Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
File: d-g56lm5dYJP1wigrXNVUAF8v3w.mft (raw, json)
Hash identifier: Nfq10EESJPjNP7jsjdPpmYLmtSRhxC4T0eN/4hID3vU=
Subject key identifier: 89:73:05:97:76:80:C1:C9:BD:E5:97:5F:1C:B3:C6:97:C5:34:8D:DE
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 0199FBEB5872AC8B76BA663B6EC40DCFA426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
Manifest number: 144F
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: AdtLsSKpD88rZG8vPkZiD9QZ3II.roa (hash: r/TtnbjU6TzYG7n4J08Ln2zhCxACBBJlAa/WOkQ9bLA=)
2: ZZKHxuzT9f9uOTLxBtzMJ_ndYYE.roa (hash: w2L+9XVGxP7AjhXdVbAOAOleu3PnA4M7uTmUbZQNGw0=)
3: d-g56lm5dYJP1wigrXNVUAF8v3w.crl (hash: nA2yTxjWYTr/7nMKJVfAGma0UcimuHWVv6em9BZI0BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:58:72:ac:8b:76:ba:66:3b:6e:c4:0d:cf:a4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=897305977680c1c9bde5975f1cb3c697c5348dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:48:7c:89:6b:3b:78:ec:89:15:fa:cf:20:
d1:d5:e2:8f:8e:78:43:9c:1f:4d:69:8e:86:18:a1:
50:20:37:a5:17:34:f4:b8:5f:7e:18:92:90:ab:81:
53:5c:d5:7f:80:99:21:7c:b0:c0:d8:ad:6a:4f:5f:
f9:5a:1a:4a:13:b5:d0:9c:5e:d2:6a:a1:dd:f0:8b:
31:cf:46:a5:8a:78:6e:59:90:02:7c:5f:dd:fb:fd:
1f:80:d6:b3:61:cb:51:08:8d:70:ff:83:2b:0a:0f:
96:a5:da:aa:d1:d7:6a:44:a6:20:bf:3f:3b:63:b4:
d1:e5:39:f4:e0:c7:4e:00:dc:95:b7:30:d7:f5:62:
65:f3:15:7d:8d:63:e0:96:03:82:19:ee:73:b0:4b:
4d:a2:c8:08:fb:e2:82:f3:55:07:dd:ee:1f:83:3b:
ca:71:6c:29:e8:00:27:e1:3d:d6:05:1f:d2:0b:91:
bd:e3:30:01:11:e2:cf:65:42:d6:cd:68:8b:a3:c4:
0c:a7:83:a8:cb:04:21:b9:dd:43:1e:b1:c0:54:15:
e3:62:2c:2e:00:50:c0:7b:bb:e4:ba:f0:55:d3:ae:
94:a9:5b:cb:a5:00:92:51:ac:74:e2:a1:8b:f3:ba:
5f:4c:64:28:ae:57:3c:f8:8c:e0:29:7d:1f:bb:1e:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:05:97:76:80:C1:C9:BD:E5:97:5F:1C:B3:C6:97:C5:34:8D:DE
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6c:b5:4b:74:4c:f7:c0:2d:2d:fe:e2:db:22:3d:59:a7:37:
04:3c:ab:94:08:b3:72:56:71:a1:a6:a8:63:5a:68:e0:aa:f2:
c5:53:8e:2c:26:df:e1:60:02:ec:3f:dd:2a:f4:1a:f0:2e:b7:
63:bf:44:5f:9e:ca:f4:40:7d:d7:20:83:e8:68:c1:f3:13:f1:
93:4e:8a:ac:fd:9c:72:c0:a1:5d:5b:22:e3:4f:8c:1d:d1:26:
81:62:c9:41:2b:25:d5:a1:f2:d8:bb:68:f1:09:4f:c1:58:59:
c9:d7:e6:a1:8a:50:f6:59:e1:cc:70:6a:d2:f5:2d:c4:59:3a:
cc:f8:e2:ef:21:5a:11:07:74:7f:b0:d6:ec:04:0a:6f:ab:29:
68:30:18:2f:27:47:61:17:a1:45:e6:cf:7e:05:6d:57:f1:b5:
ea:52:db:a0:2c:41:39:cf:2f:2c:60:4e:28:24:d5:4e:f0:21:
64:d3:c8:cb:2d:56:b6:89:14:8e:17:8a:13:18:e4:a7:a5:7e:
09:90:4e:3b:16:16:27:be:b2:8e:58:24:da:c5:7a:62:bb:94:
21:32:54:63:48:5b:0d:16:01:16:9e:cc:34:7e:c7:6b:ce:ea:
da:7b:2a:3b:13:24:a6:c6:d5:67:fa:68:9a:79:9c:d3:4f:e5:
d2:0e:ae:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:31 2025 by rpki-client