Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: d85x8d9UzbyF6AN91sCl8Hc7GYb78FgHkb0vGh5g+48=
Subject key identifier: 8F:E9:0E:E3:58:0B:46:BF:E5:78:87:2C:09:C0:A4:37:61:A6:09:21
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 0199FDD8EAD3B2720F7250C2888F97759B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:15 +0000
Manifest this update: Sun 19 Oct 2025 19:01:15 +0000
Manifest next update: Mon 20 Oct 2025 19:01:15 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: Cvg0LzEEAMEf5P3MGBBKmOubchpFp1GUQBUW9X7WABg=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ea:d3:b2:72:0f:72:50:c2:88:8f:97:75:9b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Oct 19 19:01:15 2025 GMT
Not After : Oct 20 19:01:15 2025 GMT
Subject: CN=8fe90ee3580b46bfe578872c09c0a43761a60921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:03:8d:3b:69:f9:45:15:c1:1d:c4:ec:f6:
03:1c:7b:6a:8a:b4:9d:23:cb:82:76:15:88:86:17:
99:08:62:bc:8f:8f:40:22:5a:e1:20:b5:bd:c9:e1:
55:c3:31:80:64:5c:7d:6e:2a:a6:71:99:c4:6c:2d:
9d:94:74:80:52:4e:d9:ef:56:d8:f2:38:82:be:54:
70:65:21:87:29:5e:42:a2:d3:1c:27:71:eb:6d:f7:
75:58:f1:55:7f:d4:74:88:d9:b2:ee:7d:92:b9:41:
7a:4c:1f:dd:97:34:19:b1:c7:4d:56:4d:93:26:a7:
dd:a5:99:3c:53:3e:82:2e:d6:5a:61:01:a2:b7:c9:
b8:ab:6c:a7:c8:64:a4:7c:ca:10:43:2a:bd:fa:d0:
b9:be:b1:05:a0:4f:53:be:c9:ff:98:f7:a3:e2:88:
bc:42:44:a3:ab:7a:08:f3:29:f0:80:d3:d9:fe:bf:
7f:76:69:e7:d9:1a:fa:21:23:c2:78:e4:9a:f9:96:
b0:0c:29:8c:f2:5d:b5:40:e2:b1:6d:b6:65:df:7a:
5e:03:15:ce:3f:94:bb:7a:89:1b:d5:36:9c:51:d9:
41:0e:52:59:02:9e:f6:dc:3e:eb:7f:04:51:95:f7:
20:e2:6f:34:63:db:55:0d:6c:da:06:2b:0a:b9:f1:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:0E:E3:58:0B:46:BF:E5:78:87:2C:09:C0:A4:37:61:A6:09:21
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:46:0b:68:4d:4c:45:aa:78:52:92:71:8d:89:4c:d2:9f:f7:
cc:73:00:8a:f4:08:ee:9b:7e:62:bd:14:c1:1d:e1:c2:c7:97:
60:ae:05:43:70:b8:29:a9:b6:a1:5d:ba:c7:d0:fc:8a:be:72:
a3:ac:32:67:0a:a5:9a:e2:3d:ef:67:7b:cc:b6:2f:cc:7b:1b:
96:02:0b:98:e3:10:2d:bb:0d:0b:3a:15:11:0d:b6:ae:1e:0e:
27:b6:93:77:4d:6b:8f:2e:37:8e:9c:79:a0:02:02:50:f0:a0:
41:08:9e:a6:e4:de:a0:bc:f5:99:0b:1e:be:8b:8a:c8:b5:e3:
1a:ce:a2:60:02:59:83:9f:2c:9b:17:ac:e1:75:e0:47:08:8b:
83:ef:42:bb:f8:5d:86:68:ca:75:dc:df:e5:cb:77:c5:9c:1f:
93:94:af:8b:1d:42:8d:91:0c:f3:3e:d3:be:03:78:63:e0:19:
2c:5a:7b:30:cc:c7:53:58:37:d9:8a:b7:6f:1a:b5:21:ba:54:
32:77:07:9b:5d:3a:63:b9:c5:ac:ad:b8:f1:f7:e4:e2:24:04:
7b:7e:2f:db:79:46:e3:b2:4e:c5:64:8f:fa:3f:4b:05:8c:d1:
de:62:c7:ec:ec:c6:9c:35:72:39:d3:6f:48:e2:f7:ac:00:7f:
4c:0e:3c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:49 2025 by rpki-client