Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: MlLKYh2T3Yv7ENIQjxkKwC71KC/UUw9CrffyR83UK34=
Subject key identifier: 65:15:9E:21:1C:04:A5:ED:C0:B7:9E:06:41:2D:5D:DE:A7:CA:67:F8
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 0199FEB4E0FF91F2CE940762F74857C71CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 1408
Signing time: Sun 19 Oct 2025 23:01:30 +0000
Manifest this update: Sun 19 Oct 2025 23:01:30 +0000
Manifest next update: Mon 20 Oct 2025 23:01:30 +0000
Files and hashes: 1: BIbyN6MobH1STyCEPdXKcXxO-0I.roa (hash: Os4l0m9oxr0hmnuszsL7ZwnRaiayTTQWv9r3AFurnXg=)
2: Bbz0bBQb7OvBUdzdUU2fR0aTHW0.roa (hash: oXnG95uJE4GWCusPMitN/8TOoOTM8j2qb4pX4QMQ5u0=)
3: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (hash: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=)
4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: L0NE/ROVvAuPr2lGE3hqY3v1/KdfMo8q8kecDxbsGOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:e0:ff:91:f2:ce:94:07:62:f7:48:57:c7:1c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Oct 19 23:01:30 2025 GMT
Not After : Oct 20 23:01:30 2025 GMT
Subject: CN=65159e211c04a5edc0b79e06412d5ddea7ca67f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:11:ed:a6:2a:97:9d:f7:6e:87:85:42:52:
01:e6:0e:62:31:76:2b:dc:b0:bd:fa:b2:10:9f:53:
60:27:32:5c:47:18:bf:f3:93:ba:ff:d5:8c:2c:1c:
bc:07:11:f9:d4:06:3e:6c:ac:68:34:21:d9:10:71:
00:13:e7:75:75:7a:a4:74:9a:ff:84:93:90:e8:d1:
26:dc:d4:ab:1f:c2:f5:20:ae:84:f4:f4:94:b6:a5:
c2:fe:f1:b3:3f:6b:9f:c7:3b:06:f1:1e:46:c1:c6:
f6:1c:9e:05:93:3a:9a:99:95:64:43:a6:ef:17:43:
ee:ae:22:50:f4:41:b9:f8:11:3b:96:dc:80:d3:53:
69:f2:c0:7a:5a:9c:50:7e:3c:08:53:89:6f:a6:af:
e3:a2:5c:19:42:c6:72:e8:59:9a:b0:4c:8c:4a:3a:
97:26:f2:05:71:5c:ff:bb:a2:ac:59:ef:56:ea:14:
bb:c3:bf:7f:bc:71:54:2a:5b:1f:35:66:ab:2a:5a:
b8:4c:ec:b1:bc:97:12:f6:2e:4f:13:48:e5:b0:dc:
b8:09:65:ab:dd:1b:6c:2e:db:63:d2:9d:92:6e:12:
09:e8:b9:7a:25:84:55:98:c6:b1:ec:5f:6e:a8:06:
5e:4a:ca:68:8f:35:d0:b8:81:fa:79:00:d0:10:1d:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:9E:21:1C:04:A5:ED:C0:B7:9E:06:41:2D:5D:DE:A7:CA:67:F8
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:74:96:84:1f:8a:87:a1:44:63:c9:df:56:69:df:06:b2:5f:
14:97:6c:02:6d:f8:7b:05:72:b8:bc:ba:1a:bc:ce:2e:ac:91:
87:cc:bf:70:3e:a2:f5:ea:cf:97:85:ba:9f:58:56:17:b3:dd:
a5:6f:a5:00:7e:ce:f2:ca:1d:42:09:b1:c2:d7:db:13:92:6e:
43:77:c4:19:e4:51:f8:ec:c1:9c:ff:b8:04:7a:36:98:6f:d5:
9a:6b:e2:10:b4:ef:79:43:30:88:33:a8:fb:78:4c:e2:a6:0d:
02:32:b0:51:8a:af:8a:cc:e4:dd:0c:38:9c:33:0a:89:04:64:
91:25:f0:a4:d3:83:5e:98:f1:f6:2d:30:b0:81:7f:f5:9e:5a:
27:3a:a4:39:db:8e:9c:c6:33:72:20:54:97:f4:b4:64:2a:45:
90:00:a0:d0:40:7a:13:d8:71:6c:a2:d3:45:0e:80:a2:96:f8:
78:43:5e:88:7b:f8:a0:05:16:94:ce:6a:1d:42:da:0f:f8:83:
97:87:0e:a9:94:2c:1c:c7:c0:6c:3b:cc:9b:d2:11:23:29:8e:
45:95:98:9f:07:c2:13:17:c9:c9:59:19:2b:8b:f3:dd:4f:56:
1d:1d:91:0b:aa:28:39:2e:86:7e:70:90:44:6d:85:67:6b:5e:
cb:0e:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:28:50 2025 by rpki-client