Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: 3H8LP6TlNCYo0PBkn5SbLjwTSFSF9XXwCdzIpxuWNbI=
Subject key identifier: 5C:0E:2B:13:42:D3:6A:14:B7:8F:14:4A:E7:63:A8:69:9F:BA:53:08
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 019A26678E4E7A49D6336BF49E148AC0EC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 16:01:52 +0000
Manifest this update: Mon 27 Oct 2025 16:01:52 +0000
Manifest next update: Tue 28 Oct 2025 16:01:52 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: yb0nfQ6uap3xFlDhn2YN8q3IyLWFdKdzjK6sNl8enUc=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:8e:4e:7a:49:d6:33:6b:f4:9e:14:8a:c0:ec:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Oct 27 16:01:52 2025 GMT
Not After : Oct 28 16:01:52 2025 GMT
Subject: CN=5c0e2b1342d36a14b78f144ae763a8699fba5308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:9e:18:76:a9:e2:59:5c:4f:e7:15:d5:4e:
be:d0:a8:28:16:ee:d2:af:b4:4e:2a:06:53:c7:74:
db:6f:f5:a3:92:73:05:43:f0:e7:94:62:85:16:3e:
ce:3c:23:f2:77:f4:8a:3f:57:97:eb:5c:f8:ad:3e:
12:6b:19:e5:75:55:9b:5c:cd:c7:58:c5:07:1e:cc:
4e:ed:b7:fa:d3:b9:b4:42:7d:e5:af:ca:9b:2f:a3:
d1:54:a9:b9:24:4b:90:9f:e2:4a:71:87:c9:48:d1:
d1:2b:dc:6e:0b:f8:c2:93:70:58:dc:2e:7f:ca:40:
ec:33:b8:1f:e8:ed:a7:fd:e9:02:48:9d:4b:73:e2:
80:c4:46:4d:47:e2:4a:ae:5e:d4:2a:d8:33:f8:ac:
2a:ab:c1:20:c4:d6:86:93:fe:08:6d:fe:9d:7f:c8:
68:5f:21:d2:93:9d:8d:04:0c:4c:6c:a2:71:60:d5:
2c:09:69:bd:9f:75:41:ef:fe:da:43:74:b3:39:ca:
c1:f8:37:b3:46:e8:61:d7:a7:91:78:d4:f9:82:2e:
64:a9:2e:cd:d1:cc:96:f7:9c:93:70:24:f7:40:13:
d3:88:b5:4c:eb:ca:91:f5:53:a8:4b:d0:2c:34:82:
0b:d1:3b:c2:c9:6d:10:48:33:ea:c0:61:76:69:2e:
aa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:2B:13:42:D3:6A:14:B7:8F:14:4A:E7:63:A8:69:9F:BA:53:08
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:45:8f:56:24:ed:90:1e:e0:9c:c4:1a:53:1a:eb:ca:1a:ec:
25:8a:9a:7a:c8:4b:d7:93:c8:b0:3f:4f:8a:17:2e:b6:52:4a:
9a:b6:74:14:d8:cd:22:2b:27:7e:e7:e5:78:2d:ed:80:c4:f3:
9e:a6:c8:1a:30:4b:52:c7:5a:52:d6:ba:fd:ab:37:f8:ad:00:
bf:8d:00:fa:33:02:f6:04:da:f4:e5:05:42:e5:d6:74:91:07:
d1:f4:e1:4e:90:78:53:c3:64:5e:a2:94:70:6b:44:0f:fd:73:
bf:c2:59:19:0d:fa:b0:bd:86:60:a2:3c:c9:f1:2a:66:6d:33:
06:31:f2:9f:4d:df:a6:87:c8:52:a2:fb:b1:4e:29:f0:01:c2:
22:b8:51:b3:00:df:7e:82:b0:38:5b:09:25:25:8d:a7:17:a1:
ee:48:9a:48:6d:80:db:42:79:5c:94:12:80:49:45:9d:18:45:
f1:e5:23:ad:48:c1:88:c4:40:53:0a:61:b2:9c:7d:cc:82:18:
b0:99:20:a2:dc:e3:64:fe:ae:79:e9:52:57:cd:9a:c3:16:df:
9a:43:7f:7a:90:a0:7b:fd:50:36:65:74:6f:bf:d8:f9:26:50:
99:53:25:db:75:f8:66:4e:78:ad:31:09:16:a4:fe:14:a9:a6:
81:73:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:19:30 2025 by rpki-client