Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File: dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier: 2WJWFNfweIeBtkSDyIK5txe8BAT1veb4+Nb/2jT34EQ=
Subject key identifier: 2B:55:2F:A1:11:A6:00:8C:93:D4:C7:AD:02:8F:CA:28:C8:0D:BE:E4
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 0199FCC62B621246F33A20F5C8E7A8B291CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number: 0AAA
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: _yLmchLwIYVTnPdJc9fw9h7BqNI.roa (hash: jQg4aqJLhfqC2o9cWdzjV4aGpmH8JtaZPWEi/oExAo8=)
2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: bBipZ50K9e6VZwfpvhBm2L4QHQg+LUI2TBKJIrD1erc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2b:62:12:46:f3:3a:20:f5:c8:e7:a8:b2:91:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=2b552fa111a6008c93d4c7ad028fca28c80dbee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:61:50:4a:54:61:a8:db:21:7f:2c:eb:65:
0e:3e:a9:9d:c3:f1:18:59:ec:84:fa:1d:a5:c9:c2:
fe:80:bd:87:29:a1:27:59:10:e6:49:c6:fa:2f:ac:
e5:17:1d:e1:82:42:18:c9:49:cc:42:97:32:c6:f2:
6d:9b:07:5e:24:f7:a8:31:ec:fc:02:39:1a:07:f9:
f3:01:b7:61:ae:eb:6e:ee:fb:3f:8b:10:5a:db:f4:
dc:70:c2:d9:d2:03:a2:9c:9e:4c:4f:52:83:4c:7b:
42:56:08:be:54:4a:58:e5:9d:cc:13:02:f1:d5:d8:
ec:62:18:db:2f:f6:2c:08:4c:6c:a4:0f:92:c1:b8:
76:a3:79:33:aa:f2:e9:4f:e2:78:c4:2d:4a:2a:03:
45:13:2e:9f:e7:1e:dc:82:4c:d0:28:b9:e2:6c:b4:
27:f8:ba:bd:df:ef:30:ca:f1:24:80:6f:63:8f:e2:
b0:b3:c5:d7:dd:c6:28:a4:55:40:50:2c:5c:90:7a:
a4:b8:18:a9:d2:a2:ae:3f:cb:71:f7:ba:a4:d4:43:
88:55:6e:99:fc:11:d2:37:14:ed:3d:71:93:58:be:
6d:ac:c1:c1:4e:13:b4:ce:c0:2c:44:d8:49:8b:e1:
3e:38:ca:5e:0d:78:56:26:3e:1d:5a:6e:0f:0b:c2:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:2F:A1:11:A6:00:8C:93:D4:C7:AD:02:8F:CA:28:C8:0D:BE:E4
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:07:1f:2c:4e:64:db:0f:3a:03:e9:62:09:22:03:5a:d2:34:
b7:97:f9:f5:22:5b:98:2f:5f:f5:cf:ea:0e:32:be:af:54:69:
45:cf:62:2e:2a:ad:1b:a0:11:0a:a5:14:dc:f2:f8:1c:1d:a5:
f5:12:6f:e6:a0:45:22:eb:eb:18:ce:56:4e:3e:21:3d:5d:3c:
26:47:b2:42:d8:21:4d:67:c2:fa:08:22:f4:5c:73:37:41:8e:
16:47:72:06:ac:28:23:bd:ef:83:ce:2d:4a:4b:a0:6d:23:b4:
94:a1:9c:2f:11:b5:a8:2c:41:a8:02:f8:4b:aa:a5:e8:2e:e8:
68:f2:f1:08:d1:cd:42:46:90:93:a8:37:5e:b9:75:53:b1:ab:
c5:32:0f:f1:81:5b:33:6b:6e:46:3e:b9:59:9a:fe:6b:fd:54:
8a:63:90:9b:8f:32:f0:44:b8:2b:91:85:2c:99:fe:01:47:3a:
18:52:24:3e:19:89:f4:ce:60:b0:7d:85:f5:30:b3:d8:70:26:
8d:97:9a:5a:d2:b8:44:a8:42:f7:b0:6c:68:c4:e8:cd:aa:87:
60:7e:45:f8:23:74:7b:71:07:23:f2:a3:b0:ca:ae:f7:78:90:
22:43:22:55:7e:49:f6:4e:21:42:cb:86:82:c3:67:ab:2d:94:
7d:5a:bf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:07 2025 by rpki-client