Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: fzp2QHftaZPjHF3Q8w5szkDG5h7V3RfnDaRPqLWLB9A=
Subject key identifier: 5B:CE:7F:18:90:A6:99:2F:D3:48:F5:B2:6E:84:D9:DD:3E:F2:9E:0D
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 019A202D4874B6710522BEF37C2B830D8861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 11:00:29 +0000
Manifest this update: Sun 26 Oct 2025 11:00:29 +0000
Manifest next update: Mon 27 Oct 2025 11:00:29 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: Ir6RmsSpuDnjG+15C6MoI1DjTaNol4PHUHWbH503SBc=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:48:74:b6:71:05:22:be:f3:7c:2b:83:0d:88:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Oct 26 11:00:29 2025 GMT
Not After : Oct 27 11:00:29 2025 GMT
Subject: CN=5bce7f1890a6992fd348f5b26e84d9dd3ef29e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:4c:86:a1:8c:28:a3:5d:a0:b4:fd:5e:30:
61:27:89:9f:7b:c3:5f:2f:21:62:04:99:57:7a:b9:
d1:62:7e:6d:c8:97:30:15:38:63:75:b1:2e:9e:0c:
d7:d8:98:f7:16:b3:8a:c5:43:c1:cb:a2:2b:35:53:
b3:4d:0b:8e:38:99:ea:4e:97:aa:24:0c:95:14:4b:
fb:f8:49:63:42:d5:b4:49:f2:11:0c:0e:bb:8e:e8:
74:e4:dd:b3:7b:14:61:ad:c1:67:fd:fe:87:f7:12:
e5:97:a7:89:d7:ba:1a:8b:a7:1e:bd:60:a2:ad:4a:
fa:68:ea:71:fc:39:bc:09:6f:c1:ea:f0:2e:48:b2:
b9:67:00:21:d6:27:f3:35:7b:2d:78:9c:2d:bc:17:
b8:3a:e6:d7:54:6d:03:fe:92:1f:93:43:6f:05:78:
53:aa:96:3f:70:1d:9f:4e:05:97:b1:de:02:02:36:
0f:c8:8a:e7:01:f2:8e:2f:04:14:17:c6:34:14:d7:
30:60:c9:29:51:68:1b:87:b0:8f:76:6a:49:a5:cc:
4e:8f:8f:3a:84:07:8d:c6:0a:ac:ee:10:fd:6b:1d:
d3:aa:24:06:90:c5:cc:ee:cc:ef:af:24:dc:76:cc:
15:62:b5:b4:d8:33:07:d4:4a:06:7a:b8:ca:da:92:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CE:7F:18:90:A6:99:2F:D3:48:F5:B2:6E:84:D9:DD:3E:F2:9E:0D
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ac:8c:16:65:83:0f:ce:0d:5f:55:39:69:15:68:e0:91:31:
23:4b:a3:9b:11:e7:e2:d6:34:fa:2a:8d:38:df:b4:a7:76:c7:
32:4f:ba:51:2c:9c:84:fe:1d:27:27:75:30:99:28:6a:73:af:
96:53:43:28:ab:55:eb:b4:fb:c6:cd:2e:84:1e:ed:a0:e7:90:
54:ad:16:9f:bf:63:a5:08:f5:29:64:ae:2e:6f:a4:76:a9:9c:
45:d4:83:5c:6c:11:f5:7f:19:9d:ce:7a:31:42:eb:98:19:2e:
22:10:8f:b5:6d:54:d9:56:f7:84:22:74:fa:8f:74:0a:1f:66:
b7:48:30:87:0b:00:9b:f6:65:e1:5b:f3:9e:e5:64:c9:0f:09:
a7:d3:fb:a0:ab:0a:83:61:63:c2:62:09:79:3f:81:10:c9:86:
0f:47:cf:4c:fc:bb:1c:99:62:00:83:cc:25:cc:36:69:06:2d:
16:b4:86:a6:d6:46:99:7c:23:9d:55:40:02:bf:c6:75:be:b6:
fa:a7:5c:e2:cd:6e:0b:ae:72:2e:c0:d2:61:24:6d:3f:8a:f4:
4d:e2:81:f7:23:42:19:74:74:d1:54:e0:a0:c9:c6:87:54:5a:
e7:b1:f0:6d:f6:79:a4:96:d4:35:a4:0b:8b:79:55:73:be:07:
d6:e6:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:09:23 2025 by rpki-client