Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: s0qn7vXO7HUwG4fz15q/ZR+bHi/I1/y5Y9nmnuoRXWQ=
Subject key identifier: 7C:5F:5D:BF:75:82:85:EE:73:A3:EA:92:17:7C:83:76:43:10:01:68
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019A202D39931947DDAB880C1776EB5B2E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 11BE
Signing time: Sun 26 Oct 2025 11:00:25 +0000
Manifest this update: Sun 26 Oct 2025 11:00:25 +0000
Manifest next update: Mon 27 Oct 2025 11:00:25 +0000
Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=)
2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: I3JZDe9Kc7XTy4WYdnAWdl9p8K5o0p98jQXz62Qia10=)
3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:39:93:19:47:dd:ab:88:0c:17:76:eb:5b:2e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Oct 26 11:00:25 2025 GMT
Not After : Oct 27 11:00:25 2025 GMT
Subject: CN=7c5f5dbf758285ee73a3ea92177c837643100168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:e7:b3:25:b8:2d:3a:e5:2d:3e:62:ee:21:
03:55:3d:42:f3:14:3b:c7:45:ce:76:bb:f2:41:2d:
20:4e:3e:3b:fd:49:b6:14:ff:8c:84:44:b5:b9:99:
ef:55:c5:fd:8f:8a:37:db:6d:aa:81:ae:cc:85:d5:
4d:6d:c7:60:9c:ed:ab:cf:1d:e3:a5:9c:bc:d3:6c:
96:b5:93:d2:3a:3f:28:df:45:c9:75:13:42:a7:e3:
db:94:55:89:5a:4b:90:0c:8b:f8:fe:71:6f:bb:2a:
27:6c:26:bb:e9:84:9e:bc:79:54:a4:a8:3a:4b:10:
2a:73:62:c5:1f:2f:be:61:86:cb:99:aa:b9:88:49:
ed:17:c2:7f:ec:ef:89:2d:ff:d7:da:af:43:dd:4f:
88:dc:5b:53:2a:7e:76:ee:d8:d9:af:ae:38:53:b9:
c5:e7:ca:05:a0:c4:ed:fb:25:f8:9a:82:c2:aa:05:
0f:88:23:23:94:d0:8a:0d:80:31:6c:4c:0b:68:c1:
86:ce:17:dc:9f:30:a1:a4:f7:58:9d:6a:0f:b8:da:
60:32:7c:f1:2c:ac:e8:bf:8f:d6:ab:12:27:44:4f:
6f:85:a5:a3:39:ed:5a:74:fc:ab:9b:cd:42:93:2e:
42:70:9d:6d:d5:f8:50:69:f3:f6:61:6c:99:20:61:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5F:5D:BF:75:82:85:EE:73:A3:EA:92:17:7C:83:76:43:10:01:68
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:41:ed:8a:b0:96:43:9c:c0:21:8e:a9:14:69:a7:df:35:ef:
22:41:49:d1:ce:4b:74:4d:2f:95:66:00:ed:ac:43:a7:55:5b:
fc:67:d9:bd:b6:cf:d7:0d:96:f6:f2:0f:a3:37:07:50:d7:47:
7a:43:7d:10:41:0e:a6:fe:c5:21:b8:34:24:38:5a:0a:00:52:
82:b0:d3:9d:91:9a:02:f6:73:f2:d5:6d:27:29:dc:46:a2:3b:
18:62:f8:38:1f:e3:9f:ad:52:08:6b:2b:8e:1f:51:ce:9e:02:
c9:34:14:84:57:9d:0e:4a:96:fc:a7:c3:44:7c:44:5b:56:8f:
00:7c:76:f2:f1:bd:0c:95:e3:57:25:21:c5:eb:41:4d:d8:25:
ab:86:01:1b:08:70:db:99:4c:66:eb:cd:e9:b3:9b:1e:bb:ce:
9f:0e:5f:c5:41:35:52:2d:0a:ab:27:a6:0d:b9:96:2e:e9:1f:
82:0a:7a:3b:9c:df:b0:97:11:f1:1b:0d:87:3e:fa:e7:c7:b9:
eb:44:9f:a0:a7:fa:9f:ab:a4:db:fa:11:2a:d4:c7:77:9c:b4:
8e:70:87:d0:f4:df:97:41:fa:31:be:f9:39:c7:9b:65:53:8d:
7b:bb:95:2d:17:b5:d1:15:bc:40:4b:70:e7:96:4e:a0:0f:05:
63:26:0a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:43:24 2025 by rpki-client