Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: afJCTZ8tJkmaiR6SKjyHd6xVyOSGeJCMj/ZUBv2Xegk=
Subject key identifier: 8C:B8:1B:AE:8D:3C:62:9C:85:10:11:B8:08:05:06:80:16:2F:76:85
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019A299E647BF9A50A7E7A3D44799B45AFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1703
Signing time: Tue 28 Oct 2025 07:00:37 +0000
Manifest this update: Tue 28 Oct 2025 07:00:37 +0000
Manifest next update: Wed 29 Oct 2025 07:00:37 +0000
Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: DayekyhUasPBndgnW8+skXR9+IsA+LrnVBBH5r0hm08=)
2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=)
3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:64:7b:f9:a5:0a:7e:7a:3d:44:79:9b:45:af:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Oct 28 07:00:37 2025 GMT
Not After : Oct 29 07:00:37 2025 GMT
Subject: CN=8cb81bae8d3c629c851011b808050680162f7685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:8a:15:12:27:f0:3e:5f:85:a5:9d:b8:be:
e8:ab:a3:ba:e7:58:ed:ff:51:23:5b:e5:b2:3f:8a:
6c:55:d5:c5:f8:eb:4e:7a:eb:49:ae:27:de:c0:07:
51:85:9d:51:3b:92:f6:ce:aa:20:2c:ea:85:31:2c:
56:f1:d8:53:53:ae:2f:93:4c:3a:26:63:16:3c:82:
58:da:10:1b:72:a7:e2:ac:24:f2:d9:d9:85:66:76:
43:6a:72:1c:cb:9a:e9:00:b9:92:8b:eb:8b:5a:b8:
0a:a3:b1:8c:cd:77:37:95:b0:bc:46:a5:ba:d2:f6:
49:be:af:fc:f2:42:f4:d8:ec:29:49:74:0e:c9:89:
41:8d:c0:c5:52:cb:76:db:d3:10:41:85:40:03:9f:
1c:c0:32:67:56:79:cc:14:f5:c1:73:01:11:0a:90:
b4:55:3a:32:7b:88:55:56:6e:72:3f:43:37:2c:bd:
7b:4f:8d:f6:1c:ce:a5:87:85:01:6e:e9:9c:df:e9:
96:d1:45:e3:88:1b:7e:33:c8:42:de:44:24:bb:c5:
5d:38:8a:62:5a:21:ff:3f:cf:71:33:f6:17:14:f3:
73:6f:87:84:bd:ed:95:d4:27:ac:83:a8:e5:4c:8e:
98:7e:c0:fb:69:25:5a:a3:5b:0e:87:c1:b0:d2:94:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B8:1B:AE:8D:3C:62:9C:85:10:11:B8:08:05:06:80:16:2F:76:85
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:88:27:6e:51:f3:d2:82:c9:3f:23:af:31:a3:3a:19:97:48:
9c:44:a0:95:b4:04:d9:5c:43:96:16:2d:9f:60:ba:09:53:01:
37:b7:04:5b:d4:f0:e3:5d:e7:36:fe:81:e0:14:2e:6b:d2:16:
c1:d1:c5:dd:b7:fa:e0:82:15:a8:8c:d4:b2:52:ce:44:e4:56:
a1:16:30:ea:7c:77:f5:80:5e:4e:82:7f:cd:74:7c:0e:f8:06:
9e:88:13:b1:77:c1:e9:53:0a:9d:6b:2c:5f:e2:0b:cc:b7:6a:
f0:bc:7c:e5:1b:7e:bc:fc:21:10:ea:73:99:01:02:4e:de:c9:
2a:53:dd:03:2d:ff:c3:b9:a1:e2:07:b0:66:ee:60:04:3b:5d:
46:a7:6b:d5:88:d9:24:e9:89:de:7e:7d:39:f0:97:bc:af:fc:
91:fa:a6:93:89:92:ac:b1:ad:1f:68:87:21:40:7a:81:3d:be:
be:85:b7:ba:fa:1e:29:88:bb:6c:e8:c2:31:58:3d:1f:58:fe:
75:bf:ba:3b:84:f7:ca:4e:89:9c:71:a9:7d:17:6c:d9:52:26:
08:95:74:8f:3a:d5:de:ee:23:dd:41:e4:3c:69:44:4c:da:e9:
5d:4a:44:09:8e:7c:34:e1:3c:88:0d:56:0b:68:36:bc:6e:5c:
22:6a:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:43:55 2025 by rpki-client