Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: yaI/5QNU7ZsxE2PaKd1ivQKW49W3Ar9GFGI9+Odaksc=
Subject key identifier: 58:02:CE:05:C5:8C:94:EB:59:72:EE:A2:C8:47:94:F1:A8:0E:2C:52
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019A19869CD57F30D1C81589DAC37692B42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 072E
Signing time: Sat 25 Oct 2025 04:00:43 +0000
Manifest this update: Sat 25 Oct 2025 04:00:43 +0000
Manifest next update: Sun 26 Oct 2025 04:00:43 +0000
Files and hashes: 1: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: 4EBUJ2gIo/XHauKSJCF0cSSbz5ZuSc10ogI9YdsMxLk=)
2: EEHOXZie7GfjFP8O_aL3DaZW-cs.roa (hash: X68IlMoKqFdfJQq29aFoZvl4dyUrIU6qUuNNpdY5QY0=)
3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=)
4: R6j9VFf9hyGNWvQI3K-rac4qKtM.roa (hash: OsF+wduGV2ZDH6UXcdpVcVuvDncNr0AEm//3Zi2I5P8=)
5: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=)
6: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=)
7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=)
8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:9c:d5:7f:30:d1:c8:15:89:da:c3:76:92:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Oct 25 04:00:43 2025 GMT
Not After : Oct 26 04:00:43 2025 GMT
Subject: CN=5802ce05c58c94eb5972eea2c84794f1a80e2c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:23:97:bf:6e:86:85:24:1c:c2:4a:74:d0:
f7:b7:a8:9d:06:f6:e6:f1:9e:a9:1e:ae:07:00:3a:
2a:4f:e7:14:17:c3:06:80:3e:be:62:8b:c2:f8:d2:
39:39:47:cf:da:99:d0:f7:04:91:03:c5:c8:fa:bc:
72:74:62:4c:5a:68:ab:08:1d:13:59:e6:54:6b:2b:
e6:64:0e:a6:1f:b4:7c:52:a7:1f:b1:36:af:ee:92:
50:7a:1b:6a:69:2d:86:ab:0b:0a:be:fa:d5:93:d2:
e1:21:5b:3b:23:f2:b7:b1:36:88:5a:63:40:d2:e8:
4b:05:cc:ae:63:dd:64:c0:77:02:3c:f8:5d:36:d3:
b3:b4:8e:8e:6c:6a:4d:04:32:cc:f6:4d:f3:db:bd:
76:61:28:44:73:b7:81:a0:dd:23:bb:5a:b8:20:fc:
37:8b:5c:dc:39:a6:dc:1c:13:f1:14:38:18:af:c3:
f0:2a:14:4a:7e:8a:10:e4:f2:f0:da:84:50:29:23:
fd:25:cc:08:fc:d2:e7:39:b1:a2:a3:84:6b:b6:a6:
ee:32:32:fc:36:10:e0:34:9c:7c:1d:9f:33:8b:ed:
c1:ee:1c:01:ca:6c:dc:96:1a:2b:25:40:55:50:2b:
d2:30:ea:d1:e6:7f:9a:03:db:ba:3d:3e:1a:62:3b:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:02:CE:05:C5:8C:94:EB:59:72:EE:A2:C8:47:94:F1:A8:0E:2C:52
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:12:eb:26:5b:cb:21:f2:a1:a2:89:e9:b1:26:22:56:3e:d4:
a1:72:10:36:ae:2e:05:70:d7:38:6e:fa:11:3f:43:61:c9:f0:
59:f7:e1:c4:f5:a8:30:91:a4:64:c8:c9:5c:17:5b:86:d2:66:
fa:04:31:b9:d4:67:54:1d:83:b7:f7:04:30:05:62:bb:67:ee:
dc:a6:17:75:90:80:81:0c:59:56:1a:1e:37:87:82:04:83:f9:
6a:8e:e7:30:9f:95:77:70:5d:cc:1a:05:33:98:24:72:70:5a:
50:b9:26:b2:09:31:fe:34:e7:d6:b0:74:70:0a:ce:1a:2d:bb:
29:3e:18:6c:b5:8f:ad:fc:f8:ab:05:5c:c8:ff:5b:b9:b1:73:
c8:cb:87:66:38:12:5c:65:1d:e3:cf:00:16:52:ae:75:9a:b7:
46:2d:70:95:c3:1d:09:70:18:6d:a4:13:ab:7b:cb:7c:d3:77:
9d:4b:13:e5:30:68:ce:e2:fc:6f:d2:af:f6:b8:9d:41:74:7d:
ec:e2:87:0e:5d:fe:02:df:73:5a:9b:a5:5d:f0:0a:70:03:7c:
bf:52:be:2f:5c:6a:03:b2:ae:80:b5:65:5c:fb:f5:a3:f9:09:
f8:d2:e5:63:dc:2e:3a:b6:1b:4f:02:d4:70:76:50:91:a7:4d:
83:88:1c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 07:59:58 2025 by rpki-client