Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: CdzBvLyKvlVUTUn9+/RKpuM2ddXF+raiHijBRbF7rwk=
Subject key identifier: 2A:85:B1:C0:D4:A4:9E:7B:C6:8F:82:85:DF:D1:99:28:1F:86:12:64
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 0199FFC873BF036A691D2C0D66A15EB4F1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:02:30 +0000
Manifest this update: Mon 20 Oct 2025 04:02:30 +0000
Manifest next update: Tue 21 Oct 2025 04:02:30 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: CsB8N4a1ieeBjgOFjos1YB7Ap98oeWTBywS1PepFPtY=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:73:bf:03:6a:69:1d:2c:0d:66:a1:5e:b4:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Oct 20 04:02:30 2025 GMT
Not After : Oct 21 04:02:30 2025 GMT
Subject: CN=2a85b1c0d4a49e7bc68f8285dfd199281f861264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:8d:d2:00:40:11:3a:3a:37:55:e5:81:e1:
59:5a:4b:88:59:bd:d2:22:af:69:6c:b2:28:07:ae:
c2:da:83:3b:30:fe:f4:a8:ac:1d:e6:49:de:5f:b1:
b8:e4:79:f3:fe:51:dd:54:b8:3c:90:52:8d:a6:2e:
d0:63:f7:6a:f6:15:c2:ba:77:fc:5c:da:97:65:0f:
a3:07:7b:0a:02:c0:26:2b:ef:1a:8d:21:90:6e:66:
b9:40:2c:96:5b:b1:7a:04:84:da:f4:0e:48:d5:a3:
9a:00:0f:5e:a1:e4:04:b7:a5:2f:7f:f4:b3:d8:d0:
dd:96:bf:6a:08:15:18:f8:0c:48:4d:e0:0d:01:57:
63:c5:12:f6:cc:70:95:cd:09:7c:e4:ec:9e:6d:68:
e9:89:ca:c7:21:c2:50:f2:01:79:e7:a2:08:85:a5:
13:97:43:7f:4e:7a:0b:1c:fd:b7:f5:23:95:2e:42:
5c:85:59:20:43:20:ab:3f:1a:e6:4c:91:d6:60:48:
b1:50:5e:3e:48:91:0e:80:f4:9e:6c:74:81:26:c1:
48:d8:07:73:79:a6:55:77:4b:9a:bb:86:f0:4b:2d:
58:35:17:b6:b7:db:3d:ac:60:31:8b:ce:c8:13:a7:
97:e6:ee:8e:53:7a:c2:7d:fa:10:2a:9f:5c:d9:6d:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:B1:C0:D4:A4:9E:7B:C6:8F:82:85:DF:D1:99:28:1F:86:12:64
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:84:f1:b1:21:a6:dd:81:dd:ba:e6:be:b2:ca:76:2b:58:de:
bd:e7:57:41:ea:a6:32:47:43:7c:be:19:81:1c:1b:40:4f:e8:
0b:8e:8c:23:a6:35:de:b8:b3:71:91:60:0e:0e:32:3b:41:95:
1f:23:20:0b:7f:80:51:ab:ec:c6:f5:7f:a5:24:ab:2e:e8:d0:
ef:90:ef:2b:24:7b:8f:88:b8:6c:75:d7:1f:21:63:29:46:6b:
ac:32:63:6f:f0:ae:ff:b4:a1:24:37:5d:f2:92:43:94:14:88:
fb:a5:73:f8:06:da:ad:95:fe:b8:f6:18:3d:a3:98:46:0e:01:
c4:39:0f:c5:d0:df:a2:81:c7:71:33:73:f2:43:05:57:6c:63:
fb:8e:68:3a:fa:35:9f:7a:4f:23:14:76:6d:16:a5:cc:51:2b:
37:df:07:8f:0f:96:3b:05:f9:4e:c1:2a:86:28:ce:bd:d2:9a:
4b:54:d8:45:31:2b:4c:4a:95:ce:92:00:70:49:cb:f1:a5:85:
5b:54:bd:00:bd:c6:be:94:c2:65:bf:87:07:0d:09:95:8c:44:
73:d5:9a:0b:83:71:2a:54:40:50:47:3b:f1:c2:f7:68:11:f2:
2e:7b:29:5d:a5:69:8f:b1:0c:80:bc:4d:f6:5c:99:5e:2b:97:
3e:28:9b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:41 2025 by rpki-client