Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: uzyVbgSCaLT+wvqmSX/48wEbDMKtiGlpcAcwXchO77M=
Subject key identifier: 10:35:10:9E:C6:33:85:C4:4E:39:EF:7F:BB:C7:7C:A4:81:C6:30:DF
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 019A1FBF1A64A398C74E8866C921CABFFA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0C2B
Signing time: Sun 26 Oct 2025 09:00:09 +0000
Manifest this update: Sun 26 Oct 2025 09:00:09 +0000
Manifest next update: Mon 27 Oct 2025 09:00:09 +0000
Files and hashes: 1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
2: KPlaq01Tm_7ZQDcSXoByiFXkYP4.roa (hash: pqcUxo+09w1rwwb/a+Pv1KMDwz7jBVowX0NYd3fbC7s=)
3: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
4: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
5: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
6: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
7: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: AizK8p4iFI1JgsIvLfP8Ex1stencq/FnlcaLazuC+y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:1a:64:a3:98:c7:4e:88:66:c9:21:ca:bf:fa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Oct 26 09:00:09 2025 GMT
Not After : Oct 27 09:00:09 2025 GMT
Subject: CN=1035109ec63385c44e39ef7fbbc77ca481c630df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:e9:73:ef:0c:d5:2e:ed:98:8b:2f:14:3b:
f9:a9:47:e4:65:bf:ba:a4:33:b4:21:f0:c6:fa:34:
8c:97:29:12:f2:eb:7e:e5:9e:30:4e:a1:c4:9a:35:
f1:c5:af:8c:8e:41:6b:0f:91:7b:5d:1a:99:1b:8e:
e5:e0:84:0f:87:54:0f:4f:22:59:51:ee:01:32:60:
f7:65:75:d3:a9:6b:4e:54:bd:95:2c:48:6b:a9:ae:
5c:50:b7:c7:c7:cf:1c:cd:47:cb:3f:77:0f:db:0d:
07:41:61:aa:c4:57:19:75:10:9e:fc:34:58:39:ff:
66:4b:6f:9d:87:28:9a:8e:a7:e9:23:7a:55:7d:fa:
5c:2a:8c:cc:1d:3b:3d:57:db:61:74:d3:76:7d:39:
d8:8f:c0:73:7e:dd:fc:09:26:66:06:db:15:40:6f:
2f:b3:2d:5e:b7:0e:b3:f5:c1:1f:a4:3d:6c:5f:f6:
02:14:39:59:ad:15:09:3f:e8:0b:f3:db:34:a4:c0:
93:14:ea:f5:59:06:40:ba:22:22:a8:c7:26:eb:53:
59:22:65:b9:31:fc:6f:82:d7:9c:6c:b6:d2:62:b7:
ab:7a:15:45:ae:af:3b:2c:08:57:52:ca:b9:f1:49:
dd:d0:60:d0:35:5d:87:26:7d:07:45:4c:4b:26:5f:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:35:10:9E:C6:33:85:C4:4E:39:EF:7F:BB:C7:7C:A4:81:C6:30:DF
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d7:ca:9c:fa:ff:73:ed:9f:17:04:59:5b:a1:ee:36:5e:93:
14:53:82:6a:42:20:95:29:fc:62:48:28:a3:41:ed:70:5a:e6:
52:b3:90:37:22:43:de:e6:f6:49:5d:38:31:0d:77:9a:a1:ed:
9f:b1:d5:e4:8f:45:fb:9f:51:98:ae:e7:2f:2a:8a:98:98:e6:
f0:6a:55:a0:75:d5:f3:3c:bd:68:aa:47:a9:6b:37:3f:4d:f4:
d5:0a:b9:a2:08:01:0e:5a:79:ca:dc:eb:bc:41:ab:70:ee:d5:
6e:af:8e:34:28:38:4c:26:ea:f0:9f:a6:66:a3:72:80:4f:8d:
dd:b0:c4:77:86:d2:a5:82:57:92:f4:0f:ec:e5:ae:9a:ae:7c:
d3:34:d0:4b:6d:3a:17:d9:af:88:c1:6c:37:6b:e1:40:1b:9d:
eb:a7:61:fd:f0:1c:b4:14:66:bb:8e:14:02:ab:0a:87:ea:f3:
d7:9b:99:ad:76:9f:d2:9d:2e:6a:3b:e6:ec:c6:4f:95:5d:85:
d0:ec:da:cd:71:4a:95:c2:7d:18:61:52:de:92:ac:0f:f3:c3:
fa:78:69:35:ba:36:28:de:99:72:2d:1b:dc:94:25:f3:03:d7:
6d:53:b4:91:cb:af:3a:43:25:55:17:de:bb:c4:4c:cc:76:68:
82:37:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:14:18 2025 by rpki-client