Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
File: diI4ozxVDMXfAkTz_G49vZHkw54.mft (raw, json)
Hash identifier: IGwb81BxmdS+S7QNF8JaojqMXD9A4lpEYhVu7G2gE7A=
Subject key identifier: B4:27:31:E0:2A:5E:3E:E5:4C:74:5C:2C:D0:9B:DB:6B:92:11:62:EE
Authority key identifier: 76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
Certificate issuer: /CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Certificate serial: 019A7293A8B1FE48C40FA4D668FFF6A04D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
Manifest number: 0B8A
Signing time: Tue 11 Nov 2025 11:01:10 +0000
Manifest this update: Tue 11 Nov 2025 11:01:10 +0000
Manifest next update: Wed 12 Nov 2025 11:01:10 +0000
Files and hashes: 1: diI4ozxVDMXfAkTz_G49vZHkw54.crl (hash: d2ZPsFMOdpaBX244xCAljQcNzHPBP2HTn5JbtgOXj8o=)
2: wJoEv1cTcMs89DVqbv88rXmkjBs.roa (hash: dwNiZrwk++xFBCbnEtCywNysmHqCMLzFmgUxU3OD8L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a8:b1:fe:48:c4:0f:a4:d6:68:ff:f6:a0:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Validity
Not Before: Nov 11 11:01:10 2025 GMT
Not After : Nov 12 11:01:10 2025 GMT
Subject: CN=b42731e02a5e3ee54c745c2cd09bdb6b921162ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:7c:1e:59:35:1d:3e:a1:57:6e:2b:98:3e:
fe:29:f0:b4:bc:1c:18:01:04:86:d3:03:0f:96:05:
c4:e5:35:e3:73:85:9a:7c:93:85:05:86:f7:26:3f:
9d:63:56:80:a8:44:03:2d:08:6c:7b:94:3a:dc:49:
fd:e7:d6:f8:99:e0:aa:2c:22:c2:83:40:6a:64:da:
9e:da:14:ae:cf:1e:05:6a:be:76:54:50:9c:b5:27:
ba:81:e7:4d:b8:6b:3c:6c:7a:67:13:de:15:31:27:
4d:d2:b4:49:6c:06:3e:c6:86:af:54:11:3e:ca:a1:
ba:de:dc:09:f2:49:c2:e7:c5:f3:aa:ab:6a:b0:25:
46:6a:1f:ee:92:72:c9:5d:df:5e:10:17:2d:89:94:
95:71:b2:41:31:95:3d:f8:f8:7e:a9:18:0c:c9:31:
53:09:bf:bf:d3:2d:40:d1:45:aa:d7:0a:d2:b0:cf:
ae:f2:49:58:bf:a3:7b:11:7e:2e:58:ca:2f:e7:9c:
08:9d:cc:d4:3b:fa:25:44:54:30:ea:d6:64:88:71:
99:27:54:a3:47:4e:be:0f:43:92:6a:68:b7:cf:9a:
0f:2b:d1:73:82:b5:88:c0:7c:a4:6f:bf:02:76:85:
25:68:0e:0d:23:c7:78:c6:6d:89:9e:02:15:66:31:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:31:E0:2A:5E:3E:E5:4C:74:5C:2C:D0:9B:DB:6B:92:11:62:EE
X509v3 Authority Key Identifier:
keyid:76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c5:04:89:7b:42:98:0d:de:2d:26:d2:93:71:b3:7f:b3:14:
1d:34:18:f7:8b:0e:15:cd:3e:a3:5b:77:f4:5e:50:d5:d5:31:
a9:32:41:24:db:c9:a5:ad:a0:5c:80:91:cf:9f:11:de:a2:85:
fc:25:38:d9:ae:c0:1e:04:9d:2b:1d:fa:86:83:8a:e1:38:f5:
77:65:62:08:2b:4b:98:44:1c:05:1f:4a:07:7e:27:53:09:d0:
5d:93:c0:7b:7b:ad:a5:c4:af:e2:60:fa:0b:9b:84:d7:14:a9:
33:ed:3e:f0:89:a9:cf:fd:1b:57:ab:3d:dc:c4:a4:b7:56:5a:
e1:1d:47:e2:e7:cc:ec:6c:a1:6a:7b:5d:98:75:0f:e9:8e:ce:
f8:31:b6:a2:a2:0c:eb:e0:3f:6a:14:1e:98:12:e7:02:fe:5b:
fc:4f:57:56:d2:5e:3b:38:36:c5:62:05:d3:16:55:90:58:40:
66:8e:b9:e5:fd:5d:e3:8c:c8:5c:ac:34:87:f4:3a:d2:62:ed:
29:9b:dd:0c:4f:fe:e6:01:2f:0f:51:a2:63:54:1b:cf:cb:6b:
85:e8:33:0d:63:80:78:bc:44:1e:59:98:b3:f7:f6:66:80:5a:
92:59:d7:1e:a7:da:b2:67:bc:be:df:c6:be:01:04:be:27:55:
a4:66:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:13:57 2025 by rpki-client