Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: FrdrPAiCgMHvEFHDZt6Vm9zmO+Kpwey9HPhULGG2IgA=
Subject key identifier: A7:46:B8:95:0D:3E:B6:D8:74:DD:D9:09:AD:E3:E9:9F:64:EA:58:F1
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 019A27AFBF569786C89B4C7702F22C828D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 22:00:20 +0000
Manifest this update: Mon 27 Oct 2025 22:00:20 +0000
Manifest next update: Tue 28 Oct 2025 22:00:20 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: 6rBTLi+cSGQP9qOuO7DKcaXkCVZd3b64dlLGtmdDSiM=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:af:bf:56:97:86:c8:9b:4c:77:02:f2:2c:82:8d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Oct 27 22:00:20 2025 GMT
Not After : Oct 28 22:00:20 2025 GMT
Subject: CN=a746b8950d3eb6d874ddd909ade3e99f64ea58f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:93:5e:9f:e5:cb:5e:66:de:d4:fc:da:ee:
48:6b:7b:51:21:0f:ef:22:4c:21:c8:8f:76:41:84:
b2:c2:02:e0:ca:13:02:7b:5a:20:2c:97:82:1f:45:
13:a3:76:88:2b:ff:7a:1e:31:6a:3b:91:34:7e:18:
fa:8b:7e:8f:4d:82:e5:92:a2:1d:6a:69:1d:94:d0:
0a:f6:ce:85:c5:07:d2:c1:9e:79:73:df:44:b6:d6:
eb:d0:e6:4c:2a:c0:38:7a:cf:21:7a:7f:db:4c:60:
ec:f0:b6:31:4d:6d:d5:68:da:27:d4:8e:16:14:2e:
ed:a6:be:10:f6:a2:e7:ac:7e:84:68:d0:88:fc:b7:
c8:88:f5:4c:5e:09:3a:1e:2d:a9:16:7d:d4:6d:3b:
8b:3a:59:1d:69:39:a6:8d:c2:28:bb:ad:79:f1:ab:
b7:da:f5:04:f5:30:44:9a:6e:fc:64:15:4d:1c:c1:
a2:e7:3d:7c:78:78:48:9a:fd:9a:e7:8b:41:d6:ff:
62:eb:0f:ca:82:9f:a0:63:45:64:89:d5:36:7c:37:
00:a6:79:50:1a:07:35:0c:21:8d:e7:8a:52:20:b9:
bb:64:24:b9:86:9a:8b:b0:1b:48:26:46:ac:8c:12:
7c:27:20:6d:6d:1b:c8:eb:a7:33:1b:b8:81:49:4c:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:46:B8:95:0D:3E:B6:D8:74:DD:D9:09:AD:E3:E9:9F:64:EA:58:F1
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ce:61:b1:ff:3d:17:9a:40:0a:25:28:2b:94:3e:92:27:75:
bc:52:24:29:ac:af:22:24:58:d4:4e:65:ab:1b:81:d8:6f:6b:
6d:24:a4:20:c0:06:15:e5:80:a4:cc:93:79:af:ba:20:d2:fb:
9b:4c:b8:0f:6c:ec:7c:be:63:70:57:01:31:43:66:aa:8c:a0:
7e:67:a1:66:55:0e:50:6b:d7:f8:6c:19:ca:a7:1a:00:d8:2d:
a0:13:7e:3b:49:84:31:57:e0:07:82:50:f0:36:87:a5:8e:ea:
a0:e1:a9:b9:2d:70:07:3f:e3:2d:51:c7:7c:a4:7e:5d:28:34:
8f:4e:e6:f2:96:74:f7:1b:52:7e:af:06:3c:22:e4:e0:4a:22:
5a:b3:a2:48:33:af:41:f6:15:7a:a4:e9:99:b9:a3:0b:fb:88:
3a:dd:f6:2f:1d:87:df:89:f3:e9:9e:27:12:b0:6d:1c:55:a5:
08:5c:a6:e4:15:51:0b:92:76:d4:ef:00:db:49:9f:44:40:6f:
41:8c:17:72:22:40:fa:ac:08:3d:4d:42:81:2d:6e:e8:42:b6:
47:04:62:45:62:2d:b4:03:a0:07:8c:ac:38:15:e2:9a:81:0d:
ad:f5:f8:96:f9:16:1d:2e:75:3f:97:68:2b:24:29:b4:e4:e2:
48:ef:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 05:40:01 2025 by rpki-client