Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier: 8vKt0+T0X9DbsQ/uvnsLRI+u/d/dxyy0KYxZkvMfEao=
Subject key identifier: BB:7A:BA:CE:DC:B3:AF:CA:9C:E0:1F:E2:3F:A1:F1:15:CA:6D:58:4B
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 019A21ADFDA685787FD689C1EECD431C125B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number: 0ADC
Signing time: Sun 26 Oct 2025 18:00:41 +0000
Manifest this update: Sun 26 Oct 2025 18:00:41 +0000
Manifest next update: Mon 27 Oct 2025 18:00:41 +0000
Files and hashes: 1: 7SHjb3To_8zToO1PZkaOAJQ-mzY.roa (hash: aqql1uslZqhQkjcDpj0gs+oDngpuPaF1ypOzLp6Vqak=)
2: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=)
3: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=)
4: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: QHVdcBARjxPTV77cK5x4XJHkVHp4+OqqEa8z+a9cQGs=)
5: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:fd:a6:85:78:7f:d6:89:c1:ee:cd:43:1c:12:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Oct 26 18:00:41 2025 GMT
Not After : Oct 27 18:00:41 2025 GMT
Subject: CN=bb7abacedcb3afca9ce01fe23fa1f115ca6d584b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:ff:d1:fc:6f:a8:70:79:48:ee:a2:10:d6:
20:b5:5e:91:b1:b8:ca:eb:66:fb:e3:a2:11:0b:86:
cd:63:2a:eb:96:5e:a4:30:cb:5e:7d:92:fd:6d:4c:
8e:27:1c:b6:e0:bb:43:b6:7c:f7:95:de:2a:2b:b6:
9a:08:7d:14:98:74:d6:4b:52:31:42:b4:b1:a5:ab:
d3:21:e5:ad:4e:e9:c7:78:13:39:d3:13:fc:4a:0b:
64:02:91:f4:58:18:71:7f:38:11:65:ad:b8:97:77:
5d:58:29:34:a5:41:0d:8f:c7:e3:e7:db:22:49:fe:
a2:c7:3f:80:46:50:22:b6:04:c8:3d:3a:91:d3:cb:
af:52:24:fc:8c:71:05:e0:fc:d3:4b:94:9e:58:f4:
a1:8f:c7:30:65:48:4b:56:cd:dc:0f:16:cb:45:52:
99:ac:57:6b:49:13:a4:36:96:6d:eb:65:98:1d:31:
16:9f:ff:b7:39:95:80:cd:44:3d:e8:0e:ee:1c:a5:
9a:43:64:ad:1c:9e:d9:58:b7:b9:34:21:16:b8:d3:
04:7d:5d:56:41:29:e6:33:fe:58:d8:8d:49:83:12:
48:e9:3f:9a:de:29:46:94:21:f1:44:00:1c:6a:65:
f4:b0:cf:08:d4:b4:42:71:70:c6:86:b7:82:2f:a9:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:BA:CE:DC:B3:AF:CA:9C:E0:1F:E2:3F:A1:F1:15:CA:6D:58:4B
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:67:f6:33:f1:da:cb:5d:c3:9b:7e:f3:69:e0:f5:bd:38:
e5:4b:61:fd:c3:e0:02:ff:38:95:56:37:3b:97:8e:a6:38:ad:
fb:61:40:66:60:b2:1f:67:d2:09:65:a6:52:4b:4c:c7:47:dc:
f3:c7:fd:5f:56:23:e2:df:05:8c:9d:98:9d:52:83:52:d1:d7:
14:cd:06:49:75:14:1d:33:c5:9e:8c:f3:43:68:e2:3b:f3:e6:
62:aa:6f:cd:80:36:05:89:98:d9:d3:0c:af:b4:08:b5:0a:ea:
42:de:c8:55:8a:34:49:cf:4e:ba:c5:1d:fa:37:45:9e:72:5e:
de:28:35:74:c6:c2:c9:3c:df:7b:ab:80:1c:2c:88:da:74:c9:
67:1b:9f:e3:32:3b:23:18:23:4c:91:27:6a:af:b5:ef:eb:34:
55:44:60:74:dc:55:b8:8d:23:9c:77:89:11:5d:48:35:d6:e1:
9f:ed:16:74:fa:34:2d:d1:f5:82:4a:0a:12:07:21:f9:0d:c6:
11:57:d0:30:62:f3:f5:f3:8e:8e:dd:76:7d:8d:2f:e9:5a:a8:
3b:7d:df:34:d8:95:fa:c8:e4:8c:34:e3:f6:f5:47:23:9d:e2:
b1:0d:e6:dd:e9:bc:a3:ba:cc:70:fc:72:40:5c:de:89:d9:26:
86:56:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:54 2025 by rpki-client