Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: lnjGuR8GflQxb8mJ4Rr7Xa8KncztAGbrst+RNF07V0Q=
Subject key identifier: 8E:78:70:34:E8:45:6B:BC:83:CF:83:5D:E3:D5:F6:52:C3:9C:2F:7F
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 0199FC58469AD56ACB70C5B1DBE2D8603690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0658
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: 2CWxlLP-g2_NKa4Kkpj2mT541B8.roa (hash: mmFiMDnNmanIcg6TQLMQsrDR/+z17sNvs6gtqCoQhp0=)
2: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: u77FK/f08wHteeTNShp86+XQQq0PTYBWMxbob0HcMX0=)
4: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
5: zGpb-ZeCY1IKeaoUCFy7z97Xemo.roa (hash: mbhMc1h15zK2CFg+s3mq9POrXrfojhoCA2jehVwrtX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:46:9a:d5:6a:cb:70:c5:b1:db:e2:d8:60:36:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=8e787034e8456bbc83cf835de3d5f652c39c2f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:35:c1:3e:03:03:58:7a:7e:e8:8b:44:65:d6:
36:3b:9f:62:07:c5:3b:9b:18:bb:40:52:8e:59:dd:
59:21:6b:3d:d7:3f:f6:d5:cb:9f:7b:08:fa:20:36:
e8:30:c5:ad:9a:74:67:79:b2:ab:d8:fc:7b:b8:bb:
8f:1d:3f:ca:36:e2:e3:70:33:36:ca:01:80:e7:ba:
30:b4:26:19:22:a7:af:f6:f7:3b:f2:d4:7d:7b:93:
d6:62:fc:c6:24:db:a0:1d:2a:82:6e:df:e5:85:96:
0c:2e:96:91:02:1b:12:80:89:b2:d8:23:9a:6f:57:
b0:c6:c4:38:96:94:97:65:ae:e2:d1:58:d4:e5:2f:
ac:ff:d0:28:91:ff:f1:17:7a:dc:eb:56:a7:ce:90:
08:a9:36:06:61:0e:d5:c6:b9:13:94:5e:a0:77:76:
c0:94:97:e1:c1:27:6d:26:8f:2e:65:7b:d1:34:1e:
d3:5a:9d:c2:4a:54:b5:18:10:73:3b:1c:4b:7f:52:
36:ac:7d:cb:f2:33:1d:c5:04:f9:23:4c:0e:de:86:
d9:b8:ff:c7:4e:e4:4b:f6:2c:36:be:34:14:cc:73:
4c:26:8d:84:67:8b:2a:c4:86:d6:a8:12:e7:d2:45:
33:09:0e:2f:a9:85:b8:57:87:38:c2:60:bf:a1:65:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:78:70:34:E8:45:6B:BC:83:CF:83:5D:E3:D5:F6:52:C3:9C:2F:7F
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e5:77:a1:d2:92:12:3d:8a:a7:8c:53:d7:43:86:96:ca:3a:
6c:b7:39:3f:cb:04:73:89:15:4d:b9:e9:7a:81:6a:ff:0f:91:
86:9b:49:43:18:da:06:6b:b3:27:67:62:5b:fe:e2:20:f8:dd:
e5:32:0c:34:ad:fb:d8:fb:3f:b6:aa:da:e5:48:99:8d:9a:ae:
17:75:70:a2:7e:2d:3d:18:6a:30:64:96:fc:a6:2a:e2:17:62:
c0:40:c2:e1:c4:b0:56:a2:cf:33:b9:c2:69:a9:27:9b:b8:f5:
39:de:e0:f6:6e:a9:71:83:83:d9:6e:11:7b:f6:96:00:47:9a:
2e:f3:0a:bc:96:63:e6:98:82:25:fb:5e:6c:13:81:e1:db:f2:
80:67:5a:af:07:cd:8b:d7:87:a4:38:c9:f6:91:d7:5d:52:bc:
44:91:96:d8:0a:36:2d:08:0e:98:b2:0d:0b:b8:6d:b2:4c:fb:
21:30:4d:5c:33:5d:0c:5b:c1:64:c2:61:97:5a:dc:5b:c8:69:
3a:d9:00:bf:97:a3:a7:ef:53:8e:cf:1b:d0:31:42:16:7f:1c:
69:cf:8e:55:7b:c8:84:3b:d7:23:46:d0:cc:d7:9d:b4:cd:4e:
26:71:77:46:65:43:1a:b0:b5:b4:de:c4:6f:87:f5:7a:3d:2f:
b8:2d:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:55 2025 by rpki-client