Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: ycXxOA4KCZrnxgxLCZO1WRBOOupfeEoAcLeFqVFYMGA=
Subject key identifier: 7A:DD:FF:7B:8B:A3:6F:91:F2:21:CE:A1:BF:1C:92:87:0C:8B:05:A5
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 0199C4C4F3204A1342D5B786C257173B9A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 025D
Signing time: Wed 08 Oct 2025 17:01:05 +0000
Manifest this update: Wed 08 Oct 2025 17:01:05 +0000
Manifest next update: Thu 09 Oct 2025 17:01:05 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: tOpGBSuK7eyDhw8OCeN/oFf6DbupUCALcNGl9z0R0ss=)
2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=)
3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:f3:20:4a:13:42:d5:b7:86:c2:57:17:3b:9a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Oct 8 17:01:05 2025 GMT
Not After : Oct 9 17:01:05 2025 GMT
Subject: CN=7addff7b8ba36f91f221cea1bf1c92870c8b05a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:ed:bd:3d:71:49:a7:95:da:d0:8d:29:fe:
8b:99:25:76:ab:d4:c9:6b:d5:81:de:1e:7c:9a:12:
e3:98:a3:29:5e:1b:e5:9f:a8:36:b1:9a:2b:c6:a4:
80:6f:0e:24:c5:95:da:7d:70:00:f4:cf:0e:2b:5b:
7d:d1:92:7c:a7:b8:f9:8f:c0:a1:94:c2:bb:bd:cd:
47:8a:4c:4e:8a:43:25:76:f5:74:d1:a8:9e:c3:f9:
54:11:34:dc:2e:8a:cf:c0:98:ba:d6:93:c6:ba:31:
7f:c9:21:09:86:47:95:3d:5a:28:fa:cc:5a:63:7a:
eb:7e:19:ad:6d:cc:bd:8f:97:7d:86:fc:06:fa:54:
3f:bf:f6:87:ca:b3:67:2f:a6:9d:81:b9:d2:99:37:
fa:95:ce:ab:10:a5:04:39:75:3b:10:81:09:04:d7:
6a:d0:5e:2b:c5:a5:12:f4:ea:3f:8d:4c:7d:7d:4e:
24:1c:64:82:da:16:fa:31:70:ac:6e:2d:60:e7:b8:
a7:fa:0f:d6:24:88:25:de:12:a9:52:08:ff:77:ae:
bf:ff:a5:b9:38:45:70:ad:1f:c3:e8:43:04:69:db:
0e:80:17:2b:c7:80:b0:74:e4:0b:fe:7b:78:34:ec:
f4:d7:52:81:b6:78:23:27:a9:01:42:9f:e6:84:e2:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:FF:7B:8B:A3:6F:91:F2:21:CE:A1:BF:1C:92:87:0C:8B:05:A5
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a9:47:4d:e0:2a:a9:e6:ad:69:d8:cc:d6:34:85:1f:9d:4e:
2c:4d:2c:65:38:eb:dc:7f:e6:3f:9d:fa:c5:8b:10:cd:ce:56:
a2:1b:cf:7b:a0:04:47:bd:bb:49:be:6b:5e:c8:a3:6c:af:4e:
74:d6:3b:7b:ed:71:98:4a:a6:6d:00:1a:d7:f2:b8:4d:de:ae:
d6:62:f5:dc:59:25:34:9f:fd:a5:c8:b3:2b:0c:a9:7b:f5:13:
a1:8e:42:a9:a9:b9:25:57:06:d3:04:12:10:aa:54:3d:ed:b0:
39:98:7c:bf:86:6e:8a:20:ae:61:cb:4f:e7:50:41:05:bf:20:
80:b5:06:4e:0d:60:ac:45:5f:43:05:d0:1e:2c:31:9e:0e:20:
d3:70:a8:31:9f:ce:5f:6e:3e:2a:d4:f5:d6:fd:dd:7f:86:be:
f8:da:10:68:d1:8a:f9:13:28:f6:f9:93:3a:31:99:ca:58:43:
95:e6:79:2c:31:93:14:c4:87:a3:ac:a2:b1:83:d4:cd:3d:f0:
3e:db:7c:d2:37:f0:c2:48:35:04:b9:81:4d:bd:9e:d9:c6:ee:
ca:c1:14:a9:95:f5:0a:b1:aa:1a:fb:d6:38:4c:a8:52:60:41:
aa:eb:75:28:5f:2b:56:79:7b:e6:49:36:39:f9:e4:c6:0e:67:
4a:b0:49:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:44 2025 by rpki-client