Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: pAxiGrOSpflgqT71xxb556NQqLvZYij1sWmSb+fmWjI=
Subject key identifier: A2:44:9D:71:00:00:78:35:6D:6D:AE:33:6A:FC:5A:D4:F2:C8:48:7E
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 0199FDDA64ED69F48EC18C560CB960573296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 09DE
Signing time: Sun 19 Oct 2025 19:02:52 +0000
Manifest this update: Sun 19 Oct 2025 19:02:52 +0000
Manifest next update: Mon 20 Oct 2025 19:02:52 +0000
Files and hashes: 1: 0O73PaTyLOlo4DtC-zfVh-so0po.roa (hash: 8d52pgK7PtxKWsBsAJptabjpB2sUfgsDROP6Cr/a/W0=)
2: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: w16Sdi26V+1ILFMkqY4qbhJNFz7F2nOtL6Wc69JiVx8=)
3: AUcTDGFOG81He-CgX2Nb9NjPt98.roa (hash: VCQVsxF89yc5l33h6/1499iiv5KQTcfZEYfizAwCUSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:64:ed:69:f4:8e:c1:8c:56:0c:b9:60:57:32:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Oct 19 19:02:52 2025 GMT
Not After : Oct 20 19:02:52 2025 GMT
Subject: CN=a2449d71000078356d6dae336afc5ad4f2c8487e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:84:d0:ae:b8:2c:0f:27:f5:e2:4b:1c:68:
1a:4c:b1:37:ae:59:06:81:73:d1:74:8a:0d:ba:c4:
98:5c:63:6d:3a:f9:b6:3c:23:ee:46:80:6b:70:94:
08:ad:76:2e:51:14:a4:78:67:65:88:fc:cc:59:9a:
63:e0:1f:cb:1f:cf:b5:0b:eb:e1:3b:1e:b5:4f:af:
36:1f:d8:12:0d:d5:63:87:7a:04:35:fb:e7:b8:6c:
69:84:f5:8b:ee:a3:d5:34:49:85:85:d6:86:fc:fb:
e3:cd:bc:85:49:ea:95:23:45:ef:7b:cb:d4:d5:c8:
ce:d3:ed:f3:4a:e3:02:ef:3b:c2:3d:99:33:67:93:
04:52:82:8a:15:26:72:cc:3f:ad:d5:0a:3a:fa:6a:
04:32:93:5b:2f:1c:53:c0:3a:9a:72:e4:0e:50:fe:
23:85:f8:09:f0:f0:e7:43:ca:7c:66:0c:f0:0c:5c:
5a:ea:ce:5b:34:71:33:5b:45:1d:7c:ba:3a:d3:04:
0d:1e:4a:44:1c:6c:9f:77:8b:7a:7d:82:d8:40:e9:
1b:80:f4:fb:0e:12:73:07:5c:05:9e:6e:23:05:3d:
be:24:08:d8:b9:32:5e:c9:9f:13:68:a9:d6:ac:11:
39:61:14:40:1c:c0:03:dc:ac:ba:3a:c9:03:0e:da:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:44:9D:71:00:00:78:35:6D:6D:AE:33:6A:FC:5A:D4:F2:C8:48:7E
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d0:58:1e:77:75:c8:ab:46:93:0c:0f:6a:21:a8:ae:00:76:
83:f3:ab:98:4c:54:e8:6c:6e:cf:dc:ae:5d:fa:a8:bb:78:a8:
5b:e4:e1:ae:62:9e:fa:69:c0:82:74:1e:da:34:f5:53:95:8b:
a4:aa:46:6e:ea:78:b8:28:6b:f1:42:ee:15:03:0b:d9:a6:a1:
6e:62:48:89:81:af:60:f6:d4:a2:65:64:4b:79:05:53:5f:3c:
b1:b6:76:6f:2a:c2:42:02:23:4e:82:c3:d4:c8:63:58:97:4f:
df:bb:d6:07:fe:f9:36:51:08:3b:2e:0c:c1:1d:43:a9:bd:0b:
d0:77:74:51:f1:b1:40:1d:b7:38:43:42:7c:21:b9:c7:ac:70:
cb:49:d3:de:44:05:14:0e:b0:55:a5:a5:a2:ff:47:b9:f3:34:
60:e7:a8:b1:02:bf:32:07:2f:69:24:e5:87:b3:b0:95:03:e2:
bd:66:71:a8:6a:a6:7b:d4:86:05:b9:dd:95:11:33:39:a2:c8:
e1:ab:00:03:70:a2:6d:9a:95:39:93:10:1d:21:5c:73:7d:bf:
a0:a6:05:41:89:5a:5e:82:e0:99:b1:77:db:33:99:9f:d2:e9:
9e:c6:3f:1d:02:80:17:8f:8c:11:0c:03:95:46:02:9b:40:51:
a5:10:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:09 2025 by rpki-client