Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: 67ELqTd++QtvwcQxjOf6BE5wdBDLsV8h78ov2ub31Gg=
Subject key identifier: 2A:FC:67:DC:BA:94:B0:DD:F2:59:C4:C1:D7:16:F7:8B:BB:DC:2A:89
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 0199FCFD47C6C66723E3F248D66882EF823B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: mVcdn5sBVQUhA01ww+oolggGMLvC+IVExAWAxTU6VjI=)
3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=)
4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=)
6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:47:c6:c6:67:23:e3:f2:48:d6:68:82:ef:82:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=2afc67dcba94b0ddf259c4c1d716f78bbbdc2a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:ef:7d:f6:fe:17:62:db:17:08:59:48:1f:
d9:49:fa:83:e2:af:52:9f:dc:35:a5:15:19:5a:7a:
5a:bf:0e:b4:0d:eb:b4:73:80:81:08:19:b3:f4:d2:
7a:9f:51:c8:57:d1:8d:21:fa:f6:91:f2:8b:bf:2c:
1c:b9:df:df:41:94:dd:97:1c:d4:19:07:d6:7c:c5:
93:f2:74:c9:10:96:b0:d3:fa:12:29:d0:c3:d0:b8:
aa:8f:54:c8:63:0a:e5:e7:50:7e:46:b5:7d:f3:f0:
c9:05:d4:fc:cd:85:6a:bf:f4:b0:08:96:35:dc:db:
de:e2:93:fc:10:85:63:8f:b1:ce:53:c0:2b:a3:68:
0d:ae:05:3b:f7:fa:89:e0:1d:1f:bb:ed:8e:c0:55:
e8:26:09:56:de:57:d8:92:82:d4:81:82:8d:d9:2a:
e4:9d:97:8b:da:82:8f:a2:58:10:19:b3:fa:24:9a:
20:d1:72:8d:74:2a:e5:6d:3e:92:f8:20:c3:36:1e:
b7:b7:c2:12:ca:78:52:bd:4e:f2:a7:3c:d8:e3:62:
8b:3c:21:04:be:cf:24:4a:75:6d:ae:84:d2:ef:30:
da:4c:51:0c:56:a6:4b:19:61:a0:77:9c:61:f5:22:
d8:41:bb:94:55:f8:61:80:07:90:88:01:79:8c:ec:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FC:67:DC:BA:94:B0:DD:F2:59:C4:C1:D7:16:F7:8B:BB:DC:2A:89
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:74:50:5c:09:8e:4a:4c:52:88:25:28:df:54:13:25:ba:d5:
ac:45:06:d8:37:d6:f7:cd:10:09:f1:f4:1f:60:cb:20:20:46:
22:35:20:00:d3:cb:c6:95:c8:e1:13:04:4e:9d:69:b4:4e:f9:
cb:69:0f:a1:15:31:69:54:60:c4:67:28:01:40:ff:cf:cc:1a:
08:4d:a1:e1:50:f1:94:c8:16:6f:6c:80:a3:30:96:76:69:a6:
a9:6c:06:f6:63:78:97:da:eb:e4:69:9e:8c:7a:c7:ac:ab:2d:
ad:d1:69:0c:31:90:6f:5c:39:47:b1:9b:49:ec:1b:5d:69:19:
87:37:53:ea:c2:35:5e:69:05:68:01:86:bd:65:3b:d7:4f:b8:
1d:a0:f9:f5:70:1c:de:71:2c:78:a9:ff:03:8b:b7:27:46:f2:
1c:46:bf:22:a3:3b:44:05:9b:b8:77:49:9c:1e:fc:4d:96:8a:
4f:5c:b1:99:5c:06:bd:f5:42:46:50:7b:44:eb:f5:68:b2:6d:
21:6c:c4:dc:f5:47:f7:48:52:cc:95:66:81:b1:3a:93:0e:e7:
b9:52:4f:26:4d:e3:96:46:d8:b1:24:74:eb:61:a2:4b:af:9d:
be:3a:ef:6a:e3:59:cd:de:f4:06:02:54:20:4a:a2:24:22:89:
60:dd:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:43 2025 by rpki-client