Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: y5bBmvCG4wy1xUBX07wWTfwEP8ol2sKXVOF0JeQmlBE=
Subject key identifier: 99:C8:E7:63:6F:48:85:4E:C3:64:D9:1D:80:74:F6:BD:80:B2:B8:12
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 0199FCC641EC8D64A147CACBB59A1EF823AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 0238
Signing time: Sun 19 Oct 2025 14:01:15 +0000
Manifest this update: Sun 19 Oct 2025 14:01:15 +0000
Manifest next update: Mon 20 Oct 2025 14:01:15 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: i+vj12GsiEunNE4G4CJ5dIaKq5VOLGq2HMVke9vyXng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:41:ec:8d:64:a1:47:ca:cb:b5:9a:1e:f8:23:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Oct 19 14:01:15 2025 GMT
Not After : Oct 20 14:01:15 2025 GMT
Subject: CN=99c8e7636f48854ec364d91d8074f6bd80b2b812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:ed:d1:68:61:c5:fd:c8:42:d3:39:77:e2:
e9:9f:60:d9:db:66:db:af:43:7d:f7:a1:2f:bb:32:
33:5b:7b:77:80:ef:09:50:68:a1:2d:4c:de:6b:7c:
99:e8:38:b7:73:48:af:34:f7:22:e1:f5:4b:69:49:
1b:41:c1:ad:08:e7:d7:a3:b6:82:85:7f:36:91:eb:
2a:0e:24:26:a2:b4:f1:e6:cb:b2:c2:b2:26:d5:11:
8f:b6:7a:d5:14:80:90:d7:32:fd:2f:58:6a:f5:98:
e4:ff:91:d4:1a:58:2a:56:da:40:42:3e:f0:7a:14:
6e:d1:00:2c:34:d2:ff:cf:3d:ec:57:85:89:22:ac:
ba:97:bb:51:13:83:4c:73:a2:f0:ec:0d:b0:ec:c8:
2e:0f:6b:8a:bc:a1:2c:43:cd:0a:f6:33:78:a4:ee:
77:79:7d:5a:9f:91:84:e0:a2:5d:b4:3c:62:8b:0a:
6b:b1:51:6f:df:40:99:1c:5f:36:68:ff:87:03:d0:
11:04:88:1f:5b:95:10:f6:ab:75:24:6b:bf:f7:11:
4a:e5:6a:64:31:d7:be:b1:05:c8:36:87:26:b1:42:
4b:74:fc:b2:86:66:31:af:59:56:5e:07:e6:fa:9d:
18:9f:67:b1:84:92:c6:e2:4c:11:11:d4:f0:48:7e:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:E7:63:6F:48:85:4E:C3:64:D9:1D:80:74:F6:BD:80:B2:B8:12
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:31:11:9c:98:7b:8f:9d:9e:7f:c3:c5:64:f2:f3:c8:dc:8c:
7b:20:00:5d:bc:ed:03:6c:2c:4a:0e:7d:8f:aa:18:e1:e9:c3:
36:44:29:36:a4:29:43:13:ff:c0:6c:d1:e9:e9:17:3e:a7:7e:
44:0b:37:6e:16:36:05:93:94:4f:4f:97:51:db:48:ef:44:05:
f3:7c:55:50:67:10:3e:2e:84:4f:b1:c4:47:10:7e:25:8c:24:
39:6b:e4:51:e6:60:de:96:8f:67:1d:6b:d7:29:3e:96:24:5e:
c2:78:98:2e:cd:ac:d6:a0:ac:7b:a0:57:a2:0e:4a:6e:40:7e:
f7:f6:f9:2a:ca:a5:2c:71:b6:36:a8:d0:16:9c:42:91:1b:0b:
85:d1:32:9c:54:53:ff:98:ad:4b:b8:3a:37:20:66:4b:6e:06:
d3:4c:b8:e8:08:5a:5c:8a:dc:ff:91:5f:35:53:c6:1b:1b:43:
7f:21:ce:b3:fd:bb:0f:8b:87:2f:b5:1a:5d:61:d4:15:24:3f:
b1:d4:da:ea:78:a3:eb:59:e8:60:e7:55:fc:d6:b8:85:fe:a4:
ad:31:8a:57:8c:95:4c:de:0e:ec:45:89:d9:cc:68:76:b9:82:
96:88:34:40:22:8e:3d:40:d2:54:ef:3a:73:8b:0f:47:57:c2:
3e:38:ca:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:08 2025 by rpki-client