Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: Z8zbp7caJT+fNTT+FBtCc1oV78yAX1MxUk1XiSbqR2A=
Subject key identifier: A2:1A:8D:99:2C:8F:C1:13:D3:04:0E:FC:8F:49:EA:9B:CC:8B:37:46
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 019A0A80D2688D0BE9A655DD188F28FDEF48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 0629
Signing time: Wed 22 Oct 2025 06:00:05 +0000
Manifest this update: Wed 22 Oct 2025 06:00:05 +0000
Manifest next update: Thu 23 Oct 2025 06:00:05 +0000
Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: A0j1xcy0gthnvrss16xstj3Wxe0wajBSMm08G8l0NDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:80:d2:68:8d:0b:e9:a6:55:dd:18:8f:28:fd:ef:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Oct 22 06:00:05 2025 GMT
Not After : Oct 23 06:00:05 2025 GMT
Subject: CN=a21a8d992c8fc113d3040efc8f49ea9bcc8b3746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:fc:b2:f7:cc:61:5d:9e:81:00:e3:65:58:
3f:67:73:07:b4:91:5b:d2:32:67:24:3f:d2:82:99:
05:f6:c3:24:a2:6b:86:f7:ff:61:a7:f2:9d:74:9e:
d5:8d:6e:e8:a6:32:6c:1f:15:40:ca:f1:c9:f3:92:
99:98:b1:dc:e5:47:60:93:5b:1e:f0:b2:89:7a:20:
92:5f:ae:4d:67:d3:3c:91:8a:d1:70:fe:8d:23:75:
eb:a4:de:28:0e:2f:0e:0c:c6:4d:53:da:d1:d8:3c:
48:fe:87:de:85:7d:cc:98:c1:12:9a:bf:de:7f:e4:
de:48:55:38:1b:7a:97:70:79:b2:5c:65:a9:13:9e:
af:ba:e4:db:10:52:b8:45:56:78:43:5a:79:88:0f:
f8:bd:43:4d:90:d7:c8:f5:88:1a:77:b2:66:bc:42:
bf:57:25:96:0c:d6:af:80:48:b1:cc:88:a0:37:61:
a4:07:bb:b4:4c:19:90:4b:8a:8a:f7:d0:fb:ea:5c:
5d:4b:f4:63:ad:4a:be:f6:7f:bc:98:bd:d1:eb:7e:
eb:55:25:d5:89:dd:41:73:bc:b8:47:82:6e:22:90:
02:0f:04:07:36:67:7d:4a:40:1f:12:35:93:07:88:
37:19:0e:e8:44:02:eb:2a:22:9e:9c:cb:8c:3f:50:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1A:8D:99:2C:8F:C1:13:D3:04:0E:FC:8F:49:EA:9B:CC:8B:37:46
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:85:a0:d6:6e:c2:e0:c8:28:ad:e4:dc:fd:77:c0:9c:25:20:
45:bd:5e:f6:d8:72:ae:4b:a6:d7:b2:44:11:ca:93:9d:36:54:
d9:fb:eb:a8:d3:34:4f:8a:5a:6b:46:65:2d:48:99:e6:bd:75:
2b:07:3a:c1:42:63:3c:d9:70:63:8e:8b:4c:9d:cd:64:d9:1d:
0c:91:9d:e2:e4:b6:4d:48:98:9a:a8:39:46:6a:41:1c:40:07:
64:97:b2:7a:87:5e:db:60:e8:ef:29:a8:c5:7e:f4:61:d0:5e:
48:4b:0c:96:f9:f1:eb:3b:0a:a4:c3:1c:2c:4b:73:4e:e6:0a:
8e:06:67:d9:d3:ec:72:9c:fc:be:5a:43:b2:66:ab:d4:b2:48:
7c:a6:1d:92:d3:ba:77:ad:d1:55:c2:cb:4e:8a:77:ae:62:7e:
69:f1:46:23:48:8d:40:b4:29:70:46:d2:70:51:2f:2f:e0:ab:
6e:38:4a:e0:09:5a:a5:fb:2c:30:ee:cc:84:e7:dd:b9:16:2a:
d2:3e:f9:d2:e2:cf:91:51:50:8d:8a:99:12:17:2d:0e:7c:18:
7b:53:fb:83:0e:df:7f:77:fa:07:e2:8d:b8:9d:88:51:88:d0:
62:14:22:64:fe:7c:7e:b4:40:3a:62:20:93:0d:0a:6f:89:85:
4c:46:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:00:10 2025 by rpki-client