Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: XNMf64YmQ81y9av3cKE+AFUZaBJbVUhA034SrM1U0j4=
Subject key identifier: E7:8E:52:6C:CF:DC:A2:7C:7E:29:D6:68:AF:FA:BF:A1:39:C4:4C:8F
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 019A258AA41047AC313F547D4AA732E4A12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 074D
Signing time: Mon 27 Oct 2025 12:00:34 +0000
Manifest this update: Mon 27 Oct 2025 12:00:34 +0000
Manifest next update: Tue 28 Oct 2025 12:00:34 +0000
Files and hashes: 1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: poR0rjSXoBQz+B5wcn/vIiOFwyASCHbWuJuVwQUP3CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:a4:10:47:ac:31:3f:54:7d:4a:a7:32:e4:a1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Oct 27 12:00:34 2025 GMT
Not After : Oct 28 12:00:34 2025 GMT
Subject: CN=e78e526ccfdca27c7e29d668affabfa139c44c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:00:61:9d:ba:8f:84:63:35:f3:c5:fb:3f:
47:bb:ed:d4:6e:22:19:3f:ce:ad:33:87:55:ac:a6:
63:d2:07:d0:1c:6a:12:87:d3:96:f9:df:25:95:58:
33:3c:dc:51:63:cf:c9:0e:d7:fc:85:c6:57:f2:f1:
96:1e:5e:23:3d:65:23:fe:c2:94:80:f5:84:f5:3a:
83:da:21:64:a4:d1:18:fc:99:ea:ad:f6:9e:3e:bf:
9b:68:39:ac:b8:b0:91:2d:5a:3f:39:1f:6d:46:be:
73:2c:b9:74:55:87:8d:24:c9:93:10:43:6f:25:5f:
07:6c:df:85:c0:99:58:22:35:cf:61:cc:ed:af:1c:
0c:8c:f0:aa:14:dc:0e:c2:4a:20:fd:d6:ff:00:87:
0b:97:99:d5:2d:d9:b4:c5:21:fb:32:f5:fa:3b:ad:
27:d7:39:08:f2:05:9d:7b:49:40:24:8c:99:c6:83:
bb:b9:0e:20:4d:42:82:c1:4f:af:68:94:4e:16:6b:
70:19:d5:f9:b3:6b:68:42:7a:f4:7c:92:cc:ad:e5:
b3:44:ee:f8:b7:e0:67:3c:2c:03:67:02:81:07:17:
3d:34:a5:ed:83:92:54:84:4b:69:71:4b:5c:54:e8:
91:5b:21:0b:90:17:ce:72:a5:b4:9a:64:e7:71:08:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:52:6C:CF:DC:A2:7C:7E:29:D6:68:AF:FA:BF:A1:39:C4:4C:8F
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ea:ec:45:90:d3:92:8b:c1:b5:2e:fa:0f:4d:23:00:9c:ef:
99:a4:4d:8e:ab:3e:27:19:40:5e:0c:e1:39:4d:91:1e:12:32:
a2:13:a1:a0:7a:8b:eb:77:cf:fe:4f:cb:8c:e1:ee:d7:68:80:
53:ee:4c:90:4f:e0:52:48:7a:39:36:bc:07:ba:e5:31:db:9a:
14:cf:7c:f9:2b:ac:64:24:fe:52:6a:c6:b8:fe:89:1d:0c:7f:
a9:fe:a4:e7:a0:65:31:d1:8c:36:84:d2:c9:c5:b1:b8:1c:28:
54:a9:2d:99:4e:02:6a:ec:c8:3e:1e:7d:35:67:c8:c0:55:83:
34:7d:0a:65:b7:20:4c:f7:48:06:e3:b9:e6:81:6d:9a:a3:a9:
58:c5:cc:70:ea:2e:d1:eb:1e:b2:34:f8:86:76:db:74:ab:6e:
5c:71:e1:3e:df:4a:89:e4:27:33:c9:69:ff:14:10:1e:5a:5d:
94:61:74:04:42:de:88:3f:54:7a:0e:56:24:af:c5:19:a6:7a:
1a:08:f5:9c:03:58:f5:b6:3d:33:5a:a5:43:7a:b6:9c:69:fe:
ea:2e:dc:79:18:c1:3d:6b:76:3f:70:e3:f1:94:e9:94:14:f4:
34:47:26:e3:03:1a:e0:9f:54:c8:b6:2b:1b:0b:61:26:31:7a:
97:bc:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:30:41 2025 by rpki-client