Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier: Uttc4XunbNU9LD3/3OcwjZGHD5ONl8O2kLGzmiX96Ts=
Subject key identifier: 1A:30:7D:B0:FC:C8:38:B2:45:59:64:CD:6C:3A:DD:D7:AF:B8:4C:35
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 019A23D2F1042FD52A167559D5F2B1E2D29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number: 140D
Signing time: Mon 27 Oct 2025 04:00:17 +0000
Manifest this update: Mon 27 Oct 2025 04:00:17 +0000
Manifest next update: Tue 28 Oct 2025 04:00:17 +0000
Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: gzk5pVZwUvWFwkXrO3FO8A0BndEnzmqjw+q4VSlRPds=)
2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:f1:04:2f:d5:2a:16:75:59:d5:f2:b1:e2:d2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Oct 27 04:00:17 2025 GMT
Not After : Oct 28 04:00:17 2025 GMT
Subject: CN=1a307db0fcc838b2455964cd6c3addd7afb84c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:f2:5f:67:3d:2a:ec:6b:5b:8e:f7:35:39:
f9:d8:9f:ee:a2:43:c7:c1:c1:c7:55:41:b2:11:98:
81:0b:6f:a0:2d:01:73:de:8c:5b:c1:42:6f:f7:dc:
a8:f2:46:26:c5:76:a5:aa:56:9d:00:f0:ed:21:e3:
92:b4:9e:cb:5f:63:6c:11:c9:1f:bf:8b:6d:6f:93:
88:5e:83:3a:7e:d2:0b:3b:39:00:cf:0d:b9:9e:30:
04:35:ea:9f:c1:6b:fa:fe:b0:d7:b2:11:d4:76:ed:
22:48:02:eb:b9:39:bc:37:5c:23:c2:7a:d6:64:80:
16:dd:79:db:11:09:8e:bb:13:6d:fe:be:ec:a8:bc:
ef:21:0e:a6:95:c3:04:a1:c8:04:fd:8c:f9:b8:97:
5f:41:67:2f:44:7f:22:81:ca:2f:18:71:00:dc:87:
4a:f7:21:ef:db:b5:12:5f:a4:c5:77:8a:ea:b4:3a:
73:62:8a:dc:5f:d7:2b:ae:76:61:07:b6:4b:d6:2e:
f3:0e:c7:53:45:5d:09:63:3a:fa:ad:02:d5:86:c0:
86:b7:5a:b0:5e:b7:3d:f6:13:5b:aa:e8:99:ab:96:
a2:4e:e7:9c:5f:4d:77:9d:37:61:61:90:be:c6:6b:
f7:b2:5f:9e:6e:b6:71:da:fc:76:45:48:79:a3:a2:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:30:7D:B0:FC:C8:38:B2:45:59:64:CD:6C:3A:DD:D7:AF:B8:4C:35
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ef:9b:b9:9b:1f:ef:31:a3:3f:58:fc:fd:50:46:e2:1d:78:
eb:7f:47:86:1f:4e:10:ed:57:f9:a8:27:14:2a:fc:0c:22:57:
0d:d6:7c:b2:e2:fb:35:64:37:2a:fd:f7:f5:ce:c0:0a:bf:d3:
4c:d6:03:e7:04:8d:13:1f:74:d4:82:8a:a7:2f:dd:4c:24:5d:
b6:07:f4:b7:d7:09:e6:f5:87:30:61:6c:70:2d:d0:b6:c7:91:
a8:f2:2a:c3:a5:38:84:bb:b6:5d:65:3c:16:e9:6a:a2:37:ed:
b7:eb:57:35:41:ff:8b:75:ba:5d:e6:b0:53:f4:aa:63:53:4d:
7f:16:4c:18:29:3f:a8:b2:2f:eb:9b:d1:62:11:3e:cc:14:88:
fe:0a:e6:ae:7c:54:b5:56:b8:78:b6:e0:bb:0d:d4:6a:4a:78:
6c:48:bf:97:87:32:ae:8c:aa:01:99:47:e8:71:1d:47:62:1d:
64:0b:fc:c3:8d:e3:c4:8d:6a:b7:ee:1e:76:09:a1:c1:00:e7:
3f:76:96:80:08:56:76:97:16:ec:8f:8e:cb:45:70:70:d7:74:
42:2e:c0:39:0e:6c:f6:fb:8b:db:e8:64:12:14:c8:54:c1:84:
8c:42:1c:83:d8:f5:bc:47:ca:0f:c4:36:b3:ad:d8:30:91:c7:
63:5b:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:23 2025 by rpki-client