Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: 8+UJ0ZOXgeB/eXgeGTnR95FxHR4a0LJCOuPrL6gT0j4=
Subject key identifier: 64:59:1C:CF:A8:E5:18:E0:D7:80:55:27:79:E3:7B:13:5E:8B:66:20
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 0199FDDA2FDBE5950072ED3978BA251D0C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:38 +0000
Manifest this update: Sun 19 Oct 2025 19:02:38 +0000
Manifest next update: Mon 20 Oct 2025 19:02:38 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: wADorp8yi96iTxatgRgyqeFO6GCYSO6kZLx3Nh5do9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:2f:db:e5:95:00:72:ed:39:78:ba:25:1d:0c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Oct 19 19:02:38 2025 GMT
Not After : Oct 20 19:02:38 2025 GMT
Subject: CN=64591ccfa8e518e0d780552779e37b135e8b6620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:08:4d:31:c3:01:9c:c4:e8:5c:cb:e0:a4:
4a:29:ea:31:58:dd:4d:28:07:db:10:8f:75:7c:8a:
9e:76:28:1d:46:c4:a6:7b:9e:bb:9c:3a:a3:11:ef:
fc:86:82:c0:fd:fc:54:ad:49:aa:5f:3e:96:4a:02:
9f:90:cf:29:22:20:d2:38:d5:87:bc:17:d7:50:45:
de:d2:62:8a:65:92:92:c9:9b:05:17:04:4a:05:f7:
d9:4e:93:11:7d:8e:6a:91:68:94:f2:4b:4a:7a:9f:
55:a8:4c:8f:10:9d:75:03:9d:cf:91:24:0a:d8:73:
98:37:b3:04:b5:1b:56:28:1d:8c:33:1e:27:86:7e:
21:f5:0a:dd:c1:d5:d2:dc:01:50:c2:76:17:1a:de:
a4:0a:46:d9:4e:37:90:51:4a:4f:58:6c:2e:d8:34:
83:a9:ad:57:60:56:a8:39:0c:18:55:5e:b7:c4:6e:
8d:bf:0e:a3:94:0d:ff:dc:8f:05:2b:18:1d:ed:b0:
72:28:d3:9c:6e:46:03:d9:54:7b:7e:b1:fd:4b:63:
64:01:d1:25:57:44:55:b7:57:26:7e:d8:17:b0:92:
7d:ac:42:28:4b:04:b5:8a:93:07:64:09:08:10:60:
27:ff:39:3f:b9:6c:b1:a9:22:93:18:80:bb:2d:e9:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:59:1C:CF:A8:E5:18:E0:D7:80:55:27:79:E3:7B:13:5E:8B:66:20
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f9:7e:63:3a:58:d4:ee:59:68:60:83:00:38:ff:a1:a5:97:
ce:45:ea:ac:d6:9f:aa:01:87:82:2d:fd:7b:5e:78:b8:e4:cf:
9f:96:16:5a:bf:77:38:b6:60:1c:e0:a4:4f:99:ea:f2:61:e8:
8e:f9:3d:14:5e:cd:bf:36:45:60:1b:9f:03:71:ef:c3:25:cd:
78:5c:04:4f:75:e1:bf:23:5b:81:7b:aa:2f:c5:31:13:d4:9f:
bf:56:7c:2d:49:d5:b5:59:57:40:cd:4f:41:ec:2e:b3:d0:c7:
87:70:93:b9:51:51:0a:5d:d7:44:30:2e:e3:f6:92:78:a9:10:
3d:72:23:36:7b:d9:82:85:bc:f3:e8:da:c8:23:3d:3d:0e:1e:
00:58:e0:6f:a1:89:b1:2a:5d:33:3e:b3:8b:4f:37:d1:ee:d5:
81:8d:37:a7:d2:10:47:a1:75:1f:72:04:1a:7b:3f:86:6b:c0:
a3:7f:3e:f4:8d:7f:42:0b:29:cc:c0:60:56:24:b9:51:ce:d6:
2a:69:59:27:70:ac:84:e3:fd:d9:ab:9c:01:33:f5:01:9d:9f:
b7:0b:5e:65:12:0d:c7:93:bf:02:f1:49:23:38:2c:03:01:2c:
44:85:7e:1c:85:12:a8:99:fd:89:ee:76:e5:fb:bf:2d:04:92:
a6:b7:e7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:10 2025 by rpki-client