Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: uuMRlKXVBQplx1o2m6gyylxhlOQ8Z4C4gzuop/mDbhQ=
Subject key identifier: F9:34:77:CC:0C:23:76:4A:78:63:D9:EC:28:FA:E8:40:BB:56:95:A8
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019A2A79C3CDE57F660A9A72B01145DA3D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 119E
Signing time: Tue 28 Oct 2025 11:00:14 +0000
Manifest this update: Tue 28 Oct 2025 11:00:14 +0000
Manifest next update: Wed 29 Oct 2025 11:00:14 +0000
Files and hashes: 1: KzHfiiDg2EcCwKAmppKJC7QdUFA.roa (hash: QZ0RWt1gfijBZB5RL8yUAfB/DWbprl5d1kxp7e8kc3g=)
2: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: dYnsT1zepPvQLyqul4JyJSHJhdSeTbmnR8dcClnQBv8=)
3: kuAnd9NqWnoBzCTnx0XxXmRi7Z4.roa (hash: gmNwgm6wcIRoGUSbEH7MItCnGX2M/c/Toez7Z0Fqses=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:c3:cd:e5:7f:66:0a:9a:72:b0:11:45:da:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Oct 28 11:00:14 2025 GMT
Not After : Oct 29 11:00:14 2025 GMT
Subject: CN=f93477cc0c23764a7863d9ec28fae840bb5695a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:81:86:10:45:cf:a7:fa:71:f1:3a:c6:55:
78:d4:4f:9d:3d:97:07:53:9d:7c:7f:a0:ef:30:a6:
2d:40:78:22:e1:f0:9e:1d:48:f6:5e:ea:3d:66:63:
16:85:21:bc:56:48:85:e2:27:b0:cb:09:ea:cc:10:
e2:37:38:9b:da:7f:f5:35:64:58:72:e9:33:62:9c:
c4:fd:a8:ce:48:8d:3d:64:75:d7:f8:8b:46:4e:0b:
af:65:16:2d:bb:89:0a:8d:84:db:b7:e6:41:d5:f3:
88:9f:80:09:53:42:23:7f:bc:d8:ab:7b:1e:16:53:
1e:3f:76:94:5c:78:6d:86:8f:01:cd:35:bc:ad:3a:
32:e1:ee:61:eb:8d:79:75:5e:2d:f7:79:30:1d:4a:
c2:02:10:96:f0:31:81:7f:26:8d:46:a9:d7:a6:c2:
99:af:39:58:c8:c4:58:72:28:a3:b6:39:c4:0c:4a:
76:d6:17:44:59:87:d8:8c:a8:00:6f:9a:62:0b:1f:
bb:8b:6c:bf:b0:36:eb:f1:ad:75:b5:91:bc:68:95:
a9:ef:59:08:4f:00:06:1a:0c:75:6d:a1:58:32:2a:
fd:7c:56:19:7a:d3:c6:bc:0e:16:43:6c:7c:b0:76:
44:ba:42:d5:01:ec:c0:4c:29:c4:f8:0f:ba:e8:6a:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:77:CC:0C:23:76:4A:78:63:D9:EC:28:FA:E8:40:BB:56:95:A8
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:67:96:07:6b:19:0a:c8:de:6d:39:a0:86:fb:2a:8c:42:7c:
d1:b0:40:54:ca:9d:80:15:79:08:c8:fa:dc:25:7e:24:7f:9f:
4a:c6:81:99:f8:2c:51:aa:fd:af:52:4c:aa:74:4e:6a:7e:90:
1b:01:9b:bb:8a:3a:1e:7d:4f:92:48:ef:17:6d:c6:83:3b:59:
45:73:bd:1b:2e:fc:52:e2:c4:3e:44:11:e2:9a:33:b9:ec:bc:
98:cd:ad:a9:4a:e8:23:a2:75:71:1d:cd:e5:1d:f0:e2:50:59:
d1:31:81:2f:ba:bd:72:e5:99:44:9a:2b:01:ee:b4:d7:83:05:
7f:78:a7:f3:a1:a1:6b:62:dd:ed:dc:1f:48:f3:af:7d:8d:f6:
fe:d4:44:3c:51:3c:72:ba:23:86:e7:7b:c5:b6:b2:ea:73:ec:
67:93:a5:50:07:78:28:bb:50:66:b1:8f:70:d3:c6:ff:ee:27:
7f:c3:1f:e7:bd:5e:51:75:2c:d3:1b:77:5a:7f:ac:8e:6f:ed:
1f:65:7f:8c:03:e5:f4:3e:55:2d:8a:59:79:41:cf:2b:8c:a9:
46:f6:2a:bb:9d:a1:29:11:57:a5:b4:fa:ed:3d:09:e3:bf:cc:
df:ad:0c:c7:1c:af:a9:d5:36:3c:3f:32:66:99:33:68:a4:38:
32:71:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:03:08 2025 by rpki-client