Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: zY4hU4maZFlxU3YDBk/tZeDQ/gTDUJzKRoOFTOleQZY=
Subject key identifier: 9B:61:8C:01:7B:43:87:AB:6D:65:18:3B:2E:7F:19:4F:48:60:63:C8
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019A21E4C5D41BA34DADEBC4120C26541235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 10E5
Signing time: Sun 26 Oct 2025 19:00:32 +0000
Manifest this update: Sun 26 Oct 2025 19:00:32 +0000
Manifest next update: Mon 27 Oct 2025 19:00:32 +0000
Files and hashes: 1: QKE5A2-VWyd3J0DRrfMQlK1fMX8.roa (hash: fb4kqhQuHHEA1R522FziGZUhpgN31KA7VLx4uSTZ7+0=)
2: QibsYMI2HzBANNUyuh3X_SXi7C8.roa (hash: J+6lvfhlLdmu7GB6QikI0qn006fBR9guwOXMkwXCaOk=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: 1kHITnkfQFKwxpuA8ROIzKObVMK5lvE6yZhJXkKgPfM=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:c5:d4:1b:a3:4d:ad:eb:c4:12:0c:26:54:12:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Oct 26 19:00:32 2025 GMT
Not After : Oct 27 19:00:32 2025 GMT
Subject: CN=9b618c017b4387ab6d65183b2e7f194f486063c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3e:bc:02:bc:fb:20:68:79:f6:67:43:d4:34:
2d:5a:8c:fc:1f:56:b3:12:bd:c7:ad:05:54:6a:95:
5e:5a:08:c5:c0:df:eb:96:dc:bd:c3:96:22:f3:bb:
f6:35:23:87:1b:c9:6f:c0:85:d2:5d:2a:68:d2:77:
67:5f:90:88:6e:f9:f0:11:7b:44:99:a1:3d:32:07:
5d:2f:b8:a8:4b:79:62:b8:2a:4c:88:18:83:73:55:
75:15:3e:85:b9:98:04:40:cc:7d:9e:2d:d4:25:69:
24:9c:14:27:8d:96:70:a0:85:68:05:55:ea:65:f8:
be:b6:50:22:9c:b9:15:a4:0c:44:d5:4d:9b:bc:9d:
d3:24:25:da:f5:cc:c4:cc:00:47:a9:1f:e4:65:5f:
43:11:18:2b:b1:59:28:ed:d3:5e:58:fa:ca:97:5f:
0f:af:9c:3a:76:82:cb:61:bf:35:32:bb:30:33:2b:
82:19:57:7c:58:f1:98:b6:ed:5a:b9:ce:d5:45:51:
45:4b:54:f7:d5:79:72:2d:d0:5c:44:2a:8b:b0:d1:
e6:25:87:49:51:27:c0:71:1a:d0:ce:08:24:e2:6c:
86:f1:d8:b8:b2:74:46:39:aa:b8:27:a1:68:7f:69:
8f:d1:d8:77:21:03:59:8f:75:ab:c6:fd:0a:6f:cf:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:8C:01:7B:43:87:AB:6D:65:18:3B:2E:7F:19:4F:48:60:63:C8
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:ae:52:2e:d2:4a:4d:c1:f7:d4:dd:b9:ba:a2:a4:3c:7a:
8f:04:43:17:3e:1c:f2:f1:f0:fe:7b:bd:e3:ed:b0:32:ce:e9:
25:e1:97:01:89:cc:43:49:60:2a:5f:87:58:f1:4e:62:60:54:
20:75:45:0b:2f:47:40:28:73:8d:c6:5c:95:b0:d6:89:67:5f:
e5:de:f5:14:6a:39:01:a2:6f:26:4d:2c:11:77:9c:3c:15:be:
8f:87:9b:97:1a:85:bb:a9:ba:f4:cf:71:78:b3:54:45:9f:02:
75:d7:f0:41:71:76:1c:59:ab:d4:0e:ea:22:73:16:3a:b6:36:
7a:5f:d3:1b:32:f5:3d:7a:c1:c6:ea:d6:37:d3:c0:65:e5:b8:
cc:3e:2c:fa:87:c6:e8:4d:d5:92:a9:1c:c7:05:fd:d5:88:fb:
d1:4f:82:3f:cc:2b:9b:6a:d7:3c:a1:48:f7:cf:2c:46:e5:0f:
ff:e0:16:c9:3b:26:ac:ef:fb:63:ed:db:3d:da:e4:85:47:c0:
eb:25:f8:c2:45:70:c7:19:57:67:f2:9b:4f:d0:bf:55:4f:3d:
18:d9:7a:fc:be:18:07:e7:b6:35:31:56:a2:0a:24:b0:95:d5:
2e:df:52:56:06:01:e1:80:53:c6:f5:ff:cb:42:8f:09:aa:95:
18:7f:2a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:33:31 2025 by rpki-client