Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File: d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier: rB2ubY/np238OHII46ISSPZduAxhVjfrkOED5gA9p64=
Subject key identifier: 27:59:03:78:9C:64:B8:AC:F6:76:06:30:2C:95:87:EA:19:43:66:52
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer: /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial: 0199FB7C76A6BF05295B1612587D77272191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: 3fVp55RM8WJ-CAkYXQzPen4QsPU.roa (hash: GhSbT3tbIT6J4s8weD/xKmKS+sqFk4JjUnduge7t9L0=)
2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: 8YdteRReUavuvVJt82k4rLHJgH3Vq1hJK9SeOUOrhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:76:a6:bf:05:29:5b:16:12:58:7d:77:27:21:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=275903789c64b8acf67606302c9587ea19436652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:79:d2:44:38:92:95:b8:37:58:8b:40:d3:
31:03:a2:17:83:ba:90:b5:b5:b9:6d:39:99:65:41:
a1:ba:a1:90:9a:ce:f1:b3:35:57:02:1c:56:10:10:
43:48:71:b1:28:db:6e:59:d1:77:93:3d:d1:73:5a:
a1:75:35:f3:a8:18:f4:0b:32:fa:4d:09:e8:f3:2f:
25:4c:55:a4:46:af:27:b6:1d:15:c7:03:a8:fd:54:
9c:3e:55:a2:e5:eb:a2:ba:bc:ac:32:8a:89:7f:53:
ae:b1:08:8a:62:87:09:33:8e:f9:d5:06:fe:7a:02:
65:a4:da:ca:47:0a:02:5d:f1:ff:a9:61:1c:3e:36:
a2:b9:fb:69:dd:9f:ff:e5:8b:f8:16:65:15:f0:e0:
32:dd:56:c3:b1:f1:47:1f:b2:55:33:9c:aa:f9:67:
61:35:9b:d8:24:16:18:9d:b0:7a:fe:ea:6e:2d:e9:
81:44:c5:0a:3c:e2:3d:66:70:1f:6a:d8:05:0c:30:
02:bd:23:10:c5:4e:88:6e:2f:08:ff:3b:43:51:cc:
e6:fc:20:30:3c:6f:f5:fd:b7:33:ec:29:0b:42:5c:
9e:a0:6d:3e:62:15:62:2c:25:15:2d:93:a3:7f:f8:
e5:57:a5:d7:83:ed:94:41:1c:09:40:58:94:e7:31:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:59:03:78:9C:64:B8:AC:F6:76:06:30:2C:95:87:EA:19:43:66:52
X509v3 Authority Key Identifier:
keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:27:b9:86:5c:1c:cf:9a:a7:47:27:64:00:c3:44:dc:65:17:
bc:27:74:a4:29:be:72:29:29:7d:27:0f:ac:83:cf:d7:f4:d0:
32:2c:62:f3:e0:78:4f:77:9d:7a:92:c5:99:94:a4:cf:21:aa:
40:62:1a:73:c8:4c:b1:91:fc:dd:39:c4:c7:0b:0c:4b:43:cf:
06:73:0d:7b:5f:85:ce:9f:59:78:87:84:78:30:f9:02:22:60:
8c:80:e1:e3:00:cb:dd:42:c3:d9:bd:8e:09:a2:a3:76:b0:9b:
75:cb:49:70:18:ef:c1:14:7e:73:6f:42:d2:94:1b:f3:44:53:
41:18:9e:33:bb:b6:c3:1f:8a:50:de:53:ff:45:b3:47:a1:c7:
e6:a6:19:09:88:75:04:cf:5c:49:f4:bc:a8:8f:6f:4c:19:22:
ad:2b:8b:88:45:17:6d:52:15:a5:88:b5:bf:79:d6:c3:cc:f7:
86:30:79:b2:ea:5e:57:b3:b3:7a:42:80:2a:da:fa:d6:15:da:
76:eb:ea:0c:66:47:de:34:b7:1d:95:c5:4b:3d:2e:82:83:73:
0f:f1:25:38:19:1a:f7:05:3b:97:46:db:6a:ce:de:73:81:e8:
7e:15:58:ee:ec:19:69:9b:ab:17:ac:10:90:fd:30:8b:ea:7d:
d1:0e:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:11 2025 by rpki-client