Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: lPxxieo6jqiE4BbdtskKe/lRQnHHsScwtRkndgtwJUg=
Subject key identifier: 26:34:87:5C:40:E2:1B:94:05:B9:20:53:1C:65:C9:CB:0C:A7:97:2C
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 0199FFFE5FC92BC6A9BD9C1A8F76DCC576DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 074B
Signing time: Mon 20 Oct 2025 05:01:24 +0000
Manifest this update: Mon 20 Oct 2025 05:01:24 +0000
Manifest next update: Tue 21 Oct 2025 05:01:24 +0000
Files and hashes: 1: R0kpMB4FLa57YlT9gQTxUhUxTi4.roa (hash: v4gil0pPlLS8kPjffYF1yPMZ2JnOTspISeu5FIjRwfg=)
2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: L/TD9T5mIMDo34aZVacG88uR4LJUxfQY5r2nlWg/18g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:5f:c9:2b:c6:a9:bd:9c:1a:8f:76:dc:c5:76:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Oct 20 05:01:24 2025 GMT
Not After : Oct 21 05:01:24 2025 GMT
Subject: CN=2634875c40e21b9405b920531c65c9cb0ca7972c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:7c:1a:c2:20:04:87:e7:c7:5d:28:c3:b8:
ba:7f:ad:66:44:36:c6:58:84:30:b5:1e:91:a0:de:
5f:53:93:85:1d:27:c1:65:aa:78:0f:94:96:cb:ac:
c0:f8:ab:88:56:ed:07:93:db:19:c1:64:2e:df:02:
37:51:f5:8c:12:06:84:76:86:81:92:32:97:29:1a:
a7:7e:5a:dd:41:c3:92:b2:a3:3d:87:c3:88:9a:ca:
2a:ca:8d:24:48:34:36:30:d5:d5:9d:a0:56:af:8b:
2a:8b:c5:dc:50:2f:8e:ca:a9:63:48:f1:7a:c5:c3:
17:d5:df:60:09:b3:fc:7f:bb:e6:bf:36:2e:5f:6a:
44:f1:b0:e7:24:c1:37:62:84:28:85:49:f1:7e:e9:
23:93:93:3a:a1:55:34:b3:70:0a:62:42:82:40:e1:
44:d8:01:0b:aa:62:61:84:2e:82:1d:0b:b9:90:46:
1f:e6:ef:b8:17:7a:38:7c:db:a1:fe:ed:2e:2c:19:
ba:62:4a:73:dc:1f:ca:db:92:37:f8:a5:cf:f3:56:
7a:30:e6:c0:0c:73:22:b5:12:dd:5d:4e:f5:58:6e:
a2:5c:72:f5:60:a2:ef:21:ef:13:2b:c7:53:cd:db:
e9:ef:58:98:46:95:52:87:09:6a:da:13:bf:98:e0:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:34:87:5C:40:E2:1B:94:05:B9:20:53:1C:65:C9:CB:0C:A7:97:2C
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f1:f8:5b:9a:ca:1d:dc:56:2f:56:13:bc:3c:16:29:0c:f8:
f4:41:fb:23:a1:27:b7:6c:39:1a:9f:83:e6:89:4b:db:f2:0d:
55:4e:f9:9e:83:fd:23:b7:da:45:e8:f7:79:96:7e:99:16:25:
55:ea:70:a0:e5:1a:4d:56:e7:fe:21:b0:ed:51:13:ed:3b:6b:
a5:a0:c1:22:e2:e1:5c:12:d3:3a:ee:e9:15:76:c9:95:e8:44:
fa:bd:8e:4f:68:21:b6:d0:f5:a3:f8:eb:0a:e1:a6:85:73:f5:
f3:5c:1e:e3:bc:b8:d8:0d:92:f5:8b:f6:26:40:c6:79:38:a7:
7b:32:7d:be:79:cd:86:f3:eb:f4:0c:26:a2:34:f5:8b:79:aa:
24:2b:3a:92:4e:00:e6:31:e3:df:43:04:d8:2b:6e:6f:4b:c3:
f9:86:47:89:22:e8:7e:b1:a8:9b:da:bf:8a:91:7e:05:8e:38:
24:db:ea:49:60:58:d6:c2:6d:42:13:0b:15:f7:ce:9d:4d:2e:
f6:11:3c:35:86:dd:1c:3f:e7:b5:65:ff:51:93:e6:78:e8:89:
33:ce:b6:d0:e7:ef:07:40:57:d3:91:ba:73:d2:43:6c:89:c7:
d4:07:9a:bc:fe:bb:20:2c:09:16:2e:97:53:f6:f8:cb:ff:e9:
68:c7:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:57 2025 by rpki-client