Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: iYSqpFatbNuxxQB8azIyo46lqf577ci5fqrIwM2zqqU=
Subject key identifier: 93:3E:A2:40:C3:21:3A:40:7F:44:9A:87:4D:65:2B:69:1D:2D:53:26
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 019A04ED39FC67648164E3E2554076D5DD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 16E6
Signing time: Tue 21 Oct 2025 04:00:46 +0000
Manifest this update: Tue 21 Oct 2025 04:00:46 +0000
Manifest next update: Wed 22 Oct 2025 04:00:46 +0000
Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: hxRNIxEYMbK2Z9uoKUWBgC7S56cLeYEMip2uys+56I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ed:39:fc:67:64:81:64:e3:e2:55:40:76:d5:dd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Oct 21 04:00:46 2025 GMT
Not After : Oct 22 04:00:46 2025 GMT
Subject: CN=933ea240c3213a407f449a874d652b691d2d5326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:7b:b6:22:b0:d6:10:f1:a4:5f:6d:b4:25:
8f:cf:98:09:17:2b:8a:89:96:26:55:bf:7c:b4:c5:
bf:91:d7:4c:3b:95:f5:86:d5:d7:aa:5d:19:54:d1:
95:4b:50:08:5e:eb:68:f3:66:7c:0a:97:bd:07:d3:
bf:36:02:a6:91:3d:77:43:01:fc:77:1d:05:50:2e:
e4:aa:75:67:6f:2d:60:85:50:cf:ec:5f:07:64:27:
74:76:f4:67:7d:e1:15:23:fb:4d:72:5f:13:f3:3b:
a3:24:de:74:18:59:0b:99:a8:66:d8:70:fd:41:25:
61:7e:87:47:1b:52:e9:cb:8b:88:df:9d:9d:8f:8c:
aa:0c:97:6f:57:3f:fd:10:dc:18:fe:65:57:fd:ef:
e2:4e:ff:c1:da:5e:63:f2:cc:36:da:91:6c:96:2d:
48:d0:84:b4:a7:01:c4:f7:71:c1:ff:18:33:b4:eb:
00:1a:46:72:5d:0d:fb:4b:33:00:cc:8c:b5:16:a0:
a9:d0:de:a9:df:d3:8b:57:87:55:3e:a7:31:38:74:
72:2d:f1:25:2d:be:d8:14:9a:8c:4a:dd:2c:8a:40:
90:23:e0:60:53:dc:31:47:9d:07:86:ee:29:70:97:
91:af:72:8e:26:18:1b:3e:4c:ea:b5:61:e3:98:20:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3E:A2:40:C3:21:3A:40:7F:44:9A:87:4D:65:2B:69:1D:2D:53:26
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4f:fd:06:a5:94:b3:d9:ee:db:90:83:4b:22:32:6e:89:e7:
f5:ea:ef:4e:43:2c:25:a7:b9:05:13:3d:9e:90:ea:af:33:35:
2a:4a:6b:08:b9:b1:0f:16:a5:d4:58:8f:50:1a:5c:eb:b8:af:
81:c4:ff:0b:67:50:93:27:da:f8:50:c5:22:0a:ba:91:75:e5:
ea:13:0f:70:fc:0e:d3:fd:29:6d:80:ea:9f:8f:1c:dc:66:79:
fd:90:78:b7:30:34:48:3e:ed:36:cb:ab:a1:10:ab:bb:62:c3:
a4:8c:9c:75:b8:b2:91:ac:9b:44:79:19:8b:f6:63:1a:95:52:
d5:9a:65:0f:76:5a:b1:eb:cd:18:a7:a1:d0:71:3f:9e:d5:f9:
02:ae:28:0e:6f:65:92:88:cb:56:0d:a2:1e:d4:5a:51:46:85:
1f:c4:14:6f:ce:b2:d9:bb:9c:c2:18:b0:25:43:a8:be:b6:3a:
cf:7a:5d:15:a2:00:b0:73:65:35:ba:b5:c1:93:b6:89:6f:01:
6f:13:11:5b:6a:4b:2d:77:c0:f9:1b:a4:ec:0b:ba:76:56:ff:
b4:b0:c5:16:5e:7d:42:8b:2a:a3:90:2d:07:82:24:c9:2b:0b:
13:58:97:31:50:86:6a:a1:26:f0:d0:58:91:d3:79:d0:4e:73:
8b:3e:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:57:03 2025 by rpki-client