Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: 7oxjk4E5BHGOIk9CyKD4/z+UmvHxukBuCrWwkzcU6U4=
Subject key identifier: 9E:D9:3F:C1:77:F8:71:3B:FD:07:07:92:37:3B:26:23:2A:76:17:1D
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019A299E8C2BED76ED31E1820D0DD599081D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 07:00:47 +0000
Manifest this update: Tue 28 Oct 2025 07:00:47 +0000
Manifest next update: Wed 29 Oct 2025 07:00:47 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: ELe+i0OY59pfcuM1Ssa6HhqO2q7Kse7P58OZbEKW2Fs=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:8c:2b:ed:76:ed:31:e1:82:0d:0d:d5:99:08:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Oct 28 07:00:47 2025 GMT
Not After : Oct 29 07:00:47 2025 GMT
Subject: CN=9ed93fc177f8713bfd070792373b26232a76171d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:fe:9c:1d:30:8d:69:f2:7c:ba:72:b4:f7:
3c:bd:32:de:18:34:fb:b8:87:6d:42:6a:d0:55:40:
97:01:2b:90:df:b7:71:ec:bc:7e:44:d3:e0:d0:6d:
e3:cd:11:92:d1:56:c5:5b:c2:a7:3f:66:9d:73:2c:
00:6d:67:39:fe:ad:9a:97:28:80:08:14:84:8a:11:
2d:54:6c:17:45:be:76:65:2d:39:03:a0:45:6c:9b:
fa:c0:8c:32:23:a0:68:58:08:8a:45:ee:93:9d:81:
cd:eb:a6:8c:e9:2e:85:2e:31:9a:90:2b:4e:2b:d8:
74:47:87:58:be:24:a4:4e:27:cc:00:e8:96:05:88:
9d:b4:99:80:a4:3e:ab:88:74:b8:c1:2a:4b:f2:b4:
82:5f:d2:2b:ab:7d:50:eb:3b:ef:a7:6a:8f:b7:ae:
ec:76:37:d0:2b:62:6e:fc:7e:3a:8a:62:42:01:61:
c0:f8:9f:68:db:53:40:e4:3b:28:9b:48:09:b0:e0:
de:ad:37:33:4c:67:26:ca:ab:2b:67:48:66:48:ae:
4a:b2:5e:27:6d:09:44:f7:c8:ec:22:43:be:a7:4e:
98:6f:2c:eb:78:b2:56:5c:6a:89:4a:33:05:ac:3b:
0c:f7:3d:2a:f6:9b:1a:58:04:9a:d0:02:ae:b0:6b:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D9:3F:C1:77:F8:71:3B:FD:07:07:92:37:3B:26:23:2A:76:17:1D
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d0:ab:2b:a0:7a:6f:c7:b5:0a:77:c5:de:20:7c:a8:cb:b9:
a5:c4:28:8a:7e:9c:62:73:3f:54:02:3e:18:9e:70:2d:00:44:
b1:a8:86:dd:ab:ae:7c:40:41:2d:12:ea:b1:f4:db:16:21:51:
33:83:e4:a3:38:68:30:7f:eb:1e:94:bf:e4:eb:8b:7e:51:51:
0f:3e:04:8c:76:11:6b:39:9a:39:c7:50:01:45:2c:d6:7d:43:
65:79:94:83:75:9f:2c:e7:06:b8:42:f4:17:ea:ef:ae:6d:8e:
38:ec:4e:d0:06:3e:ea:7b:c5:e6:09:dd:1d:18:ef:01:05:4c:
da:98:f8:20:90:8e:08:d8:99:a9:d5:11:5f:83:23:e2:73:a4:
b1:f2:ed:3e:b0:d9:22:de:b0:93:17:af:f0:92:a4:02:d2:77:
cc:35:78:5d:a9:df:4d:83:18:6c:99:ec:95:ab:5f:ac:58:f5:
0f:b9:79:60:8e:41:a2:05:69:36:e5:07:a5:47:ac:88:dc:51:
40:c3:d1:9f:78:ea:79:c2:33:62:c6:41:1b:46:12:a7:ad:0d:
93:b4:88:c1:5f:b0:cd:a1:9a:50:cd:dc:25:4f:1f:3b:62:24:
4d:1a:6e:b7:03:0a:af:cd:5b:94:76:db:3c:74:48:b6:63:0f:
f2:49:bf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:48:24 2025 by rpki-client