Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: E+0bfDUIAMJppfZE09Nmx1h5oGHQ2Uv7VFb7w/f3KLs=
Subject key identifier: 23:63:9E:E3:B6:BB:36:84:14:4D:73:F2:2B:11:C0:57:A1:C9:92:31
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 019A266707602FC877D9578001E808088520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 14B7
Signing time: Mon 27 Oct 2025 16:01:17 +0000
Manifest this update: Mon 27 Oct 2025 16:01:17 +0000
Manifest next update: Tue 28 Oct 2025 16:01:17 +0000
Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: qNof2pVfZjLbU090doZnm6wt6NCpyQQvEKs9zQRqhmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:07:60:2f:c8:77:d9:57:80:01:e8:08:08:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Oct 27 16:01:17 2025 GMT
Not After : Oct 28 16:01:17 2025 GMT
Subject: CN=23639ee3b6bb3684144d73f22b11c057a1c99231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:8b:28:f9:56:19:d1:f9:ad:52:c4:33:6f:
08:6d:52:c8:d6:4d:a7:91:42:ae:c2:66:58:3e:e4:
3a:52:63:d0:f8:ee:ba:ba:52:a0:c2:df:3a:ef:ea:
bd:9d:f6:ff:8f:88:e7:28:88:d6:2f:35:af:ea:04:
85:7c:d7:40:12:73:d6:1b:34:19:88:07:bc:4d:0d:
50:89:9f:83:93:f0:57:f7:2a:3f:4f:b3:56:16:5e:
b3:03:d5:7b:f5:4b:af:c0:17:9b:d1:02:ff:25:0f:
b7:0e:16:a4:8c:b4:f0:4b:c0:b5:6b:70:ce:e0:c6:
5e:cc:04:41:3a:16:b9:bf:01:3c:d0:53:e8:01:86:
7f:f1:51:48:a0:6c:4c:fa:9d:af:10:8f:78:5d:e9:
fa:af:33:fd:cd:42:0c:4e:0e:ec:1f:72:25:3b:e3:
45:97:f0:ea:64:76:cb:a1:5b:4e:cc:7e:b4:f2:c9:
a4:f0:80:25:d2:2b:85:b2:c0:01:d7:30:b5:37:50:
0d:46:fb:f5:e4:56:d8:e4:77:93:c7:9d:ce:de:8d:
1b:42:47:81:17:0d:9f:6e:29:8f:40:49:32:9e:63:
19:e2:a7:b7:7c:f8:80:75:c7:10:20:b5:4f:3a:23:
5e:f1:ef:73:b7:ab:8b:57:eb:cb:22:81:75:30:39:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:63:9E:E3:B6:BB:36:84:14:4D:73:F2:2B:11:C0:57:A1:C9:92:31
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:45:f1:7d:d7:f6:2c:33:6c:06:ea:f2:d6:92:72:8a:65:79:
b6:04:d1:cf:0d:cc:ec:81:40:91:a9:3c:9e:e1:46:04:28:fe:
86:18:a6:bb:7f:06:e1:2e:5b:e4:76:9a:3a:86:5a:05:ec:40:
55:42:78:4b:91:66:ee:e9:12:6a:1c:91:7a:56:3e:5a:1e:b9:
6c:08:5d:f9:28:e8:86:91:ff:31:76:8c:67:b6:f9:fc:44:63:
ed:0d:6f:72:d5:55:0d:0e:1e:d6:bc:c4:a4:f4:61:6b:08:65:
53:30:5a:43:ab:9a:d9:ad:80:cc:51:e6:76:b2:13:74:3f:05:
19:b9:99:95:af:4d:81:c9:1e:80:25:79:e4:a5:f2:19:0f:49:
b0:ef:45:ec:62:18:bd:b0:c7:f5:f3:68:b4:e7:b6:97:14:14:
e9:ed:7a:e1:64:b3:eb:25:fe:8f:63:a3:f6:42:ed:14:7d:60:
e9:6a:a1:c2:8e:a2:db:bf:24:f8:11:50:24:f9:59:5f:84:b5:
38:a8:5f:76:20:ae:e9:e4:ab:73:42:8a:17:a2:a2:83:02:d4:
ab:5e:28:04:40:a7:bc:a4:34:40:2b:22:02:11:39:64:4c:0e:
16:b6:87:23:50:a4:d4:b5:a8:e1:f0:2e:2b:8e:d1:ab:19:ae:
aa:b2:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:26:09 2025 by rpki-client