Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File: deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier: npoGUsplNVUNEai8F0B+KDs3amEKaPNehqfUX6qSymw=
Subject key identifier: 6C:D5:A8:C6:EF:D7:5B:78:F3:6A:3F:4A:8F:FF:BB:A4:01:1E:CA:F9
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 01993DCC8D8AACF2586FCBFAAAECB0E7BAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number: 1686
Signing time: Fri 12 Sep 2025 12:00:39 +0000
Manifest this update: Fri 12 Sep 2025 12:00:39 +0000
Manifest next update: Sat 13 Sep 2025 12:00:39 +0000
Files and hashes: 1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: 3HPdsG8oXaZG2x7bR2CkOnQXt+bFSF7K1qgAw7dJc4w=)
4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:cc:8d:8a:ac:f2:58:6f:cb:fa:aa:ec:b0:e7:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Sep 12 12:00:39 2025 GMT
Not After : Sep 13 12:00:39 2025 GMT
Subject: CN=6cd5a8c6efd75b78f36a3f4a8fffbba4011ecaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:e8:56:48:ec:f3:68:2d:4f:44:d2:32:a6:
9d:ef:7c:0f:cf:bc:fd:9d:4d:87:b7:9a:95:bd:50:
6c:f1:5d:0f:91:d6:0b:65:fe:63:5a:cf:05:8f:b5:
c7:ee:7e:23:47:8a:be:ed:26:d0:ab:aa:21:2b:5d:
e0:cc:a4:7a:78:c6:c0:cf:c9:f8:67:98:63:78:a7:
8b:93:a9:87:04:26:db:17:1b:c7:67:b5:84:5a:90:
9e:e6:60:dc:e9:87:a5:a5:b6:1b:ea:a7:83:7f:f1:
55:2a:b4:54:9f:a1:ea:13:d9:b5:70:7e:50:55:22:
d8:60:72:ef:5d:88:0b:13:33:2d:7f:3f:23:6f:c3:
64:ae:47:80:c7:c3:75:ac:55:dc:16:f0:5b:10:76:
7e:79:08:ab:b3:ce:3d:97:b6:9a:e6:88:dc:ed:1d:
11:93:cf:6e:1c:9d:d3:e0:32:2e:a8:c7:8c:1d:24:
cd:bd:17:ee:ea:fe:f7:5e:60:d2:23:7b:8e:35:0d:
69:66:0d:b8:64:58:87:3c:10:43:f6:c7:bc:6a:b5:
6c:1a:27:4e:e3:7c:62:b4:42:84:fe:45:33:63:a5:
ab:f4:33:4f:02:da:ef:03:ad:60:b8:11:3c:7f:50:
1b:ac:1a:60:70:25:55:f8:75:30:56:76:12:c2:e9:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D5:A8:C6:EF:D7:5B:78:F3:6A:3F:4A:8F:FF:BB:A4:01:1E:CA:F9
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:65:bf:71:c0:33:3c:6f:b1:8c:17:91:b9:31:e2:1e:44:06:
7d:a3:68:a8:fd:30:0d:12:aa:f8:65:5a:55:46:fd:7f:7b:7f:
af:22:d8:7e:97:3f:52:38:e7:2b:a8:e9:53:5d:c9:d0:91:2b:
57:cf:5e:0d:c7:68:0a:72:19:bc:70:29:f1:f7:07:cc:67:8c:
9c:69:c1:9a:c4:1b:aa:59:97:68:48:1c:06:e5:6c:25:27:df:
6b:2a:b9:aa:49:d6:f0:05:07:fc:56:b0:1b:3e:be:2f:e1:fb:
b7:a6:db:e9:03:70:d7:af:94:a8:49:25:08:ad:41:1b:ee:42:
a9:03:15:30:d1:10:d6:12:30:85:fc:b4:3a:ce:60:39:c2:2f:
8f:e1:07:e7:ba:74:77:16:52:7d:af:cf:b6:ae:9a:21:e9:2b:
67:4d:70:34:a3:13:30:23:f8:07:9f:47:f9:74:c7:1f:74:d6:
cc:a7:cf:5b:42:30:29:3a:5f:1c:60:83:0e:fc:88:ba:1d:e2:
d9:c3:68:65:8f:a8:1c:eb:05:3d:97:fa:59:dd:2b:02:75:98:
05:d8:95:5c:5b:15:82:5d:07:e0:e7:3d:46:fc:4c:82:74:90:
0c:21:1d:53:9c:4e:b0:9e:b0:15:a5:54:18:86:49:b4:35:2b:
00:d1:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 14:57:31 2025 by rpki-client