Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: kXQh5CsoC7Co5VAoU9vdkj+r51/nig7LOAMCMf7FZp4=
Subject key identifier: DB:80:EE:0E:9A:2A:4E:63:72:EC:7B:A2:EA:F9:17:1F:CB:C5:BB:C8
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 0199FBEAB657B384876F9631DA47725034E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: giwA5cDuvTz1H5sxCLBH21qHAvH+vwrPyZUdk3Yadus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b6:57:b3:84:87:6f:96:31:da:47:72:50:34:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=db80ee0e9a2a4e6372ec7ba2eaf9171fcbc5bbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:c9:9b:5b:20:51:a3:88:7a:d2:1c:eb:6d:
0c:76:58:b4:59:8a:f3:31:ff:4a:59:8c:c4:64:a3:
6c:fb:07:7e:60:83:a7:ec:b9:3f:4a:3a:b9:fd:20:
68:aa:42:cc:f1:f0:6c:8b:2d:9a:89:47:05:f5:41:
f7:66:7e:c1:6d:c8:fa:17:b4:7b:a4:9c:15:f8:63:
b3:13:38:f2:1f:34:f9:ee:32:b4:4e:c0:99:42:67:
8e:4b:fc:4f:24:6e:a5:bf:02:5e:8e:fc:50:67:dc:
7f:9e:dd:f0:65:90:dd:dc:85:72:ec:1f:6a:d9:f0:
5c:73:3d:9a:c5:b4:b2:f6:59:cf:f8:5b:20:57:c3:
3c:b6:3f:b7:16:bd:7d:bf:93:c2:f4:10:be:a4:1c:
d2:ce:0d:ff:99:33:87:90:e7:ac:f0:5a:1a:70:b9:
30:76:1e:da:fa:91:d0:bb:6a:e4:5a:e2:6f:de:d0:
3f:2e:6a:d4:b8:e2:35:e1:79:e3:58:17:85:da:f3:
a4:d5:0b:16:60:b5:49:b0:d1:b8:3a:c1:fe:06:b4:
09:b8:a2:74:79:0a:20:bf:4c:30:ec:6c:48:2b:25:
05:d4:9b:6a:c5:fe:e2:d4:c8:7b:1d:04:a5:68:f5:
5a:2a:a2:48:a0:51:8d:10:69:76:be:6a:34:6e:3c:
d5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:80:EE:0E:9A:2A:4E:63:72:EC:7B:A2:EA:F9:17:1F:CB:C5:BB:C8
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0b:21:d8:6f:27:c6:3a:54:d1:95:5b:cf:bd:5b:35:68:de:
e2:df:01:c6:55:3b:77:b3:a5:03:69:0f:f6:94:01:e1:f8:5e:
25:9d:27:8e:de:17:33:b6:3d:5d:82:1a:bd:e9:19:ec:c5:0f:
66:8a:a7:60:12:7b:6c:a9:b4:3b:95:d1:c5:fc:94:81:2d:c3:
83:63:fa:5b:98:8b:4c:45:1c:6e:64:af:e1:6e:48:92:54:d0:
c5:72:98:3b:f3:78:67:e4:58:df:63:36:b8:fb:2c:52:c3:b3:
5e:4c:d3:5e:a8:e6:88:a2:07:1e:78:2a:e3:52:6c:45:eb:04:
79:14:7e:ef:a4:04:a3:09:b8:3b:1e:46:47:92:a5:65:e9:ce:
c1:5e:c2:a9:23:67:a7:2f:de:57:4f:39:b0:76:48:9b:6c:d6:
ce:38:46:2b:2c:8d:ab:07:fa:8e:fa:bd:22:9f:03:8f:8b:29:
80:66:d9:d3:13:81:cf:f9:ea:32:26:98:11:af:a4:c2:a8:52:
f1:41:36:ae:ea:d0:33:5c:5c:8e:ac:8b:7f:31:ae:4a:1c:08:
1d:0c:8f:42:4a:b4:bd:9e:f3:08:6b:86:40:a2:48:a4:f7:c3:
db:ca:fd:91:8b:63:6a:19:90:34:e2:69:b3:ab:25:b5:88:f1:
28:9c:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:14 2025 by rpki-client