Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: wDOYE5PgTH8aEuYlQ/u63Ryd1tiY+tcHgoFjNke1Ln4=
Subject key identifier: 78:AE:EA:45:9D:A0:13:00:29:DC:56:E0:B1:C1:B9:AF:86:2B:CC:24
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 0199FDD8C7B93481178D8677F593E3542B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 104E
Signing time: Sun 19 Oct 2025 19:01:06 +0000
Manifest this update: Sun 19 Oct 2025 19:01:06 +0000
Manifest next update: Mon 20 Oct 2025 19:01:06 +0000
Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: bOMXyqXepeC64Cv8eHn9twc1/U7NpBeCBSn3wUtfOJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c7:b9:34:81:17:8d:86:77:f5:93:e3:54:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Oct 19 19:01:06 2025 GMT
Not After : Oct 20 19:01:06 2025 GMT
Subject: CN=78aeea459da0130029dc56e0b1c1b9af862bcc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:9c:f9:b9:c6:7f:d1:33:38:5e:50:06:4d:
f0:6b:e2:e3:4b:e2:5c:6b:cc:d7:69:3d:cb:69:a3:
38:f8:7a:9b:98:6e:b5:2a:35:c4:15:08:50:57:68:
b4:31:a0:79:d0:0e:73:01:84:48:f4:e7:8a:a6:7b:
94:2a:f4:66:c3:e7:7b:9a:e9:9e:05:d9:e3:2f:99:
e1:e3:12:d4:ff:cb:01:83:5e:6b:3b:e8:0f:79:df:
92:e0:2a:8d:51:3a:1c:f1:0a:6a:34:69:ba:e4:59:
7c:9f:28:1f:c7:fd:c8:55:3b:99:e6:9c:3e:18:b6:
2b:70:18:cf:aa:71:3f:88:24:fe:bb:c8:63:35:8d:
1a:be:67:50:c5:6b:ec:31:d6:61:30:bc:28:23:98:
d9:ad:7c:14:1b:fc:d1:34:7a:2d:5b:ec:43:65:c1:
d3:75:d1:a0:3b:2d:d5:35:7a:02:0a:1e:e5:b4:c4:
f5:88:86:68:e1:7a:05:a1:7a:29:df:9f:3c:9b:70:
ac:63:73:d0:36:f0:7a:d2:3a:72:5c:f1:5e:05:46:
32:7e:b6:09:59:b6:e4:e1:37:86:14:61:9b:44:7c:
98:aa:2a:ff:a5:c7:b8:67:34:3b:3e:89:6a:f6:65:
2c:8e:8b:0c:aa:69:78:1b:7b:5e:46:ec:6a:8e:cd:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:EA:45:9D:A0:13:00:29:DC:56:E0:B1:C1:B9:AF:86:2B:CC:24
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:48:20:aa:68:6c:8f:51:56:a6:86:35:85:db:20:fa:35:12:
d7:d2:da:4f:48:c2:30:69:53:80:69:b1:f6:84:0f:71:a5:79:
ec:71:d2:c2:2a:fb:c7:f4:e4:9e:f7:22:5d:2b:52:a1:59:0e:
3f:2a:b3:9e:67:d4:93:ac:99:79:e3:6c:a2:d8:48:86:cc:80:
41:d0:c7:2f:92:6f:49:76:c8:86:aa:1a:8f:0b:30:cb:28:99:
d7:8b:82:cf:ea:41:70:d2:40:94:17:14:e1:1f:03:1a:17:42:
e3:ef:71:32:8b:d8:a0:24:59:6e:18:08:59:a9:52:57:35:3d:
19:fa:56:09:63:b4:0a:b8:20:74:57:cb:01:01:33:24:15:cb:
49:55:4b:14:6a:98:d0:7d:b9:9b:8e:96:3a:32:c6:d9:21:70:
06:2d:f1:e6:71:c9:09:c7:7c:15:5d:9e:72:6f:f9:7e:19:96:
25:43:74:c6:b5:5f:83:60:24:ae:17:00:69:ee:21:9f:b9:e7:
51:4e:f3:ab:bd:56:d8:19:f3:af:c8:0f:fe:02:38:df:d6:c0:
ae:74:b6:30:87:83:48:2b:cc:6b:41:f4:3b:f4:e1:8d:1f:b3:
13:c0:cf:fc:10:de:1d:e9:ae:fe:23:b4:ad:c3:6b:b8:8d:6c:
ab:85:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:15 2025 by rpki-client