Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: ELCcjT+dgRZfGMzWo1GjUyMCjcrluSgkwO/fiS1LyFQ=
Subject key identifier: 94:71:2C:94:97:70:64:5B:44:79:8D:7C:83:20:AC:37:87:58:AA:9E
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019A1761988D81C844BF198DDD67517F0029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0666
Signing time: Fri 24 Oct 2025 18:01:03 +0000
Manifest this update: Fri 24 Oct 2025 18:01:03 +0000
Manifest next update: Sat 25 Oct 2025 18:01:03 +0000
Files and hashes: 1: 2CWxlLP-g2_NKa4Kkpj2mT541B8.roa (hash: mmFiMDnNmanIcg6TQLMQsrDR/+z17sNvs6gtqCoQhp0=)
2: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: Vd5WxAwlZfkgIIJ2LzzOLjmE0S8WxFzIXc3rnF3KCIA=)
4: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
5: zGpb-ZeCY1IKeaoUCFy7z97Xemo.roa (hash: mbhMc1h15zK2CFg+s3mq9POrXrfojhoCA2jehVwrtX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:61:98:8d:81:c8:44:bf:19:8d:dd:67:51:7f:00:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Oct 24 18:01:03 2025 GMT
Not After : Oct 25 18:01:03 2025 GMT
Subject: CN=94712c949770645b44798d7c8320ac378758aa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:b3:cb:e1:07:98:33:fe:f8:0c:dd:49:f7:
dc:6b:5d:ac:47:80:b0:c7:2d:7b:6b:24:5e:23:5a:
39:13:86:21:f0:e3:ff:2b:20:10:df:f8:d2:51:17:
99:79:da:9c:0f:65:7d:b9:09:f1:a8:c4:34:f7:84:
e3:1e:a2:7b:08:85:a5:52:5b:cf:f3:e8:ad:5e:7e:
ed:8b:31:57:d1:49:de:e0:0c:33:b0:26:8e:a9:ef:
4f:26:e1:2d:45:f5:90:b8:9e:f3:c1:90:4c:30:93:
68:ee:8c:00:53:95:fc:0b:20:b9:56:59:1a:43:c1:
86:d8:92:c1:12:5e:06:a7:19:44:1e:c2:ef:92:a5:
62:d4:35:1e:8d:4f:b1:bb:d8:b1:f4:8a:1e:56:0e:
99:11:bd:da:d0:39:94:25:cf:00:f4:4a:de:90:99:
46:c8:f6:82:7d:10:8c:5f:ed:cb:c5:91:d4:ac:74:
ff:8e:1e:d3:8a:0a:fe:02:a1:4b:83:7f:38:e4:cb:
63:29:3e:48:7a:dc:2a:a1:51:7c:fd:52:2a:b5:33:
55:e7:ff:eb:94:81:9c:c2:3a:9d:1b:2a:a6:57:b4:
d7:29:03:85:43:43:43:cb:08:14:6b:95:c4:e5:7d:
6e:db:68:2c:91:e6:02:ea:9d:ea:e9:75:fc:5e:19:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:71:2C:94:97:70:64:5B:44:79:8D:7C:83:20:AC:37:87:58:AA:9E
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0c:c7:d4:69:77:a2:06:cd:da:99:dc:78:cd:1d:6d:71:ac:
22:fa:e5:26:ee:89:5d:1c:1f:73:21:99:04:72:69:b9:60:03:
1f:92:b7:9a:54:ef:e9:25:84:14:c4:f3:c7:a8:5f:2d:04:f8:
fb:04:e7:81:04:c5:18:25:82:d6:69:51:37:89:3f:af:9e:0c:
d2:d8:7e:93:48:7a:e6:fe:b0:16:09:85:64:ac:ab:6b:a9:73:
5c:9b:6c:92:43:4d:22:d4:d5:18:42:72:06:3a:f1:c7:35:42:
7b:73:92:8a:e4:9b:3e:01:38:84:73:aa:ce:58:a8:a4:23:aa:
3b:ea:d2:ca:8c:72:d0:0b:65:e7:db:5a:06:55:7d:3c:4d:be:
b7:5a:ba:8e:d9:5e:a3:6e:d6:bf:84:20:1d:06:2f:af:ef:de:
3a:7d:d5:86:b9:c2:4e:13:86:99:5f:5d:dd:c1:f8:f3:01:63:
59:9c:ac:49:de:55:23:6f:98:b9:9d:aa:47:e4:b0:94:65:9f:
e5:87:27:03:fc:a8:ce:83:c6:6e:1c:79:3f:46:6d:45:c5:bd:
66:b7:1e:2c:34:2d:1e:85:aa:73:4f:84:d1:82:cb:74:69:98:
42:25:e7:44:a1:d8:17:57:25:89:ad:f9:ae:dc:aa:84:02:60:
05:96:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:30:43 2025 by rpki-client