Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier: a7iEdzK7praoj5BvWxGJLTtK6CRGp+jqnpJKQtuCOkA=
Subject key identifier: C2:09:01:F7:92:66:C7:60:FF:2B:55:31:A0:9D:A0:F6:06:1F:71:07
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial: 019A24AEDCB035992DB7BC86D4F1D6B083DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number: 03DB
Signing time: Mon 27 Oct 2025 08:00:30 +0000
Manifest this update: Mon 27 Oct 2025 08:00:30 +0000
Manifest next update: Tue 28 Oct 2025 08:00:30 +0000
Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: ktB3Mv+NF9J0PvIxL9GAfCyNP3szUaI4Dwijnt0nLS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:dc:b0:35:99:2d:b7:bc:86:d4:f1:d6:b0:83:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Validity
Not Before: Oct 27 08:00:30 2025 GMT
Not After : Oct 28 08:00:30 2025 GMT
Subject: CN=c20901f79266c760ff2b5531a09da0f6061f7107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:52:e5:02:d8:df:c1:18:2e:0a:47:27:70:
34:3c:ec:db:5c:2a:a9:f5:3f:62:f3:94:10:41:aa:
ff:d9:4b:a6:3d:62:fa:98:19:37:4b:8b:5b:74:68:
2e:77:18:44:71:d9:eb:5d:e5:84:9a:0a:4e:81:79:
5d:22:ad:9b:77:3a:13:17:0f:7e:3f:1b:9e:c7:a5:
06:91:f6:2a:86:17:c5:45:c7:4a:e2:30:9d:ea:e2:
c5:b6:c8:02:dc:01:8b:56:4f:e4:3f:6d:60:56:ed:
3e:2b:93:8e:4c:0d:0c:f7:7a:39:e4:d0:8d:9b:9f:
d2:dc:a0:4b:86:55:79:b4:c0:45:38:d0:3f:bf:d2:
e2:c0:7e:b6:a0:83:ea:4b:27:97:2f:1a:1d:c8:03:
b4:c4:55:8b:8c:65:e3:07:48:2c:ab:72:5c:92:af:
d4:67:7a:fb:59:b8:59:43:01:92:3b:e7:b4:ad:14:
8a:6c:73:4d:89:c1:91:f5:06:b9:fd:4b:0d:38:0b:
be:a2:19:5c:29:47:bf:e1:09:88:b7:03:b4:24:42:
b7:a6:34:b0:8b:71:5f:19:22:9b:1a:f9:94:bb:01:
d2:6a:d1:8f:dc:1d:01:07:7b:c2:c1:e6:b0:98:1c:
6b:b5:06:88:d7:31:2e:31:8a:9b:19:9f:22:39:86:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:01:F7:92:66:C7:60:FF:2B:55:31:A0:9D:A0:F6:06:1F:71:07
X509v3 Authority Key Identifier:
keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:25:d6:76:64:d2:46:a9:cd:36:35:4c:0f:bd:de:d9:66:22:
24:2e:7b:41:ac:b0:7a:08:e4:9d:46:00:91:ae:89:59:ae:c7:
a0:c3:25:19:2f:75:36:a3:43:ab:8d:5b:a6:a0:fe:8a:d4:9a:
8c:9c:0d:e9:c3:b8:7d:33:57:ad:e9:9e:24:04:aa:94:1c:6d:
d8:7f:05:47:9a:2d:87:ec:8b:c9:d9:cb:0f:aa:91:da:53:95:
a7:df:b1:dc:ea:0f:fc:d3:3f:60:69:04:a7:9c:53:90:e6:c4:
00:a6:a3:6c:02:0c:d4:ab:91:c0:b8:bf:30:bc:9f:fc:ba:9a:
f8:2d:67:dd:d5:8a:6e:66:9f:26:ef:20:18:22:2e:b6:02:f5:
14:8d:d8:c1:63:9a:e0:53:f7:d6:17:bf:42:3f:82:b5:53:2c:
32:0b:7b:74:1a:19:bd:3f:f9:de:e6:2b:f2:05:78:f2:68:64:
13:b7:47:fe:f7:2e:58:90:af:cc:b5:dd:6a:8b:27:c5:99:97:
f4:52:0c:a5:87:95:d4:1f:64:53:58:aa:6f:15:53:72:7a:6d:
bd:f0:54:41:21:48:5a:6c:84:9d:15:b0:aa:2d:a7:59:4e:cf:
45:b4:26:9c:c5:b4:03:df:ed:bb:04:25:0b:b1:12:fd:ab:cb:
ff:c1:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:25 2025 by rpki-client