Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: FAbmwh8XK7r6AML/epuzrGbG5zHIrEonnBhrSXPOoHs=
Subject key identifier: F1:7C:D7:40:60:A0:3E:24:A8:B4:AF:3B:AD:93:51:BB:1A:8C:21:E3
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019A1A2B49F851BACCC12F9BF7F1F16794CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 07:00:35 +0000
Manifest this update: Sat 25 Oct 2025 07:00:35 +0000
Manifest next update: Sun 26 Oct 2025 07:00:35 +0000
Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=)
2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: XSkLSDLwjUmwAPzKrIwFCPUPKau7yl+3oWLSadB4pYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2b:49:f8:51:ba:cc:c1:2f:9b:f7:f1:f1:67:94:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Oct 25 07:00:35 2025 GMT
Not After : Oct 26 07:00:35 2025 GMT
Subject: CN=f17cd74060a03e24a8b4af3bad9351bb1a8c21e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f2:fc:87:70:13:c3:c1:1b:98:57:91:69:d1:
f9:cf:cd:df:fb:1d:bf:ef:83:a1:97:f8:5b:cb:7e:
88:d5:db:63:fa:8c:dc:c1:12:c0:f2:cd:9d:97:cb:
ac:cd:56:a0:41:ca:06:13:21:c3:21:bb:8c:74:6c:
bf:a5:b9:3c:a6:f0:52:0b:b4:b0:95:3f:9f:d6:8f:
89:6b:3b:e0:ff:79:f4:11:31:aa:e2:79:9e:58:1a:
20:fd:dc:56:cb:e9:25:7a:88:96:b0:e0:13:cd:a4:
73:4e:1d:de:26:bb:b1:22:04:aa:ad:e5:e6:52:e8:
11:94:5c:30:77:33:60:14:c6:03:23:79:85:23:4c:
f5:54:21:61:9e:f9:c0:32:d2:3e:d2:cb:64:56:65:
4a:55:eb:db:5b:b6:0e:de:e9:ae:54:7e:36:ed:85:
2d:16:a8:07:1d:b0:b0:37:9a:f3:87:3c:56:99:0a:
05:35:95:0f:ad:d5:de:03:98:32:fe:bb:ad:73:91:
b7:9b:5a:9e:75:19:6f:da:fd:f2:b7:ef:d9:0b:f1:
e5:e0:8f:45:4f:3b:e0:3d:8d:f6:0a:e4:56:03:bc:
b8:af:a1:96:ef:a3:e3:e2:60:2b:b4:f8:df:73:2c:
8d:a5:e6:59:e1:cd:c4:f3:dd:70:80:37:bb:a4:b6:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:D7:40:60:A0:3E:24:A8:B4:AF:3B:AD:93:51:BB:1A:8C:21:E3
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:13:1b:e3:ee:e2:d9:b7:9d:70:5b:d4:4d:ba:0c:8b:d5:62:
3d:4e:8f:d6:65:88:31:2a:b6:e6:79:9c:f1:9e:92:6f:fd:43:
8f:f7:d5:a9:64:db:41:28:80:25:7b:23:9b:95:f3:0d:5b:d2:
8e:b3:25:ec:8e:ad:4d:08:68:f9:58:b6:c4:3e:79:a7:89:d7:
29:a2:d8:8e:a5:7c:fd:5b:94:53:47:45:f3:43:a2:11:55:37:
c4:56:fa:54:5d:fb:19:b8:a6:68:e1:4f:e7:0d:fc:af:65:58:
60:6e:08:3d:89:27:96:ca:59:04:c0:98:58:88:e4:43:34:76:
57:3f:6c:01:69:85:ee:b1:da:d1:06:0d:24:89:4f:5d:d5:89:
f9:ea:2c:40:de:11:71:44:d0:f0:f0:b8:57:c8:8d:68:8c:14:
ef:6a:bd:1e:f6:60:36:3f:02:94:d1:95:28:e6:54:1e:88:17:
48:d7:90:e6:10:a1:52:36:7f:b8:c1:5c:87:70:a9:48:6f:93:
d8:e6:88:98:ba:3a:c4:88:2c:a5:1c:72:c2:d6:05:52:89:72:
34:c7:8c:91:d0:e3:ac:f0:c3:e5:8f:9a:5c:51:5d:5e:aa:04:
5d:c0:86:9a:f4:ff:f6:1a:90:ce:b1:b0:27:19:5e:90:52:ae:
23:d9:b7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:43:29 2025 by rpki-client