Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: G0e0HPvQ8RszZptRCViZeoJnBdXYk98jBxfCWssvRko=
Subject key identifier: E0:B2:92:B8:7F:44:05:3A:A4:20:60:53:B2:18:DE:F8:9D:EF:60:07
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019A26665B5032CA26670BDE63C3C4C7A79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 16:00:33 +0000
Manifest this update: Mon 27 Oct 2025 16:00:33 +0000
Manifest next update: Tue 28 Oct 2025 16:00:33 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: JO0ICzHYu/ynic3VDvz6Symp/QoPJQZ0pqimodrAsE8=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:5b:50:32:ca:26:67:0b:de:63:c3:c4:c7:a7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Oct 27 16:00:33 2025 GMT
Not After : Oct 28 16:00:33 2025 GMT
Subject: CN=e0b292b87f44053aa4206053b218def89def6007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:75:93:74:4c:34:e2:5e:e3:6c:d8:7a:9f:
46:d4:df:24:19:1e:f7:b6:5e:7c:b9:a1:6a:ed:a5:
bb:93:b7:75:69:f5:4a:3b:81:ff:28:e5:da:b6:3b:
91:14:4d:42:60:d7:89:ff:b5:37:22:0f:5e:fc:e1:
87:30:0f:75:ad:25:59:98:48:93:db:0a:49:0c:70:
f5:da:d3:9e:87:d5:6a:31:08:63:40:42:59:a8:23:
e7:c1:2c:e1:08:26:5f:99:75:de:1a:58:61:a1:fa:
eb:2a:1b:bf:ae:a8:25:ac:cc:0d:9e:d6:2f:32:fa:
d0:ab:84:63:fc:ad:6c:36:34:df:a4:40:72:54:a0:
74:e7:4c:ee:17:1c:27:c6:11:e8:ea:84:3d:b9:36:
67:38:c2:96:17:7a:9c:28:53:f2:93:c0:fa:19:1b:
de:e5:49:7d:8d:8a:a4:2d:ab:a2:bb:db:2c:e6:d9:
64:c6:03:ab:61:15:05:1b:c4:62:fb:d2:e2:3e:06:
a3:75:21:ae:32:83:a0:a7:ea:b4:c3:61:e0:1f:15:
9c:82:fa:19:08:93:b1:29:ef:8b:ec:e1:db:45:f4:
96:90:ec:67:fa:7c:2d:58:8e:1f:04:33:c8:e5:5c:
4f:8b:c3:35:4b:e5:19:8e:75:de:8f:5e:26:5c:af:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B2:92:B8:7F:44:05:3A:A4:20:60:53:B2:18:DE:F8:9D:EF:60:07
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:66:ad:19:6c:c8:30:6c:26:63:1d:53:d5:ba:12:1b:7d:85:
2d:56:6b:50:a1:d2:67:aa:89:8b:08:d4:f9:6b:57:17:c8:61:
a5:a5:81:4a:d6:bf:1d:04:e7:2e:6b:ad:74:43:11:94:1c:b0:
35:65:52:ae:43:78:19:23:43:3f:d3:6d:15:5d:e4:99:4d:c0:
dd:06:a5:13:3b:87:ff:f5:c0:e0:3c:c2:ff:a3:42:d6:12:d3:
bc:1e:cf:1e:e2:eb:a5:67:5f:cd:aa:df:37:fd:e5:b2:f3:c4:
99:cd:69:44:8d:6b:6d:0d:88:d1:5e:6a:86:78:37:cd:64:d9:
c7:af:a7:8b:bc:5a:43:29:56:91:9f:c9:76:55:47:49:b3:a0:
2a:aa:ff:44:47:07:bb:4c:df:90:52:62:8d:60:41:03:e0:05:
a4:c0:88:81:5c:12:d5:9b:ba:c0:cf:1a:ac:d9:c4:35:37:3d:
65:d1:37:32:60:15:cd:f0:a7:eb:3d:25:8f:72:42:da:0e:d2:
bb:34:74:3f:2b:61:9b:10:27:7e:f7:c7:70:1a:70:b1:a4:d7:
8b:3c:99:f7:a1:01:a6:7a:2d:3b:ff:d6:d4:85:56:12:c9:71:
0a:90:4b:cf:69:45:46:77:a7:4b:0c:a8:a1:f6:52:34:63:cd:
fb:2d:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:27 2025 by rpki-client