Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: 1kGRwu+PIrdAqdvbiQXnD7CZzl/k32umqgI7ZpJmXYM=
Subject key identifier: 38:FA:AC:94:C2:36:53:B6:E5:E4:3A:A9:90:87:D7:D9:4E:AE:DA:88
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 019A1E082E9301FF6A3CAF45D1A85065317F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 01:00:43 +0000
Manifest this update: Sun 26 Oct 2025 01:00:43 +0000
Manifest next update: Mon 27 Oct 2025 01:00:43 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: 9mKrYus+SeQ6whjH8VHwklHfEXtKnTOu0tDUz/j71Wc=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:2e:93:01:ff:6a:3c:af:45:d1:a8:50:65:31:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Oct 26 01:00:43 2025 GMT
Not After : Oct 27 01:00:43 2025 GMT
Subject: CN=38faac94c23653b6e5e43aa99087d7d94eaeda88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:0d:f4:f5:8f:1b:80:32:aa:10:cd:34:fe:
03:8d:09:f4:7e:96:06:da:35:9f:b4:a8:b2:f9:b6:
90:7e:32:e7:f8:e7:65:1e:d2:d9:31:21:a7:2f:c7:
0b:dc:df:8b:fe:6e:97:b4:4e:68:3f:2e:70:5b:2c:
43:7b:cc:f5:af:88:85:28:68:04:8f:a4:df:68:05:
b3:3e:dd:0b:2d:54:e6:b2:47:2e:90:6f:1d:19:b7:
b6:68:0f:83:d8:e6:43:14:c0:a5:76:98:16:d2:fb:
f0:52:15:d3:f2:7d:a1:9b:5b:39:96:ad:99:7e:ff:
19:bb:f8:ae:8a:73:64:d1:0f:f8:f3:09:10:d0:57:
92:5c:e8:88:3d:ab:31:cd:96:ae:86:0b:20:6e:6d:
1e:c5:1a:c7:75:fa:b8:ce:9f:1a:6f:18:ff:a7:1c:
3e:50:84:ba:11:e0:b5:14:0e:ed:09:49:5d:25:26:
d1:9a:ee:03:bf:93:e0:d6:bc:ac:21:11:b3:af:12:
b0:0f:79:30:b3:a4:c3:91:8f:0a:f4:85:4a:da:38:
61:82:cf:7b:a7:bf:b2:cd:2f:03:e5:ad:d8:3f:d9:
82:37:87:0e:f0:d4:ce:de:1f:4b:0d:2f:44:76:f8:
b9:eb:89:a8:cb:19:12:1d:f4:77:f0:2a:ba:87:86:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:AC:94:C2:36:53:B6:E5:E4:3A:A9:90:87:D7:D9:4E:AE:DA:88
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:01:a9:8b:b1:57:d5:1d:3f:a8:b2:17:e9:67:ec:2c:60:c3:
6a:e3:8f:55:3b:79:bb:52:1d:c1:51:a4:b7:8b:a5:c0:06:cc:
83:0d:e6:cc:8c:d3:aa:1f:ac:9b:e7:a3:0c:36:e9:b1:6d:16:
60:eb:21:2f:5f:27:b3:d2:02:41:78:52:d5:91:60:e1:d4:80:
85:f6:ea:2d:88:ec:3c:d6:0d:92:68:d4:35:ec:85:4e:cb:dc:
47:21:77:32:87:7e:67:94:8f:bf:dd:44:92:70:8c:b9:f7:de:
49:23:32:7b:31:4d:ca:1c:f3:d7:68:78:4e:a4:9c:df:25:d5:
74:09:82:e5:e1:35:22:ed:73:d5:09:a6:55:ac:2e:44:20:04:
6a:1f:da:5e:10:ef:50:6c:c6:71:51:89:39:c3:36:67:9f:09:
4e:66:50:43:3e:1a:d8:45:7a:cd:34:9b:f5:8c:49:33:e8:4f:
40:e4:5c:b0:cb:b4:02:69:d3:f5:0a:cd:04:a5:43:07:8e:46:
6f:fe:ac:05:1f:83:3c:4e:ca:2a:53:cf:a3:56:06:11:4d:65:
47:c2:10:7c:67:5b:f3:7f:e7:26:81:37:24:fc:1a:bc:1d:ec:
62:4f:d3:f0:b4:98:4f:2c:a7:6b:fb:35:5c:df:28:9d:fe:10:
19:63:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:28:46 2025 by rpki-client