Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: QTSelrP85q8UF8ZPuuTHFQ9vdf2SdPe2GoW1qSyiXM4=
Subject key identifier: 67:EC:27:F6:50:9F:47:7D:10:72:F3:5D:47:00:23:0B:D2:ED:C5:B4
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 0199FEEBB330D30910F942092480172AEBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 0739
Signing time: Mon 20 Oct 2025 00:01:23 +0000
Manifest this update: Mon 20 Oct 2025 00:01:23 +0000
Manifest next update: Tue 21 Oct 2025 00:01:23 +0000
Files and hashes: 1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: 2n+4LgVGsoyWHJGYgsmUd7pGJpzyUOXnIJcrTjqz+X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b3:30:d3:09:10:f9:42:09:24:80:17:2a:eb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Oct 20 00:01:23 2025 GMT
Not After : Oct 21 00:01:23 2025 GMT
Subject: CN=67ec27f6509f477d1072f35d4700230bd2edc5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:91:5f:eb:1b:09:b0:e9:5c:21:0a:16:33:
5f:13:d1:9b:4e:3c:d0:22:7d:6a:c0:24:e8:e3:47:
a0:0b:3a:a0:5b:09:de:24:cb:46:bc:41:58:db:94:
f1:b0:d6:3a:c7:09:49:7a:21:56:b5:25:de:55:62:
db:98:6b:39:a6:62:36:2f:9d:05:6c:c7:fa:49:15:
3d:21:b9:ac:70:ef:f0:60:cd:11:a7:13:82:6c:16:
ad:33:68:2b:db:05:87:95:9b:6b:63:14:c6:bd:26:
f3:8d:99:ab:5e:cb:7d:df:00:25:78:48:cf:6f:a1:
c8:99:72:4b:2f:08:7f:aa:78:40:06:e3:e7:9c:7d:
22:26:9f:48:ac:63:30:f9:40:45:9f:84:f9:83:a8:
34:4a:6d:27:8b:84:22:2b:f8:9a:7b:e0:27:6c:1d:
91:52:77:5d:03:f4:5b:79:59:af:39:f2:59:fb:8c:
64:fa:a6:44:38:82:31:59:5d:19:78:24:08:15:4a:
6b:03:6a:16:0f:43:05:ae:3c:49:b6:03:d9:a9:45:
7a:26:45:fa:52:af:e5:8e:a1:a7:25:9a:15:24:8f:
a2:13:a2:60:5e:fc:02:ce:18:b3:99:89:32:18:c5:
51:b6:5d:1f:33:9c:53:dd:ec:56:96:9d:d0:2e:e6:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EC:27:F6:50:9F:47:7D:10:72:F3:5D:47:00:23:0B:D2:ED:C5:B4
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:13:31:73:8f:44:67:ec:ac:c1:3f:b5:55:1f:a9:a7:51:89:
f1:7b:5b:e7:df:5a:5b:01:74:c2:ae:48:71:02:5a:1d:b8:60:
f6:89:22:c2:b6:bb:76:7b:5d:fb:20:de:21:fb:e4:d0:c2:d8:
23:9e:e6:f6:7a:58:f4:96:90:8f:7b:5d:57:5e:0d:61:4e:d2:
96:13:27:7a:21:2e:ad:9c:a3:f5:ec:cd:30:56:50:d2:61:fc:
89:ef:2b:e9:e9:56:41:34:83:9a:fb:23:d4:8c:0c:de:b9:7f:
48:6d:4b:31:2e:73:cf:6f:4a:3e:66:74:f0:59:34:f8:ba:2c:
18:a4:1c:9f:b7:7f:23:a0:e4:ec:70:b4:52:4d:42:14:ba:12:
26:9b:c5:44:69:fc:88:d2:dc:16:ad:a7:04:72:ca:53:f1:24:
6a:d9:28:fc:7a:a1:d2:61:5b:95:83:57:36:a0:88:0b:7a:3a:
84:74:33:f1:e4:4f:73:49:31:37:1e:26:73:b2:e5:c0:d1:c1:
b3:7b:5b:99:9e:ea:ae:5e:83:87:17:60:78:2e:83:30:e1:12:
ef:fa:a2:ac:1c:e5:b4:88:29:9f:71:a7:af:33:7a:e2:95:ec:
d4:05:1c:6d:43:ce:fd:55:a1:71:1f:9a:58:e7:38:f0:ad:f2:
c4:45:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:17 2025 by rpki-client