Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: 01NQCaCEzglPQuvi41DCSaN7cmArMG6wSevIjkvazxs=
Subject key identifier: 00:76:B4:22:2D:D0:9E:2C:21:F9:CF:C6:CC:0E:32:2D:7C:EB:28:50
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 019A0900B182886E2B6D356B60ADBD8B697E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 16E9
Signing time: Tue 21 Oct 2025 23:00:31 +0000
Manifest this update: Tue 21 Oct 2025 23:00:31 +0000
Manifest next update: Wed 22 Oct 2025 23:00:31 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: aAXcXerlx8683ZC74T5io7drbhbiHO34ui2K4sx2vwo=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:00:b1:82:88:6e:2b:6d:35:6b:60:ad:bd:8b:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Oct 21 23:00:31 2025 GMT
Not After : Oct 22 23:00:31 2025 GMT
Subject: CN=0076b4222dd09e2c21f9cfc6cc0e322d7ceb2850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:00:dd:bd:9d:b3:b6:be:86:c8:ec:29:b5:
b9:34:95:57:a9:0d:e9:48:3d:15:6f:dc:9e:1d:60:
41:ae:7c:b8:67:79:28:1c:77:3b:52:e4:fb:93:3d:
1a:e6:12:cc:d7:a7:aa:2f:07:40:bd:ab:a3:17:3c:
26:53:2b:d1:9b:19:5f:c4:2a:b1:f2:ed:ed:af:89:
91:10:32:04:7f:24:23:65:8a:2d:84:d3:8c:bd:52:
e9:0c:53:63:d6:f2:2f:23:1c:a6:5b:28:c8:cd:90:
3a:76:aa:16:13:95:61:86:8f:f8:89:5a:98:8e:5c:
a3:6c:64:38:09:ec:86:f2:bb:97:00:d9:33:df:50:
0a:ad:f7:56:3f:83:90:e8:2f:7e:09:d8:5b:ae:55:
6e:77:c9:b0:af:c2:f9:fb:f6:7c:1a:a7:89:7d:b8:
a4:0b:55:e0:56:39:dd:2a:5e:ee:9f:ba:fd:f6:2c:
8a:8f:51:7a:03:33:66:7f:12:85:06:df:21:08:5b:
e2:9d:6b:70:9e:1e:1f:cb:ed:f3:38:60:37:73:3c:
60:7c:06:00:7d:c5:a6:82:57:fd:70:47:f8:5e:d7:
d1:33:0e:b1:e0:d1:77:4b:c8:99:bb:84:3d:ea:4f:
54:e6:99:b4:10:23:a4:d6:15:ca:fd:e3:1a:94:87:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:B4:22:2D:D0:9E:2C:21:F9:CF:C6:CC:0E:32:2D:7C:EB:28:50
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d4:0e:e0:54:fc:b7:71:fc:18:43:86:53:3b:a1:2d:13:1e:
fb:62:82:df:1e:39:a8:12:96:c9:9c:75:1d:e6:d6:5d:8d:cf:
51:a1:80:2f:d2:f2:e0:16:85:71:75:a7:97:1a:93:0d:92:7c:
d1:bf:60:ae:59:30:70:57:ee:aa:5f:14:d3:81:84:64:a3:d9:
b2:84:07:b7:48:75:7c:f7:b8:b7:ee:62:ce:4a:41:19:26:86:
bd:ae:58:10:3d:ee:25:61:85:2d:7c:81:5f:30:3a:ca:bb:33:
be:33:fe:ca:25:8d:95:9a:2c:c2:4a:be:c4:ff:80:52:32:c0:
db:2f:93:2b:ef:7f:1e:ce:6f:4d:ba:70:17:72:17:9f:dc:27:
17:3b:ad:84:a6:95:56:d4:98:6b:44:72:19:b4:99:c3:dc:32:
9c:df:29:d6:75:06:9e:35:a5:85:df:ba:be:8f:c5:5a:35:52:
85:63:2f:26:ec:1e:c3:16:05:59:57:e0:c0:d0:dc:16:d6:63:
5e:f6:07:3c:c6:6f:2d:9e:5d:37:fd:a8:74:89:5b:21:e0:a3:
8c:b8:a1:6e:38:6e:ca:7e:12:99:29:69:fd:6d:e9:8b:9d:ba:
27:02:56:8e:01:05:dd:b7:91:04:85:ec:8f:ad:7b:a8:ba:10:
6e:1d:d5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:35:03 2025 by rpki-client