Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File: deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier: yM9I46cSqKgpybGg0+VcJZNUAnBMrCKw1eiAgA5LJUQ=
Subject key identifier: 9F:57:CA:64:00:4F:5A:10:75:F0:F5:3F:4D:80:90:83:4A:77:10:B2
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 019A299E8D6D22B1532A3F9CB57D05A8215F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number: 1701
Signing time: Tue 28 Oct 2025 07:00:47 +0000
Manifest this update: Tue 28 Oct 2025 07:00:47 +0000
Manifest next update: Wed 29 Oct 2025 07:00:47 +0000
Files and hashes: 1: 1jmJ2HwhrLQ2gbaEWJqzaryRG8c.roa (hash: pO4VfZ/vbc6gNeT/zyuHOWdN7wKxeSrY9OMKhLOa++k=)
2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: IruBeLnxr4V/hm+UWFigjhuKLTF+gdbw039Iu7ThESM=)
4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:8d:6d:22:b1:53:2a:3f:9c:b5:7d:05:a8:21:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Oct 28 07:00:47 2025 GMT
Not After : Oct 29 07:00:47 2025 GMT
Subject: CN=9f57ca64004f5a1075f0f53f4d8090834a7710b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:c2:96:38:ee:83:ed:58:eb:8a:82:4a:09:
c0:50:48:c9:19:52:1d:3d:05:c5:2e:8a:0a:4d:6f:
cb:c4:79:52:b8:ad:3a:bc:21:f4:76:2e:e9:ba:50:
29:95:9d:53:a9:79:e8:61:df:90:86:ee:82:51:6a:
6a:f4:66:3e:5e:15:b9:d6:3b:15:88:d5:9c:ad:4a:
5a:66:3d:ef:53:bc:44:aa:a5:32:83:b8:e5:d8:8b:
ae:8a:ce:d9:1d:f9:c9:cd:db:79:84:df:37:13:19:
b7:63:01:31:72:fc:35:89:a2:e5:36:d7:7d:bd:3c:
b2:39:21:b4:f7:42:24:fc:dd:0c:60:c5:dd:79:d3:
67:e7:12:2a:9a:dc:aa:24:c8:54:2e:95:bf:50:d4:
05:82:4e:18:68:80:91:8d:46:e7:d7:13:f5:e6:db:
69:ac:04:04:43:ef:45:5f:a4:80:99:3b:c9:cf:c2:
05:dd:2d:4a:14:74:e9:9b:01:f1:c9:e4:12:8d:07:
69:ec:df:d4:78:d7:a4:33:4a:d5:a7:75:79:28:75:
5d:7f:8d:c3:ce:f1:a5:c8:ec:5c:93:dc:76:6b:d3:
04:4c:52:22:78:b4:35:a3:29:fd:f2:f9:08:cd:10:
dd:80:46:1f:40:fe:15:8b:10:78:f1:5c:ba:a8:65:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:CA:64:00:4F:5A:10:75:F0:F5:3F:4D:80:90:83:4A:77:10:B2
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:54:30:b8:c7:fa:81:cf:57:f9:02:37:7f:98:bf:fa:c5:
af:ee:2c:52:b8:9d:bb:bf:c5:83:e0:a2:72:91:cb:2f:a2:ac:
d9:62:5e:75:77:99:67:8f:22:9e:a4:90:3f:73:74:fb:97:fb:
cf:97:76:b4:4d:12:20:7e:3d:36:39:80:1e:23:20:40:7a:2d:
2b:ef:aa:2e:ba:c5:64:1d:5f:ba:d8:f3:98:f6:28:ab:d6:a6:
e9:5d:d6:31:d9:f9:62:23:39:e5:fa:97:ef:c6:ea:75:94:da:
54:08:c4:ef:23:e6:4f:a3:ba:be:8b:4e:bc:cf:a4:63:15:1c:
3d:49:3c:f0:57:ca:12:cc:07:1d:cc:93:f9:b3:7c:31:3d:9d:
fe:6d:8e:47:3d:be:81:10:96:c8:9a:8e:53:c4:d5:13:ae:1a:
1f:27:ab:d7:7b:06:b0:cd:e8:fe:91:3a:d7:91:20:02:19:8a:
5e:b0:99:11:70:36:92:79:42:02:d1:a3:8a:20:15:87:92:1f:
af:3c:8f:64:ef:f9:99:7a:61:48:13:f3:7f:84:0f:80:c9:03:
90:2f:e6:8f:87:66:8b:21:9e:47:23:29:1f:49:d9:ec:60:e6:
09:61:af:ad:07:24:cb:99:e3:48:39:80:16:9f:28:fe:bd:b4:
b6:d6:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:03:59 2025 by rpki-client