Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: vPiMi54IKorgO42XjIhVFC2LFtRkBYlu43DFH8w3m0w=
Subject key identifier: 2D:2F:A0:45:7F:E1:44:95:F7:85:C3:6F:57:D5:35:81:EE:CB:DC:99
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 0199FC8F8D06338CC857FBD4E16BC984E1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: cFpUWgwE7QCnq+T8CCnfnleBqUNvARE4LA7bQ/d+3GY=)
2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=)
3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=)
4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8d:06:33:8c:c8:57:fb:d4:e1:6b:c9:84:e1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=2d2fa0457fe14495f785c36f57d53581eecbdc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c5:e3:e6:b7:9a:f0:f6:13:d3:9a:53:3b:13:
b9:fb:d9:72:b7:0b:a6:06:dc:5e:2f:c4:42:e8:16:
9c:79:8d:38:41:16:e4:4e:34:ec:bf:99:41:ac:29:
65:ac:d8:5d:7d:80:66:eb:2e:31:8e:90:12:2c:b7:
48:36:fe:ce:81:17:32:1c:cb:24:2c:f3:f2:59:03:
96:80:a9:97:78:e4:09:18:47:f3:55:54:ef:11:3c:
45:63:a1:53:c2:2f:06:45:75:82:74:96:1b:50:b4:
29:d5:42:2b:c7:13:33:09:30:11:cc:cb:8b:f2:f6:
03:18:a2:00:fe:86:5b:d2:a5:6d:79:05:d5:a9:2b:
2b:54:ff:63:5d:1b:fd:39:ea:e7:61:af:a0:3d:6c:
42:61:3f:c8:e3:2a:ef:ca:4a:51:56:d8:4b:a9:06:
1c:5c:39:da:04:cd:48:7f:c6:0d:9d:46:2b:32:9c:
71:2f:74:77:8a:ed:8b:53:43:e8:57:ac:60:96:0d:
20:44:03:9d:5f:38:4e:4b:2c:7c:b4:2c:4d:1d:42:
99:b7:04:40:08:4d:57:13:a3:64:ee:0f:55:0b:ed:
f7:bb:94:6c:2a:0d:91:53:10:b1:6e:1e:cb:dd:55:
76:5f:e8:fe:b8:43:46:31:9a:6a:dc:73:5f:6e:29:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:A0:45:7F:E1:44:95:F7:85:C3:6F:57:D5:35:81:EE:CB:DC:99
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fe:9e:31:95:2f:8f:25:c3:1b:49:8e:c2:e4:d8:f0:f1:cf:
8e:e0:fd:31:77:b2:bf:e4:b7:dd:dc:31:63:23:5a:b3:a1:55:
17:3a:34:cb:df:5d:78:be:09:9b:fd:e8:f8:b7:40:09:8d:db:
ba:24:3e:34:63:5b:1f:23:47:a2:48:f3:4f:c9:ec:b7:b8:be:
b8:19:1e:ee:b9:dc:d7:c8:60:8a:f9:10:8c:97:88:71:2e:e4:
8a:d0:53:5b:fa:cd:f3:db:f7:c6:f5:ff:98:41:64:3e:dd:ff:
4a:d2:1e:41:75:e7:1b:44:52:16:2b:06:3c:0c:88:9d:a8:c5:
36:dc:d1:01:94:d1:e0:47:89:a9:f6:29:20:fc:79:41:6d:d4:
bc:ac:8f:5c:8e:fe:36:d0:c0:79:3f:14:21:32:99:dd:47:f9:
2f:1f:1d:05:ad:31:19:bd:ac:c9:86:9d:1b:d5:0e:3b:28:52:
b2:50:05:de:c6:e3:58:48:5b:b9:9b:e5:c0:46:b4:9f:a6:e0:
64:c9:b2:cb:36:fc:5d:b0:8f:1c:ad:16:9d:bc:75:0a:ce:67:
05:20:11:21:b9:a2:48:26:f4:72:15:24:84:24:11:e2:73:ec:
56:9e:e8:57:c3:c3:45:1a:d0:46:8f:bb:af:33:be:40:59:46:
77:4e:67:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:36 2025 by rpki-client