Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File: i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier: PpkxqrrmzLxoDnho8ZuqJGzJ/E1xGqaQ64lVpPfej1o=
Subject key identifier: DA:AE:9B:CD:CE:F2:0F:E9:E2:1F:5D:04:F2:C0:75:D9:CA:FF:39:79
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial: 0199FAD7A213EDBA4D0C5D67E54BEDC9C73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number: 0157
Signing time: Sun 19 Oct 2025 05:00:59 +0000
Manifest this update: Sun 19 Oct 2025 05:00:59 +0000
Manifest next update: Mon 20 Oct 2025 05:00:59 +0000
Files and hashes: 1: Dm667XnaRqtK2i3UfsThVeXTWc4.roa (hash: 8yEFF1MNlsRKs74/fi+3dMb5d+dLJ3drU0IwlTP+fus=)
2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: EEQiGDlcKWH6XPsZketwRL2J65s2iiMmN3yNP9PMDzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a2:13:ed:ba:4d:0c:5d:67:e5:4b:ed:c9:c7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Validity
Not Before: Oct 19 05:00:59 2025 GMT
Not After : Oct 20 05:00:59 2025 GMT
Subject: CN=daae9bcdcef20fe9e21f5d04f2c075d9caff3979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:dc:61:52:65:82:9d:ee:f7:07:22:31:4b:
8f:e3:fe:01:22:7c:ac:b9:ff:3a:66:44:e7:b5:39:
0e:e8:4d:ab:23:98:32:87:38:84:ad:ab:9c:1c:f9:
f3:91:68:de:20:74:02:b9:ca:64:21:d9:bf:fe:b3:
e7:06:6b:57:fe:eb:47:d2:a9:7c:96:e2:cf:67:cc:
90:53:43:0d:48:65:0a:d4:fe:5c:71:e7:fc:43:12:
b6:f3:26:31:9e:98:48:26:03:7a:1a:6c:b9:d0:84:
01:ef:91:47:d5:2c:7b:0f:50:e6:f5:c7:11:b3:56:
18:15:c9:fb:9c:6e:bd:ff:8e:c7:1c:1c:3c:9d:48:
b9:f8:5c:bd:42:8c:21:63:2e:e1:60:48:23:c6:c5:
e4:57:d9:c6:7b:f3:ec:62:f1:fd:22:d9:0c:7f:cf:
da:0c:dc:c1:cb:31:a2:40:c0:0b:c7:4c:8c:50:04:
8f:07:e9:57:6e:3c:2c:03:52:47:1d:bc:3e:31:2d:
8c:49:9b:10:fc:8c:5c:c6:68:3a:8a:56:5b:dd:2f:
95:56:ad:76:44:00:b3:ae:56:f1:9f:d9:de:04:03:
15:b3:b2:da:f4:ac:68:ef:25:a2:65:96:af:06:0f:
6a:a4:fe:5a:95:fa:08:c6:c6:5d:2e:8a:22:cb:41:
73:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:9B:CD:CE:F2:0F:E9:E2:1F:5D:04:F2:C0:75:D9:CA:FF:39:79
X509v3 Authority Key Identifier:
keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b3:65:9c:4b:19:ca:87:83:d6:fa:37:d9:58:75:c2:80:a5:
6e:f5:cb:af:41:f8:8d:3b:3f:5c:07:e2:5c:1e:eb:7d:7b:e5:
f9:3a:a8:19:37:b7:fe:d6:3d:4d:99:7e:d9:46:f6:09:3c:bc:
cd:70:91:3d:03:79:9d:ce:63:78:77:94:ec:71:9e:95:69:76:
30:f8:8a:77:eb:4d:61:fd:b9:7c:6f:8f:1d:05:1f:ff:7b:a9:
04:55:03:74:84:f7:42:13:0e:f6:25:a6:6d:24:21:28:ee:44:
52:e1:7d:f2:be:47:f3:e2:da:11:77:df:66:2a:fc:42:f7:e7:
c4:f7:c8:37:0f:ee:40:94:f3:0d:eb:46:85:7d:fd:1e:1b:86:
a9:7e:90:9c:bb:c4:e8:3d:db:15:06:2d:77:92:31:0f:d6:d1:
b2:21:03:75:94:fc:98:0e:18:24:a1:5a:8a:11:4b:57:5d:d4:
a3:69:c0:7a:6b:79:81:6b:45:ba:0b:bc:71:51:f6:61:2e:de:
9d:fe:ca:42:31:fb:5b:94:fb:33:d4:87:2a:36:92:20:fc:49:
3b:02:11:80:37:51:31:22:ce:a9:95:19:38:cd:72:71:15:e1:
08:59:c2:d7:bb:1b:4a:2c:c0:e3:79:ae:b6:85:77:c1:25:89:
70:af:2f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:01 2025 by rpki-client