Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: 8J/kmO20eFhhBpgfnwrYOez63j+OwTOkLt55+0Jp8sA=
Subject key identifier: 8D:41:FF:AA:A4:D3:8C:89:35:31:7F:E1:3C:A0:F9:5A:22:31:1D:48
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019A239C01104F30D24DE5EA167D4F989747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 03:00:17 +0000
Manifest this update: Mon 27 Oct 2025 03:00:17 +0000
Manifest next update: Tue 28 Oct 2025 03:00:17 +0000
Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: 6ZaRwO48dvWY/pxvstPP/BzAYcX3dNFy2TDtz95762M=)
3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=)
4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=)
6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:01:10:4f:30:d2:4d:e5:ea:16:7d:4f:98:97:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Oct 27 03:00:17 2025 GMT
Not After : Oct 28 03:00:17 2025 GMT
Subject: CN=8d41ffaaa4d38c8935317fe13ca0f95a22311d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:53:f5:bf:36:fd:9f:cd:47:d9:29:0a:15:
73:9c:00:ff:87:2c:3d:62:b3:b7:fc:21:be:e9:c2:
ee:27:9c:bd:f9:bd:84:de:bf:ac:f6:5b:e1:64:7f:
c0:34:6c:e6:d9:da:69:9e:70:10:01:c0:00:12:45:
ed:7e:77:0e:ef:d7:03:70:67:6a:28:57:15:d4:94:
d1:fd:67:d9:64:9f:64:c3:37:98:01:fe:65:64:ea:
9a:74:22:61:09:f9:79:c3:fc:4d:46:c1:82:cc:bc:
b1:e1:bb:ee:64:83:28:a0:a0:1e:41:c8:0e:0b:91:
ef:51:3e:ed:3e:7e:95:2e:4a:cc:0c:92:f5:57:76:
dd:d4:93:1b:24:b9:11:00:f3:2a:ad:1f:8b:e4:d2:
2a:ec:ef:f8:0b:3c:07:a4:9c:5a:af:70:87:36:b2:
71:9d:3e:e8:1a:06:2a:bb:08:3f:3a:3c:f3:5c:ca:
ed:50:da:6f:9c:b3:68:9b:ff:e3:77:93:35:80:ed:
b5:46:89:fa:a7:81:c2:d0:28:9d:98:0c:ef:bf:b3:
f6:ff:a3:e7:a3:56:c9:83:e2:dd:da:48:b6:9b:4e:
80:6f:1f:46:f8:f1:7c:b1:02:13:74:5d:89:52:25:
51:b4:9a:c7:8d:1a:03:28:a9:cf:ff:c1:16:5f:be:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:41:FF:AA:A4:D3:8C:89:35:31:7F:E1:3C:A0:F9:5A:22:31:1D:48
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8e:1d:8d:cb:63:86:d1:c6:a5:6e:96:83:c2:a8:27:75:8f:
6b:e3:9a:e0:46:8a:97:a4:7a:34:65:ac:01:83:43:48:5c:2b:
fd:bf:0a:90:79:a7:61:c6:07:00:a0:c5:5b:46:f4:c5:42:aa:
b2:d8:01:46:f7:ea:43:ac:fc:1d:75:1a:d3:34:20:0a:4c:42:
cd:9d:dd:62:bd:f7:b0:a1:3d:4c:84:d9:93:45:71:64:ca:64:
83:75:8a:70:a9:07:ef:25:fa:37:03:5c:fb:22:8a:9b:98:a9:
c5:74:92:ba:ee:f0:2f:07:6d:13:c7:80:ef:08:79:cb:df:19:
27:66:bc:25:c4:d0:14:90:44:a0:21:23:67:dd:ff:a9:9c:12:
0e:36:2b:6b:0f:9f:d3:16:cf:14:8d:7b:1c:f7:56:73:b0:7f:
0c:2b:4b:93:a1:7d:97:2d:4f:f0:24:33:18:d1:f9:30:37:cb:
b3:e0:73:7d:84:25:87:07:bc:1d:d1:28:05:31:1e:b7:72:9b:
5e:db:33:fa:f9:da:50:82:d9:f3:29:a0:57:64:f8:16:ca:b5:
70:45:be:29:76:18:b1:64:a0:b2:53:42:d8:56:27:94:52:fb:
80:fd:10:11:c9:2b:3a:62:25:a4:32:bd:6d:f8:74:90:23:a5:
cb:c1:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:57 2025 by rpki-client