Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: 6wiMJ4jQNHHV7pW4CUNzcoeDN/dTAcvMXmqG2Jawx2Y=
Subject key identifier: 08:D7:8F:05:80:45:5B:EF:DA:9A:4E:68:E9:F7:80:C1:CD:62:C7:48
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019A3A23AABCA1EA14061E94D3307880CDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1694
Signing time: Fri 31 Oct 2025 12:00:07 +0000
Manifest this update: Fri 31 Oct 2025 12:00:07 +0000
Manifest next update: Sat 01 Nov 2025 12:00:07 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: rrB6HcA+6jMSaYSLthWFVAMce/Xus3wkMRNKo/z+dLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:23:aa:bc:a1:ea:14:06:1e:94:d3:30:78:80:cd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Oct 31 12:00:07 2025 GMT
Not After : Nov 1 12:00:07 2025 GMT
Subject: CN=08d78f0580455befda9a4e68e9f780c1cd62c748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:34:10:76:48:51:f1:83:48:bf:6d:d7:f0:
66:3c:c3:d1:63:e6:76:62:40:54:ef:d0:6c:84:22:
08:dc:ac:da:2b:ac:96:ad:1c:f6:88:26:3c:bc:fb:
c6:29:7a:ca:58:4d:a8:b1:f3:e3:ce:4e:80:d3:19:
0c:3d:13:1f:3e:22:6c:5c:b5:0b:57:de:85:c0:43:
9a:42:71:9d:fe:82:8c:55:27:d0:87:51:2d:0c:67:
57:96:dd:dd:42:d5:97:a3:cb:93:b8:20:f0:de:6b:
4c:f6:5a:c2:c3:9c:6f:9a:e4:9f:80:e8:f4:3b:78:
73:e3:64:60:52:bf:93:28:83:91:dd:2f:d9:78:59:
0f:cf:a3:23:c4:ce:2d:6c:41:c7:5d:60:c7:e5:41:
bf:3a:7a:db:82:bc:1f:0e:e4:13:88:ca:46:cf:a0:
43:29:14:b2:3e:e7:96:6f:c7:c8:09:b0:40:64:8e:
2b:cc:d4:a3:c6:f0:05:48:a2:2a:74:c3:7b:0a:9e:
3a:3e:ee:ce:45:e0:87:63:28:aa:9f:d7:5a:2c:ae:
bc:7f:f2:6c:75:dd:23:ef:13:8e:97:7e:43:af:88:
82:6c:49:60:bb:cd:7f:a3:cf:87:2d:c6:4e:16:6d:
fb:43:38:10:c1:4d:23:66:e8:4b:5a:e7:06:84:6b:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D7:8F:05:80:45:5B:EF:DA:9A:4E:68:E9:F7:80:C1:CD:62:C7:48
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ad:48:75:9a:96:19:d2:9d:3f:f7:9b:49:75:0d:1c:cb:8c:
5d:1b:1c:98:28:42:b5:ad:af:28:05:88:df:27:6d:e4:a5:fe:
d9:e1:e5:62:62:ba:8b:f1:a0:77:7a:6a:cb:c3:dc:cf:36:a6:
6c:6f:74:b6:a2:76:43:34:7d:b1:6a:ca:e5:ff:1e:35:68:1e:
f7:bb:ea:3e:c2:40:ad:46:2d:8b:de:89:f0:98:e7:20:9f:41:
48:1c:c9:a2:d1:dc:a9:80:5b:fe:78:1c:e4:cf:39:9c:f6:3c:
f8:84:22:25:67:80:1a:6b:b0:38:da:e4:73:b6:fd:5e:e0:bd:
0d:34:00:40:85:d4:1f:03:cb:c8:76:e6:88:f6:db:d6:75:91:
ab:ff:00:7f:65:60:ea:4e:58:02:53:80:ce:21:9b:02:05:c9:
7c:a1:54:42:2e:f7:8d:60:dd:d5:3b:bc:57:64:23:e8:56:66:
4a:02:a5:6c:4d:f6:74:f5:63:e0:cd:91:3d:88:d9:25:fe:04:
98:dc:88:22:5c:60:93:16:07:78:e5:94:c5:50:cf:20:31:ae:
5a:ad:9e:7f:26:56:15:66:41:16:39:d6:45:b6:c3:78:ec:2f:
a1:e7:e3:4f:f6:84:0e:9c:34:c7:b2:30:e8:6c:b6:27:3b:32:
93:9e:94:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 19:19:30 2025 by rpki-client