b:28:ca:b3:63:66:60:50:53:
f0:9b:c0:50:f6:95:c0:0f:e2:d5:3f:84:85:c6:5f:
ad:cd:5c:9e:fe:79:b8:38:a6:c2:6c:3c:85:6e:3f:
59:32:ab:fc:5e:42:a5:21:58:56:b1:13:36:09:20:
e2:a7:11:99:2c:d1:df:86:ce:3c:41:7a:3f:cf:5d:
40:50:cb:7f:2f:2a:83:93:56:b5:2c:37:f4:8b:ae:
b1:07:28:63:6d:c5:a4:d3:f6:b8:af:86:53:15:25:
4b:5a:cc:4e:db:6d:20:90:e9:bd:a9:cb:7c:35:5a:
4a:52:2e:1b:6a:5f:e2:4b:56:e9:75:6f:f2:17:c7:
00:97:25:ee:dc:fc:6a:1f:20:83:3a:d3:65:7e:2c:
e8:c2:69:1a:2c:a6:e5:1e:c2:3c:78:6a:ad:fd:e1:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:A3:6D:79:65:23:D0:22:8B:5A:6B:6C:82:9F:C8:C7:5D:73:E2
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:21:5e:58:14:5a:06:05:39:3f:27:80:e0:0b:eb:f1:a5:b3:
39:82:04:bb:66:3a:04:66:4a:94:b4:4a:b6:dd:0d:2e:cf:48:
b8:6c:a3:9b:8c:1c:e8:7e:73:e2:fc:75:24:7c:a9:b0:a9:8e:
04:be:5f:a9:09:32:32:d0:e8:38:91:97:22:30:f8:3c:48:a8:
50:62:7d:37:5f:ff:74:18:95:66:1a:7f:1a:94:7c:e0:7e:59:
2d:ce:a6:19:95:c3:f1:a7:73:3a:66:e7:19:87:b0:cb:07:2d:
b3:84:df:01:ae:b2:9e:bd:9d:3d:63:13:7c:22:63:bb:53:76:
1b:f4:04:46:cc:00:3d:17:54:e8:6f:36:3c:64:1b:0b:a5:d8:
c7:69:63:34:a0:4b:44:d6:fa:5c:b5:b5:c1:8a:3e:05:1a:88:
46:6f:90:e3:49:e6:66:38:19:c7:34:ff:05:8b:3e:93:c6:52:
7a:b8:9a:45:09:6f:b6:f7:1f:29:39:76:f2:5e:33:3e:6c:eb:
1c:84:76:40:e0:de:65:2d:cb:3d:1f:6e:e5:30:5a:9c:e4:cf:
48:11:04:66:4f:7e:48:97:0f:02:8a:c3:ff:0d:99:52:93:b1:
46:c1:2e:2a:9e:6a:d1:86:5d:af:ff:3e:78:0e:a0:42:76:96:
14:9d:f6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:34 2025 by rpki-client