Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: 1ufvrU0aXshbSgvFKeciqkr8+g23yxVFOe4DfoMENrg=
Subject key identifier: FA:C3:C4:BB:14:ED:CF:E7:1B:27:94:54:40:C5:8B:38:40:A0:24:37
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 0199FEEBC15D3EA08A60C32CD91BF0877848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1265
Signing time: Mon 20 Oct 2025 00:01:27 +0000
Manifest this update: Mon 20 Oct 2025 00:01:27 +0000
Manifest next update: Tue 21 Oct 2025 00:01:27 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: hqMndpFXrHm2qx+ZHkYCAuZ9oTf/2FGmh+WISLfKx8I=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c1:5d:3e:a0:8a:60:c3:2c:d9:1b:f0:87:78:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Oct 20 00:01:27 2025 GMT
Not After : Oct 21 00:01:27 2025 GMT
Subject: CN=fac3c4bb14edcfe71b27945440c58b3840a02437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:80:a7:89:da:6a:52:c1:2d:a9:44:25:3c:
d9:92:87:a1:69:0f:c2:77:99:1b:65:cd:9c:f9:83:
ff:a1:71:ca:94:88:95:95:ab:c3:0c:63:e1:42:47:
83:2a:87:97:29:93:9f:d8:ab:51:34:35:aa:7f:3f:
ab:7b:a5:bf:4a:00:05:9a:48:70:3b:44:ce:e6:8c:
fe:4d:fe:70:86:74:43:08:dd:6c:3d:80:e7:6d:3c:
60:66:e3:73:d8:c6:d7:e8:17:06:9a:d9:1b:57:dc:
17:73:95:4a:34:ae:b0:68:6a:67:b1:50:60:ee:e9:
1d:07:2d:cd:22:c8:20:ab:c5:88:fa:a6:25:37:e7:
35:7a:8f:90:56:90:fe:1c:62:68:d8:59:de:cd:e6:
c9:8d:04:30:0a:d6:0e:0f:62:ba:54:57:70:23:d1:
70:58:0e:8b:b4:79:de:ea:26:5a:98:b4:fb:f7:e1:
73:e9:02:f3:aa:c8:6f:c5:7c:a9:7f:41:7d:2f:45:
20:63:fe:37:98:9c:ca:10:ca:64:ca:0a:ad:1e:74:
7d:8e:92:b0:a2:1c:ed:28:ce:5d:7e:92:b6:6f:88:
a8:92:39:9a:b7:52:60:95:0b:62:fb:75:28:fa:71:
33:1c:29:42:b8:2b:84:f1:46:bf:f4:ae:d0:a2:61:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:C4:BB:14:ED:CF:E7:1B:27:94:54:40:C5:8B:38:40:A0:24:37
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c6:74:2d:32:ce:ec:02:7b:ed:65:1f:43:02:86:11:75:1c:
26:4b:c9:e3:32:20:6c:22:79:f2:05:b0:3b:b5:00:8f:c0:aa:
e0:49:87:ae:9d:de:28:ac:3d:56:12:10:39:a9:9e:bf:8c:44:
1e:d6:c1:a4:4a:c3:7e:44:59:36:76:66:01:13:d8:38:68:7b:
fc:31:58:28:e6:ca:84:fe:3e:62:43:7f:97:e5:0c:d9:3f:22:
14:59:09:63:d7:a6:46:4c:df:eb:59:d3:e8:52:9e:ad:42:21:
f3:d6:f5:4c:24:b3:8c:2e:79:e9:27:96:78:a6:93:4d:d3:3c:
c9:a8:7e:e2:92:3d:a2:ad:bb:61:f5:48:08:18:13:04:9c:d1:
ec:df:a9:33:23:04:94:d6:8d:4c:74:71:17:53:49:56:b3:e6:
b9:19:5a:a9:88:c9:32:2d:15:3a:f3:05:5c:41:a1:0a:7f:96:
13:43:c8:1b:64:b1:e1:ae:95:6b:45:db:e6:bb:77:b1:ae:53:
74:11:c2:67:75:06:f5:61:7c:c4:10:da:36:10:50:13:9a:0c:
ef:90:84:f3:a0:ed:fa:17:bb:db:52:be:78:92:fc:1e:1e:28:
6f:07:e5:42:0c:e7:c2:a1:fc:2e:05:6c:94:33:79:0c:32:1f:
ad:c6:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:52 2025 by rpki-client