Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: S14FMkaBKs9ExRiIRB+Mr4rS20pfgC0Hl21BxshA0Gw=
Subject key identifier: 29:8F:00:27:BC:07:12:8F:93:4E:7C:82:17:B6:D6:F0:0B:10:19:2A
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 019A2F694C6A3BE6E4ECDCAF3B5443866666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 10E6
Signing time: Wed 29 Oct 2025 10:00:21 +0000
Manifest this update: Wed 29 Oct 2025 10:00:21 +0000
Manifest next update: Thu 30 Oct 2025 10:00:21 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: T3TJMd+yWpFhQXEFp976PtLPD7LQvkJjoelwz800v2c=)
2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=)
3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:69:4c:6a:3b:e6:e4:ec:dc:af:3b:54:43:86:66:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Oct 29 10:00:21 2025 GMT
Not After : Oct 30 10:00:21 2025 GMT
Subject: CN=298f0027bc07128f934e7c8217b6d6f00b10192a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:af:e2:9e:a3:db:01:d2:56:5f:87:07:1c:
f8:75:e9:3f:9f:6b:c5:4a:ca:5e:93:56:bf:ea:36:
43:b4:8a:3c:7b:57:df:d1:2c:f6:17:9c:d4:58:47:
41:15:0f:f7:54:28:ce:94:09:83:f2:76:c6:3b:e5:
dd:f3:80:c7:6e:fa:24:dc:dd:00:56:c2:30:8a:2e:
3e:54:fe:b1:a4:6e:8f:8d:2e:dc:37:1a:f6:57:70:
b8:34:7b:16:55:d8:55:22:f1:41:c9:64:5b:80:73:
b0:8b:da:55:dd:b0:2d:d2:19:f2:99:ca:7e:d2:af:
1a:12:e4:d1:46:e0:be:5b:ec:ad:67:64:1f:48:ce:
27:7a:c5:f3:a6:09:9a:bc:24:1a:ea:12:61:30:5b:
08:a8:d7:e9:d8:85:ff:93:a7:1b:a7:96:0b:96:7e:
3b:6e:b8:f6:f5:32:5d:79:19:40:da:29:6f:18:13:
15:d3:b4:12:72:ab:e3:25:45:29:0c:87:52:60:1c:
b9:3e:ae:65:bf:b4:48:b0:13:41:a5:f4:7e:e5:6b:
51:9c:84:41:46:bb:98:b8:2a:ec:d1:3c:3a:67:8e:
d7:14:67:e7:f1:0d:41:b3:08:f0:80:23:f7:ce:c6:
d7:d2:e6:02:78:5d:2f:19:6f:6c:27:ad:0d:9b:9e:
fe:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8F:00:27:BC:07:12:8F:93:4E:7C:82:17:B6:D6:F0:0B:10:19:2A
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:02:08:f0:0d:0a:65:75:6b:4a:8e:e6:89:72:40:42:6d:33:
e5:55:57:eb:d8:cf:9e:22:42:f1:20:3c:55:a7:27:b6:c9:05:
16:2c:39:69:72:b3:eb:aa:e5:61:96:3e:43:a1:af:5f:b4:13:
0b:c0:0f:12:7b:b0:04:e8:c5:91:04:3c:6d:49:db:72:9b:bf:
64:d9:0d:5d:47:48:44:37:a7:ed:76:a3:f6:49:2f:98:f2:7d:
51:dc:9e:5c:ab:5f:c7:d3:16:8e:bb:92:20:8d:c2:16:01:35:
53:12:85:b5:2d:cd:1a:48:eb:dc:7f:51:ae:96:ad:e5:5f:2c:
9f:c4:27:6b:b4:53:a8:d8:41:35:ac:f5:98:64:32:6d:e0:4a:
71:bd:57:ca:a8:0f:30:27:f0:97:88:9d:f6:9a:fd:3c:ec:bf:
5b:e5:40:15:a5:e3:63:8c:4f:57:61:f5:f2:ed:38:11:76:b1:
1c:f6:2d:6d:07:09:bd:52:74:de:ad:ae:6a:33:c6:6a:ec:4e:
eb:2f:4a:69:fe:8b:90:eb:7b:54:2c:2e:3f:35:ea:8e:f7:08:
d5:0e:26:42:5a:b6:e0:02:b0:65:6c:e6:e3:a6:06:10:f0:eb:
f7:8a:45:18:44:47:6c:97:4c:9b:9d:3b:41:14:57:43:77:bd:
68:58:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:32:45 2025 by rpki-client