
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File: dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier: pnY0rWncoL1aUmxR02ueQ2YyaCZdXRYSZF0B3L+7hNE=
Subject key identifier: 68:9D:68:53:C1:5D:6B:ED:AC:45:B7:57:21:BD:AB:6E:2E:B3:9C:23
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 0199C4574583EAC96D228F43EAB113E22873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number: 16CA
Signing time: Wed 08 Oct 2025 15:01:17 +0000
Manifest this update: Wed 08 Oct 2025 15:01:17 +0000
Manifest next update: Thu 09 Oct 2025 15:01:17 +0000
Files and hashes: 1: 0oXrffU-rSHDpr6TX7IphO7-POk.roa (hash: WbRM1hyDPFlmbx1lM12Y7DHbqSzxb6BFvKIPhKhJrRs=)
2: J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa (hash: FqRH6xGeGokOrR3y4N/PmTYLTqphdEbs3zKWJDOiox8=)
3: RL1wLq44Bf2ikyDTpOd16y5e10g.roa (hash: X39FqUvCzgp1Twm8EXglBTxwVJ18DwP2RWSMPjQDYfw=)
4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: uqAEG6Ql8TBX9jgh/3ONoV6qBDSGElDEX8wMbKZ+ZXY=)
5: nb_SgNToJhQlWuIX7tsN5k_y4pE.roa (hash: 4kJjY6lHt/g87dKdPa2zMnovZO8sWINioQls7x+X7vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:45:83:ea:c9:6d:22:8f:43:ea:b1:13:e2:28:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Oct 8 15:01:17 2025 GMT
Not After : Oct 9 15:01:17 2025 GMT
Subject: CN=689d6853c15d6bedac45b75721bdab6e2eb39c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:f4:17:08:f4:49:fc:a1:e2:be:35:11:17:
38:b9:09:ff:82:5f:5a:c4:b0:67:6f:37:39:ef:2e:
ab:76:35:0d:da:5a:04:5d:23:4f:52:e5:1f:84:1b:
de:11:cf:f0:b9:96:ea:17:9d:3c:f3:6c:f3:98:c3:
93:5a:de:e3:09:fe:dd:8b:60:b1:9e:ec:31:80:7a:
39:0d:0e:0f:e8:4b:d4:5f:85:05:98:ef:22:86:12:
0b:7b:eb:3a:5a:28:06:f3:4a:ee:02:3a:52:40:52:
44:27:a1:ae:31:34:30:c2:4c:30:62:25:4c:5d:59:
66:01:03:de:c4:e2:a2:85:db:67:75:f6:21:a1:3f:
98:95:8c:5e:6c:fe:1c:f2:60:78:6a:14:64:dc:a8:
78:d9:b2:da:36:d9:1d:61:d2:17:c6:38:a7:d7:9a:
ec:de:9d:b8:b5:60:af:04:f2:ff:95:d0:ed:44:37:
a0:f6:4f:c9:e0:74:bd:70:03:7b:a1:0c:56:0e:f2:
b8:a1:02:83:4f:31:78:61:6d:7f:b4:3d:65:41:c3:
59:12:88:9b:8b:b5:21:94:5e:10:23:78:d3:b1:01:
33:23:9b:95:8c:85:2c:05:03:98:87:62:d8:5c:1b:
5e:04:89:1a:d6:23:1a:83:9b:6c:f4:f5:62:45:0f:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9D:68:53:C1:5D:6B:ED:AC:45:B7:57:21:BD:AB:6E:2E:B3:9C:23
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8f:d8:47:5e:15:74:63:92:79:d4:71:d8:ba:2c:85:a9:37:
f5:68:22:55:4d:cd:5b:75:64:66:d9:8d:64:94:41:df:f2:36:
b2:47:1c:4c:b6:3d:d3:5e:cb:87:64:5f:fd:99:a6:db:d4:8d:
31:20:fa:ac:70:fc:0e:3c:b6:78:b2:1d:c4:7f:40:0b:1f:8a:
b6:90:a8:eb:fc:a8:57:57:a1:74:5a:50:50:33:cd:e1:48:a4:
68:40:d5:d7:b6:de:36:34:df:22:a0:e1:ed:83:9b:e6:07:80:
1e:cc:c4:59:31:c4:a5:9c:8b:40:5c:85:a5:5c:8f:9c:ad:54:
3a:37:e2:7c:f4:2e:e3:ef:6b:df:44:98:f5:65:b1:5d:2a:50:
20:5c:73:1c:34:78:bf:90:d0:a2:aa:87:d1:05:71:5b:bc:cd:
e1:38:e1:79:e7:27:42:33:23:47:e0:e9:ab:3e:0f:51:61:9d:
81:53:b7:47:71:7f:d4:b7:15:4a:44:a4:f6:a6:b2:64:d3:30:
87:1e:04:cc:ea:a7:14:f0:f7:b0:22:cd:63:11:e6:fc:73:76:
3f:b5:fa:44:cb:fa:71:85:e8:6d:c7:bc:f5:be:a8:6c:8f:34:
e5:e3:14:bf:9f:9c:a3:dc:85:88:21:5b:6b:c8:61:1b:c9:e8:
1c:de:c9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:02 2025 by rpki-client