Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier: 31ZEbSyc9ou5Wbm3xB5Yc5m8pbmmbzZkmJ0QrRmaU/w=
Subject key identifier: 88:7A:C4:4D:38:6D:A6:F1:D7:7D:9B:51:DE:32:CD:AD:6A:AE:3E:18
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 019A30EA06B9FFB728AF0186294F77340B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number: 1708
Signing time: Wed 29 Oct 2025 17:00:34 +0000
Manifest this update: Wed 29 Oct 2025 17:00:34 +0000
Manifest next update: Thu 30 Oct 2025 17:00:34 +0000
Files and hashes: 1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: CSedwm3PlmvZXQMTqAx7NygrOH7nigcUp1XN7WbLMDg=)
4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
7: oDzpo9P1CSTveVeS7HO-MB_9-so.roa (hash: TBsZnZ6Hce91sBTky4DlDhCeMhJRvacSOmd1DwZB9+E=)
8: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 16:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:ea:06:b9:ff:b7:28:af:01:86:29:4f:77:34:0b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Oct 29 17:00:34 2025 GMT
Not After : Oct 30 17:00:34 2025 GMT
Subject: CN=887ac44d386da6f1d77d9b51de32cdad6aae3e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:01:b7:51:e6:af:b7:00:17:c1:17:dd:20:
47:11:ce:d5:15:01:57:52:a4:3e:00:cd:eb:65:b8:
83:aa:eb:5a:99:ed:4c:f1:9e:8d:96:14:9d:08:ae:
ce:ad:cb:9d:1f:94:a2:52:fa:47:d8:9e:4e:eb:63:
17:4a:8d:f8:b3:b4:b7:93:0d:dd:f8:79:6a:18:4b:
98:fd:c3:a7:a4:f0:a4:8f:0c:b0:bf:99:f3:db:85:
84:96:28:69:c2:7e:40:46:21:7b:1f:5a:5c:58:e0:
26:a7:7d:25:4b:60:d0:b6:c0:43:81:a3:92:74:58:
f0:2f:8f:28:99:40:80:81:17:63:47:09:97:05:3d:
8d:b7:e2:c8:4f:e2:d1:59:4d:e0:fb:60:41:37:fe:
fd:b0:e7:6d:ba:3d:2b:eb:6e:fe:32:34:f2:ea:1e:
e2:32:d0:e9:6e:38:4b:ff:a6:58:49:c6:4a:88:d4:
29:aa:46:bb:8a:73:2c:ca:65:53:9c:ec:11:66:a4:
39:49:c4:9e:cf:fe:f7:74:81:df:ab:d7:0e:d8:30:
99:6a:0a:e3:b6:2a:7c:75:d0:57:7f:1d:8d:7a:00:
8c:c4:17:fc:6a:18:14:22:93:97:79:fa:ad:90:45:
59:41:7d:b9:34:41:a3:0b:68:4a:14:ab:13:0c:d8:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7A:C4:4D:38:6D:A6:F1:D7:7D:9B:51:DE:32:CD:AD:6A:AE:3E:18
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:ae:dd:fd:5e:38:d0:65:e7:b2:fc:3b:d4:42:e2:6d:5e:
fd:ca:08:51:f9:b9:4e:fb:38:82:56:54:cd:3d:26:2a:b7:df:
14:86:b3:4b:e0:c9:c2:8d:54:ec:f5:10:6a:d7:6e:78:97:0e:
d2:c8:95:4f:93:db:84:e5:75:25:7a:29:dc:cc:3a:81:b9:f0:
38:21:b3:af:34:f3:6d:fd:77:ef:55:e5:d6:14:3c:61:d0:0f:
6a:8b:d0:af:ba:04:f0:74:59:7d:5d:88:04:85:f0:09:97:da:
fb:9b:68:d9:85:ea:d8:d3:99:7a:64:5c:d2:79:19:d5:e1:31:
19:27:bd:fd:03:f8:cd:f9:64:59:4b:9a:10:b3:92:7b:ee:d5:
d9:b1:51:f8:a5:a3:3e:bf:ed:21:79:8f:bb:fb:77:b2:d3:ee:
4b:03:f0:6b:9e:74:4e:02:b3:fe:17:54:16:87:5f:8b:f4:0f:
72:31:fb:ba:ff:d1:d9:c8:8f:26:eb:35:f5:a2:73:9c:06:2f:
46:eb:1c:eb:c8:b6:a2:47:84:c3:70:90:16:0d:75:a8:f0:6a:
df:c0:54:9e:c1:50:91:45:6a:2e:51:06:f6:86:f6:65:12:5a:
35:4f:1e:71:95:c7:b2:21:33:e9:d4:cd:f3:2d:a2:95:3a:4c:
55:07:21:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:37:20 2025 by rpki-client