Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: 882DigAiluXYmRb/2aj32XU8dKySKKYMC20ZRrTfd+o=
Subject key identifier: 44:FF:07:7F:02:E3:60:0C:86:28:5D:40:C5:31:A7:1D:C0:AD:1F:64
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 019A22F7621D9FFF317E52BC3B44735412EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 09EC
Signing time: Mon 27 Oct 2025 00:00:28 +0000
Manifest this update: Mon 27 Oct 2025 00:00:28 +0000
Manifest next update: Tue 28 Oct 2025 00:00:28 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: hAuPWo5TTDrFOOd/vzz2AEEIhrnZiqva+oRaitA25x8=)
2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:62:1d:9f:ff:31:7e:52:bc:3b:44:73:54:12:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Oct 27 00:00:28 2025 GMT
Not After : Oct 28 00:00:28 2025 GMT
Subject: CN=44ff077f02e3600c86285d40c531a71dc0ad1f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0c:aa:b2:c3:46:8e:a9:a0:e7:97:1c:d5:c6:
3f:fa:aa:f4:d4:42:31:6d:38:e4:16:f4:4c:91:dc:
36:59:1c:a4:04:08:b4:8f:b0:4d:9a:69:89:6e:c2:
52:82:86:8c:a7:39:88:18:55:de:ad:64:fe:db:d5:
81:82:ca:d6:a4:1a:2d:23:f8:d1:47:f4:cf:fe:68:
05:dc:8c:bd:18:2a:0d:bb:01:0c:85:83:83:06:54:
27:a8:3f:d7:7a:90:c0:f6:79:36:27:c2:30:80:40:
ec:9f:7c:e8:a0:17:7f:77:be:e5:03:a1:18:f1:55:
ff:76:70:56:12:44:27:64:92:03:f4:33:80:0f:c2:
eb:3a:7e:2d:6e:5a:3e:be:07:76:78:b9:30:b1:a6:
b3:91:67:d2:8e:18:9e:b6:6d:0e:8c:51:ce:5a:5f:
35:3d:bc:17:51:0d:a3:4b:18:2f:53:48:94:d8:f3:
a2:bf:ee:4b:76:d4:c4:97:f8:12:13:92:42:ed:c8:
9c:93:74:ce:fa:d1:84:99:91:e8:0d:ae:6e:9a:84:
d5:fa:5a:c7:ba:f6:08:4b:4e:0d:4c:ae:ce:72:78:
c3:86:61:7c:ac:f1:1b:2c:51:ee:6a:75:d7:b5:6f:
27:c3:2e:4a:9d:e4:4f:e6:8c:40:cd:17:1f:b5:27:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FF:07:7F:02:E3:60:0C:86:28:5D:40:C5:31:A7:1D:C0:AD:1F:64
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:a4:20:a1:7c:04:4b:a3:04:fd:fb:10:35:c9:88:e1:f8:
97:9c:7e:a1:84:4b:68:35:61:6f:dc:2b:63:75:e9:1c:fc:4e:
2b:9d:73:79:f3:59:39:36:47:64:8d:43:f0:5d:7d:a0:07:aa:
87:ad:59:d1:8f:af:a6:48:55:31:8b:ea:cc:9e:72:75:9d:e7:
1f:98:24:a3:fa:e7:8c:09:99:02:d1:29:ca:5c:f3:1c:b3:ee:
14:92:51:97:2c:a4:0a:2f:dd:ba:9c:81:21:5f:57:f5:4e:5c:
10:9a:8c:54:0d:7d:dc:ef:c2:91:06:cc:57:5a:0b:9a:69:de:
ae:8e:97:b4:96:0d:7b:76:e4:e3:cf:cf:64:ff:8f:ec:cb:c0:
5b:5a:84:36:ae:1a:06:69:7c:86:57:be:0e:f6:66:e7:fa:dd:
b7:0f:b9:dc:fc:a1:0d:50:46:f4:bc:0b:10:45:c7:61:ea:13:
b7:75:e9:1d:44:8d:7d:8c:fb:5e:21:b7:27:74:e9:04:15:61:
79:a2:48:75:7a:b5:1d:31:96:de:cd:33:10:f6:6d:d6:3c:0f:
ce:1d:df:14:1c:09:e2:13:c9:76:62:12:27:50:bc:86:84:2e:
e8:94:98:21:1f:1b:79:45:c4:11:e8:68:60:eb:47:31:a7:d5:
86:c6:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:03 2025 by rpki-client