Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: wIXMy/BRFtYKYgB9rLENcSl4Tqin+xQClf9bF2WblH8=
Subject key identifier: 34:51:A2:87:73:90:7D:BF:94:37:6D:5D:A5:CC:B7:84:05:DA:97:B0
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 019A0222BF6FD98F0CC9434F801BB5FE2BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 16EF
Signing time: Mon 20 Oct 2025 15:00:22 +0000
Manifest this update: Mon 20 Oct 2025 15:00:22 +0000
Manifest next update: Tue 21 Oct 2025 15:00:22 +0000
Files and hashes: 1: 28r3lezFt1DhHYHa7zUp6dp6gek.roa (hash: UnpOGH6h0Mhuee/PLRufj5c9ShCIaJkFN7bgA7Z1mp8=)
2: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: E6gHIAr9QoILvZsQeqHyIo/J5DcHuEvHJrRfUJBEsKk=)
3: S3gytHIiWuDnii46Cee6MjqDODU.roa (hash: WjQ4G+4EZrW+UzIf8d/g5pUPAeGGv9rfo0G8Gxn9x1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:bf:6f:d9:8f:0c:c9:43:4f:80:1b:b5:fe:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Oct 20 15:00:22 2025 GMT
Not After : Oct 21 15:00:22 2025 GMT
Subject: CN=3451a28773907dbf94376d5da5ccb78405da97b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:38:4b:64:6a:51:99:c2:03:40:c2:c5:be:
9e:65:3b:9a:ca:69:90:8b:bc:41:40:22:7b:14:ed:
b2:ae:b2:64:68:40:10:1a:70:54:6b:f0:50:44:1d:
95:80:5d:9c:87:be:5b:f9:34:11:3a:59:80:ae:8f:
69:02:5f:9f:f9:6d:11:8e:0c:dd:78:57:95:3c:f7:
2b:3a:96:67:76:10:a3:f7:44:31:c7:03:39:6a:85:
b7:16:42:e7:e1:c7:3a:01:8f:0a:dd:65:20:29:61:
e0:df:47:d2:27:4d:a9:9b:82:e7:d2:2e:4d:49:e5:
c6:31:29:fc:f6:b5:f8:75:8c:b8:f4:58:9b:cd:c8:
f6:a2:62:ed:6f:48:1a:c7:b1:43:51:d7:35:d8:8f:
52:7b:06:37:e9:c0:8e:23:9a:79:5d:c8:8a:ec:ea:
b3:8d:1c:a2:90:c1:d5:b2:8b:6c:63:27:c3:e2:db:
78:e3:da:0e:31:23:3b:34:2d:3a:89:cd:82:59:4f:
92:69:47:cc:e0:83:2f:71:d4:03:44:95:24:96:31:
4d:da:e6:58:f2:dc:c0:ee:47:df:de:a2:2c:00:8d:
ec:b5:7e:62:28:9b:f4:8f:23:f0:ac:fe:a0:44:88:
48:54:19:f7:ac:e7:6a:ee:93:fe:07:49:56:2e:e1:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:51:A2:87:73:90:7D:BF:94:37:6D:5D:A5:CC:B7:84:05:DA:97:B0
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e2:53:b9:e8:7d:56:cc:71:5e:f2:94:44:b0:04:a6:15:f0:
67:9c:6c:64:f7:ed:b9:13:5b:a3:4c:54:ad:88:c5:c5:1a:8b:
79:e8:79:c2:f9:c8:42:f8:61:ef:40:75:50:e6:6e:53:ef:c3:
b1:ca:81:20:7a:be:4d:15:2a:66:ff:c8:03:37:d9:c2:cc:f1:
61:f0:42:e0:0a:b8:3a:1b:4d:20:95:ba:ab:1e:72:cd:77:06:
89:02:d3:43:d8:34:f8:fb:ab:df:87:e7:3e:8a:73:8f:67:ba:
5e:5e:af:22:f3:83:c5:cf:6b:ea:b9:6b:fd:b0:a2:29:03:f0:
3a:30:32:b3:88:5d:a7:e7:83:00:39:36:5a:b9:4f:72:8c:29:
54:94:88:72:d3:39:93:88:36:6f:1d:11:f6:f1:8a:2b:04:37:
5f:e1:a5:20:fe:18:c4:f5:70:d7:1a:ad:da:b6:8d:77:8e:97:
5b:40:8a:2d:2d:2a:36:8a:74:2c:ff:cc:3c:9e:b2:fa:2d:a6:
a2:f3:fc:6f:db:f0:91:37:09:e1:4e:df:2f:6a:7c:39:11:cb:
fe:ca:bc:f2:fc:3d:d5:c4:2f:0f:ed:bb:5c:07:bb:78:3d:17:
44:c8:fc:b2:23:af:4c:bc:a6:76:9a:a1:15:3a:84:75:af:de:
43:be:6a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:22:02 2025 by rpki-client