Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: rfYlh+Lo83P+ANae2tE6HEyVHMfEergyDjTrGuKnfsQ=
Subject key identifier: 06:46:F2:24:19:81:EE:2F:CD:00:F1:BC:C9:56:16:81:C8:26:69:8A
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 0199FCC6B316CD1378DDAD3E4345E9A31B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0EC1
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: KSbzWwdNCI67apbJUTQgMTXL6kup/WyKkZ9jbovLlGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b3:16:cd:13:78:dd:ad:3e:43:45:e9:a3:1b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=0646f2241981ee2fcd00f1bcc9561681c826698a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:a5:bd:b6:df:1c:43:fd:8f:1d:6d:ed:87:
82:b7:0d:62:dd:56:63:8b:7c:0f:35:5a:58:87:4a:
d1:87:d8:6c:b3:d6:95:ef:d7:f1:6b:91:10:66:18:
2d:b6:a7:c4:c8:ff:e4:cb:46:e3:31:1d:0d:ab:18:
d4:2c:f4:9b:71:f5:07:e9:27:4a:81:46:3e:b5:12:
5e:30:09:a4:62:ec:19:80:ad:85:ad:08:fb:16:1e:
81:3c:b6:c5:5d:0e:90:a0:fb:63:a4:f6:16:6a:7b:
96:b7:c1:2b:59:19:65:12:bb:85:56:82:80:50:37:
74:d1:18:1b:03:7b:54:18:06:a8:bb:83:dd:06:cf:
cf:42:ef:9c:2f:62:90:a3:7a:6f:53:c1:6a:06:cb:
c9:60:d8:8b:aa:e4:1f:db:62:e7:ea:39:20:1f:e7:
06:42:ca:fa:7b:6e:24:b2:ea:e0:34:c8:2c:32:a1:
b8:8e:af:44:aa:45:f9:93:4d:1b:20:a6:c5:bc:4b:
1d:40:2e:96:a2:7d:ef:07:b1:43:e3:a6:b4:e2:4e:
b5:e2:a0:48:26:53:d9:1e:99:79:91:bd:7c:3f:ed:
de:58:22:49:44:52:a7:e1:1c:49:ed:64:b2:76:54:
c3:8e:90:d9:5d:2e:62:7a:db:bf:15:8f:87:dc:60:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:46:F2:24:19:81:EE:2F:CD:00:F1:BC:C9:56:16:81:C8:26:69:8A
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:af:dd:d4:d3:04:64:eb:05:36:bd:6b:97:da:41:e8:91:9a:
ed:a4:ef:bf:eb:dc:2a:91:28:48:95:a9:76:7f:13:28:b2:54:
9c:b8:71:fc:54:7f:59:84:d6:16:16:36:32:24:1e:98:c2:d0:
29:4d:5e:ec:3a:7e:32:24:5b:68:29:31:91:39:0c:10:6d:7a:
70:7b:40:fa:d4:f0:ae:00:5c:0d:68:c0:72:59:48:11:43:d1:
a8:04:9f:bc:c4:9b:5d:2b:33:89:03:4f:8d:a6:ea:35:04:40:
15:3f:1b:82:09:5b:12:b1:c9:72:c0:cc:f6:bf:0e:47:dd:4a:
95:5b:00:67:b2:a1:c1:3d:10:b5:6e:7b:24:bd:c5:3e:47:f2:
4e:e6:2e:a5:13:1b:c2:76:8e:b2:81:3b:11:53:38:fe:55:97:
34:e0:b0:41:c4:94:69:0a:2a:ea:8f:1f:92:52:8e:36:8b:0e:
77:72:22:37:fc:b8:8a:87:21:36:f6:e8:4a:7f:3a:58:2f:1e:
f9:a7:b8:87:8f:a7:f6:88:11:05:d5:08:6b:c2:b2:5e:07:33:
6e:e8:fb:c0:75:c4:2a:bc:2e:17:08:49:12:a7:a5:32:1a:c9:
7b:cc:16:b4:13:94:05:83:78:7c:78:cb:54:f9:a7:da:05:d8:
2a:d3:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:12 2025 by rpki-client