Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier: WQNdEsSRKDYKTxsl6V/5rGzhyUwvCndXr5G4tuIVzD4=
Subject key identifier: 17:97:D0:1A:26:9A:9F:00:78:FE:2E:6C:90:EC:E4:C1:3E:9E:EF:0C
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 019A06DB2C916CEC4112E7EC9078748E3313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number: 1707
Signing time: Tue 21 Oct 2025 13:00:18 +0000
Manifest this update: Tue 21 Oct 2025 13:00:18 +0000
Manifest next update: Wed 22 Oct 2025 13:00:18 +0000
Files and hashes: 1: 22MFoiE6iwEXKG4ff-0g9Nk9e6k.roa (hash: 8ZAHeiN8JfpnEbf0xNsrPzSUL91MdaXwePhbLZYQBGY=)
2: 63R1CqkRJzCBTqXm_kqr_6UGOC4.roa (hash: QovmpL/thOh4yKhjTn4FNfnRr6OXEgupogya3Oy9KUE=)
3: AqlAoh2mHTGBQZiQ4Qu8bU198w8.roa (hash: QPQqaQ0W7/zxzqNuDuEf1YEVzGuiOziERZ9FXquvCOY=)
4: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: DhR443f4a+GHCRk54PaN18JgA13shAmTWtg+bZe0M4w=)
5: JaRJ0VkgZY-pAOHUpfAksmRNPT4.roa (hash: uuAowSkk49o7aPUMDMEAR0rCVXNjJkNtV+Ttn8WfvGo=)
6: kGkGzImsb5Dv_nGgCWEXgWNc7do.roa (hash: x9SmJ5GmGF/t3I5NSMgnwkUR+oRC+nVpi/mDc40npw4=)
7: mpy8rjwhUPGfrwU4aNyK-9x9FBA.roa (hash: LExOCoVzbGwBygx3rcSIfApEZE8wTyOT0YOXpiy9v1U=)
8: qF-2BgBNvB9Rp0K_VFhuwpTNLrY.roa (hash: h4z+iViHaDAdXrYk5TZebHBt4+M5KGpzETHGgdp4Ztc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:db:2c:91:6c:ec:41:12:e7:ec:90:78:74:8e:33:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Oct 21 13:00:18 2025 GMT
Not After : Oct 22 13:00:18 2025 GMT
Subject: CN=1797d01a269a9f0078fe2e6c90ece4c13e9eef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:37:1d:c4:20:a3:2e:ef:c6:45:bb:ad:71:
66:a0:97:44:0d:21:33:b2:b4:4f:e0:1a:6b:b2:f2:
91:73:0b:cf:d5:c6:39:d7:a2:02:3a:eb:a1:b4:db:
52:43:f4:f8:34:25:81:10:10:0d:a8:da:d5:d8:9a:
f1:19:be:55:a6:5c:45:c3:62:ac:33:25:b1:06:da:
7b:8b:06:17:18:56:a1:2d:48:36:0b:e2:36:00:ea:
a1:f9:ab:4a:fa:ac:64:e7:d4:56:9d:14:37:28:8d:
6f:27:6b:ac:eb:96:ed:80:af:61:95:59:01:c5:45:
12:cb:1f:4b:d3:ef:87:6e:91:c6:a4:ef:94:12:9a:
21:bf:ec:c6:de:21:62:80:53:da:6e:6a:a4:66:ed:
50:f8:30:c4:7f:ca:67:c6:88:52:b3:84:11:4d:a4:
11:48:f4:46:66:be:75:17:57:e0:0b:76:40:3a:f1:
a5:94:14:45:8a:56:00:8b:5d:fd:c9:a7:03:d6:f3:
a4:17:f5:5c:30:d2:c1:0a:13:11:0a:6c:75:85:d4:
a4:57:bd:43:b9:27:0e:7f:27:8b:69:c9:af:07:a9:
bf:5c:2a:28:18:41:fa:0a:28:62:4c:48:5a:da:ae:
f1:af:06:cb:f2:27:ed:30:d6:7c:c5:00:aa:0b:54:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:97:D0:1A:26:9A:9F:00:78:FE:2E:6C:90:EC:E4:C1:3E:9E:EF:0C
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7e:0b:18:e6:a5:ef:3f:04:ca:ba:bc:c6:4c:44:b3:71:c0:
e7:03:d3:ef:ee:f3:08:8d:45:e3:40:86:45:f6:09:df:82:42:
f2:34:56:e1:53:40:89:cf:d1:16:5a:af:8a:2e:f4:4d:9a:25:
a1:de:60:eb:37:58:e1:03:dd:b8:2d:b2:31:84:10:ab:1a:ab:
14:51:98:02:21:31:8b:04:da:18:6c:5d:88:74:34:e7:85:42:
50:a3:67:a4:f3:0a:64:96:16:d8:25:f1:3e:e9:60:dc:8a:42:
cd:65:70:73:69:4b:f5:bd:7c:7a:9a:99:3c:eb:7c:6b:fb:2e:
b0:51:89:cc:63:3d:f1:94:33:62:bc:dc:66:a8:b9:e4:b6:ca:
3c:e5:81:08:5d:47:04:6d:4e:47:5c:90:c9:da:57:0a:c8:55:
e2:ff:34:33:37:16:66:9b:83:e4:d9:81:8d:f9:71:48:52:dc:
09:df:7e:1f:93:64:ab:68:38:3b:47:fe:af:b8:c9:a1:49:8a:
e9:9e:f7:d0:ec:4e:5f:99:b1:80:3b:9c:44:25:07:27:38:e6:
b9:d3:16:c9:0f:96:9e:2e:35:37:6d:70:f5:e5:20:05:a5:26:
cb:b6:80:fd:dd:35:86:87:05:da:32:ad:0f:19:fe:d0:2c:cd:
5a:6e:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:14:02 2025 by rpki-client