Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: YQLhxugkcjAIg5/8SIxXwUXar0slexXiYWqubTLnE/U=
Subject key identifier: BB:44:B5:57:64:5F:4F:D1:69:59:DC:7A:19:3E:DE:22:BD:BB:F0:68
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 0199FC214B5DBEF3D9825FB2EE85BCDB15C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0749
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: R0kpMB4FLa57YlT9gQTxUhUxTi4.roa (hash: v4gil0pPlLS8kPjffYF1yPMZ2JnOTspISeu5FIjRwfg=)
2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: G4NE69tT1hQ4U/wHa/GmcONH5FoCNNcbgSC/QLzNMtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4b:5d:be:f3:d9:82:5f:b2:ee:85:bc:db:15:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=bb44b557645f4fd16959dc7a193ede22bdbbf068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:ef:70:72:bb:a5:b2:8c:dc:07:a2:9e:6a:
02:0b:8d:15:26:28:40:6c:07:1a:51:d4:60:02:39:
b8:22:b7:27:9e:4c:31:3e:6f:cd:f8:b0:92:f9:95:
f1:96:69:60:3e:21:38:52:09:c1:e0:95:3d:a6:bd:
1c:a1:a9:cc:e1:e1:75:5e:97:56:3c:6c:59:01:01:
27:3c:69:23:28:c0:ef:2d:33:42:75:d5:16:83:16:
52:27:a9:22:98:2d:16:42:29:a0:7f:44:bb:50:bd:
42:37:34:48:8d:c4:90:cd:a3:5b:96:4c:8a:ee:43:
a7:a1:2c:09:1d:b5:09:a3:a6:42:87:bf:91:75:e2:
21:53:0a:df:73:df:de:19:35:21:d5:03:68:9b:bc:
97:70:6c:58:fb:cd:be:82:c4:08:78:d2:50:48:d2:
b0:8e:5f:b2:d8:62:a4:2b:85:c2:67:de:0b:3f:8e:
6b:b9:96:78:cf:02:33:5e:ec:b6:ba:67:3d:4c:3e:
78:5d:94:7f:c1:b8:34:5c:78:f3:45:4b:d7:98:94:
b0:f0:93:cf:83:0e:4e:ea:c1:28:bd:03:2b:f2:d6:
c6:99:5b:0a:03:3f:92:c9:d5:36:c0:fa:69:e7:6b:
77:66:3c:97:0e:10:9f:73:44:5d:0b:61:98:8e:ee:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:B5:57:64:5F:4F:D1:69:59:DC:7A:19:3E:DE:22:BD:BB:F0:68
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ef:3a:a4:c2:7e:50:87:7b:ca:53:9c:6b:eb:0e:13:fc:d8:
45:bc:d4:01:68:0f:5f:49:ee:05:4b:eb:5c:d7:b6:1b:af:72:
ad:cd:9d:45:33:18:1d:b0:49:79:bf:53:0a:be:57:8d:f4:2a:
50:ed:da:b2:af:93:d6:d2:91:ed:51:45:34:8d:92:83:04:6c:
53:99:26:79:83:02:83:e2:da:b4:a9:c7:1a:fd:a1:38:14:07:
d0:c8:c1:a3:08:d8:63:2f:9c:51:40:0f:c8:11:16:4f:ff:04:
90:fd:d1:e9:31:71:a6:4b:a3:52:69:20:fc:f6:5d:c7:2a:45:
f6:49:65:6d:9c:f8:d2:46:52:c9:60:9d:13:4d:7f:23:38:a4:
03:4c:6d:9f:a5:6b:7a:4a:af:55:46:b7:1e:90:47:df:bf:74:
4c:09:c4:03:20:ac:5f:85:26:e5:32:21:34:06:d6:3d:53:73:
b3:10:18:1f:f6:2d:9e:5c:a4:58:85:bb:1d:2a:4c:35:15:18:
31:d1:66:5a:4e:35:c9:47:03:4c:29:b0:65:40:79:81:80:74:
4c:92:b7:62:62:00:bd:d7:3b:e8:1d:2c:d4:34:97:8d:3a:62:
26:81:9b:61:4a:dc:eb:f9:26:9e:cb:0a:b8:fe:cc:93:d6:c6:
49:ba:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:57 2025 by rpki-client