Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
File: dvMR7xWBoA5DfNcEtigayGIa_FY.mft (raw, json)
Hash identifier: 3STfz+M/xsVwLqC9oX3g29HqgAIg0d8xlfdezNq1fSg=
Subject key identifier: BB:F9:8A:29:C0:83:C0:DE:34:EA:0D:19:4D:A3:17:F8:7E:E8:35:B5
Authority key identifier: 76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
Certificate issuer: /CN=76f311ef1581a00e437cd704b6281ac8621afc56
Certificate serial: 019A0780F903BEEBFD5DA6E22E7A420B17A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
Manifest number: 16EA
Signing time: Tue 21 Oct 2025 16:01:23 +0000
Manifest this update: Tue 21 Oct 2025 16:01:23 +0000
Manifest next update: Wed 22 Oct 2025 16:01:23 +0000
Files and hashes: 1: Q6cjkrSokxtUJmUsJvQ_7Hwg27U.roa (hash: m1XnL/411Yf9huGjfl9fr7l+U2VdNJkxGE7M3cXIn3c=)
2: _Bhg_0oqoTNSpwMzEcCpFnd46nA.roa (hash: AG0x4xC1l+R6ZCFoLMsVQeQ9AoJqN1cWLKxqvQ0rMIY=)
3: dvMR7xWBoA5DfNcEtigayGIa_FY.crl (hash: 1owN751n5IDrhr6aIfA2r5rNhb+4lOeYIZpnqBDjnuE=)
4: gdPoGNVcOTxve9Q4-VpVufJk2tk.roa (hash: WuZzCuCA9L2ThwhAvWX+I1Ah6JPhfZ6ih/yP6XwGm+0=)
5: m7C4LK8pgT5lORZBsv-BS_VdFFQ.roa (hash: X3l+LpnL2+oK3trvHtfdrKfFth5mN5qj+aVKY9/H5Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:80:f9:03:be:eb:fd:5d:a6:e2:2e:7a:42:0b:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f311ef1581a00e437cd704b6281ac8621afc56
Validity
Not Before: Oct 21 16:01:23 2025 GMT
Not After : Oct 22 16:01:23 2025 GMT
Subject: CN=bbf98a29c083c0de34ea0d194da317f87ee835b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:51:7e:aa:fd:41:83:5c:93:d6:bf:5c:83:
aa:33:63:ed:a4:58:3d:4d:45:bc:26:81:ac:f6:65:
60:db:41:31:e5:ba:2d:42:9e:62:a6:07:49:1d:70:
12:7c:8b:3e:1e:cf:38:4b:b0:d0:ae:e9:42:11:65:
fc:8d:38:41:67:f2:5e:76:b3:ef:e9:6f:08:2d:6d:
99:82:ae:9b:0e:83:9e:bf:ec:ff:4c:9f:5f:ca:fb:
d5:7c:19:07:9c:c8:f5:6b:fd:3e:1d:58:e0:b7:54:
ca:f5:30:76:64:8a:5d:de:72:ff:00:69:c1:89:ec:
23:d2:4d:a1:08:0c:0a:28:b8:24:58:16:b6:2d:e4:
e3:8c:29:fe:b3:e8:66:39:3a:9a:cf:46:e0:e4:a6:
e6:d3:f6:a0:57:8b:e8:09:f5:20:2a:6a:3f:c8:d0:
4d:8b:18:7a:78:df:67:42:db:5d:53:5d:f3:11:3d:
6f:56:d6:39:08:1a:22:a4:7d:e3:e1:5c:21:ae:83:
f3:90:0d:06:68:85:4c:59:19:c1:44:ff:d1:52:5f:
54:b1:bc:a8:13:59:65:c9:1b:45:64:16:47:88:67:
17:d2:1e:6b:3c:49:a7:db:49:52:38:da:3d:9b:ef:
c8:4c:58:c3:67:0c:55:0e:63:a8:48:31:7f:db:29:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:8A:29:C0:83:C0:DE:34:EA:0D:19:4D:A3:17:F8:7E:E8:35:B5
X509v3 Authority Key Identifier:
keyid:76:F3:11:EF:15:81:A0:0E:43:7C:D7:04:B6:28:1A:C8:62:1A:FC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvMR7xWBoA5DfNcEtigayGIa_FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/525224-78ea-49e4-9749-169431296c59/1/dvMR7xWBoA5DfNcEtigayGIa_FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ab:6b:f6:3a:f4:f1:67:dc:8f:a7:13:6b:ed:a7:64:41:a3:
66:98:c7:0e:eb:d1:cf:ca:e1:a5:7f:42:44:a3:75:a2:ac:32:
4a:6c:66:fb:be:07:2a:58:68:47:4e:4b:48:f8:ba:9a:d3:26:
65:4b:7c:d5:77:bf:e1:da:e2:59:f5:c6:a4:8e:bb:35:64:99:
b6:e7:86:4f:b1:02:ea:f6:f9:37:14:21:cd:a0:86:d2:ef:12:
48:81:82:8b:68:b8:5e:27:76:d1:a8:93:e2:83:77:ec:8a:1e:
18:59:6e:7c:72:a6:95:22:cf:d0:93:7b:85:98:ef:39:66:43:
de:8f:d5:bf:da:aa:7a:8e:63:e2:6b:a2:9d:2b:ed:e8:aa:70:
22:3f:2f:bc:4d:2d:e3:a9:b5:9c:df:a6:f2:1e:a5:1e:4e:92:
20:60:74:d8:d0:35:4d:3f:7e:d8:8a:9c:10:af:42:70:a2:d5:
21:5d:bb:0a:d0:d2:e0:ef:a4:fe:6b:85:3e:eb:a0:29:d6:a0:
92:61:1f:16:5c:f9:75:9e:85:f0:8c:2f:52:9e:f6:ef:ce:03:
6a:09:5c:7f:af:c6:a5:6a:68:71:36:8c:6a:73:32:14:36:d1:
9e:7a:a3:27:82:ed:35:ff:2b:5c:02:cb:0b:4c:d1:d2:74:1c:
b3:a8:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:20:18 2025 by rpki-client