Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: QYqbtLa3GowCDykSQT2oC/B9X2sKrTaqFzfD7Srmdh4=
Subject key identifier: B7:D2:1E:C9:88:D5:94:64:0A:CD:2F:65:D7:C8:1C:89:24:25:B8:09
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 019A19BD44696BEBE6742E56ADB8A1CFA81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 0ECA
Signing time: Sat 25 Oct 2025 05:00:25 +0000
Manifest this update: Sat 25 Oct 2025 05:00:25 +0000
Manifest next update: Sun 26 Oct 2025 05:00:25 +0000
Files and hashes: 1: 74i8adSuyk3kRHlH4ayLicT7xOo.roa (hash: Nfrv0YEiRjMeyhh89QiKjse1lGFwS8hysdJzu2cW8w4=)
2: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=)
3: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=)
4: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=)
5: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=)
6: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=)
7: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: 9z+F+KuQR2kS1RlSREwKTlG6MLPwxlh/wj6+W691z34=)
8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=)
9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:44:69:6b:eb:e6:74:2e:56:ad:b8:a1:cf:a8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Oct 25 05:00:25 2025 GMT
Not After : Oct 26 05:00:25 2025 GMT
Subject: CN=b7d21ec988d594640acd2f65d7c81c892425b809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:3a:3d:22:51:2e:aa:0b:63:eb:02:c3:7b:
f0:36:07:ea:61:a1:80:29:52:76:35:35:33:c6:ae:
71:38:99:85:24:ec:07:d4:a3:7e:bc:f7:40:56:72:
ef:7d:01:60:f3:34:df:f4:0f:b7:78:8f:87:65:30:
4a:39:c5:ff:a0:b1:1a:e6:11:2c:3b:28:b6:84:cf:
8a:8f:dc:ee:ab:5a:e1:20:e6:0a:00:0d:4f:c1:a5:
c7:16:3b:18:f1:65:a4:32:20:4c:b4:e6:fd:3c:b0:
ff:65:83:1e:6f:6d:a2:a2:54:16:79:14:0b:ff:e6:
1d:b8:1c:f5:d9:8d:99:b7:ef:b5:9c:51:e8:b1:36:
3f:f3:1a:dc:ed:52:56:c8:f4:2f:a2:99:05:aa:e5:
50:8b:63:ab:75:1b:cf:44:70:6c:3a:6b:4a:83:fc:
34:b4:6a:27:dd:42:b7:86:73:2e:b7:33:00:c1:42:
59:41:3f:87:d4:29:44:eb:99:12:f3:bc:3b:bc:c9:
5e:4b:51:6b:d7:78:4f:79:aa:0a:da:bc:42:7c:4d:
04:05:33:10:45:62:fa:ed:28:ad:fb:b9:cb:4b:3c:
03:bd:dd:3a:b9:69:95:93:9d:b0:3b:fb:e7:50:a0:
54:9a:ca:36:7c:b2:7d:ec:cd:50:a6:80:01:df:be:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D2:1E:C9:88:D5:94:64:0A:CD:2F:65:D7:C8:1C:89:24:25:B8:09
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f5:e7:8b:67:df:93:c6:7e:31:29:61:bf:9c:67:07:5a:c6:
05:43:c4:c4:31:b2:58:b0:ac:c1:6a:4b:62:92:ef:26:69:c8:
2c:57:51:6b:57:4c:c8:80:48:50:1f:ee:2a:9f:86:51:da:8d:
0a:e0:37:f9:ef:c2:cd:94:42:42:25:bf:9c:b2:e7:14:5b:bc:
22:c3:97:ff:1c:cf:c1:c1:9a:e1:d8:23:ed:82:67:44:31:5a:
aa:bb:74:47:00:f1:c5:da:05:59:05:f7:6c:e1:38:fe:d2:43:
4b:97:2f:45:c4:e0:9a:6d:6f:a5:91:6e:11:99:d0:97:f1:70:
96:ff:60:54:f7:19:5b:95:a6:c6:67:3b:ce:ff:89:16:01:b6:
50:40:a7:7f:54:e7:ca:0b:00:ce:98:24:86:82:15:1d:1f:f5:
2f:75:e6:12:48:1a:5f:e7:60:21:72:9d:00:bf:87:e5:b9:8a:
6c:8a:ae:a8:a1:b9:ce:ab:39:1f:6b:6e:31:ee:df:38:00:a0:
56:3e:f9:c4:73:9a:f8:af:3e:14:c9:8e:5a:6f:15:1b:fd:53:
ce:8c:97:57:6d:54:ba:d9:ad:77:8b:0a:23:7d:b7:f0:9d:fe:
d8:d0:97:b4:8a:25:4e:8d:3f:64:03:d3:ea:14:41:85:b2:0d:
78:2e:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 07:53:33 2025 by rpki-client