Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: 5VBT1kwBz3VEd2SDAoYn+UkHSosl9ZNlFHGgMKcGtio=
Subject key identifier: 90:83:9D:1B:9E:65:A1:6C:CC:DA:23:3B:55:04:E0:C0:5B:27:38:14
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 0199FC8F44BB6E74024F73D60B72115BFE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0DB1
Signing time: Sun 19 Oct 2025 13:01:11 +0000
Manifest this update: Sun 19 Oct 2025 13:01:11 +0000
Manifest next update: Mon 20 Oct 2025 13:01:11 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: k6ay3ug1mQMr4oaW2XjBMSnFaJjmizK7z9zX+KO0LW4=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:44:bb:6e:74:02:4f:73:d6:0b:72:11:5b:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Oct 19 13:01:11 2025 GMT
Not After : Oct 20 13:01:11 2025 GMT
Subject: CN=90839d1b9e65a16cccda233b5504e0c05b273814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:dd:3a:72:ee:28:c3:8b:64:05:19:ae:3a:
88:6a:fd:e1:43:ab:d6:22:52:9c:b5:8c:03:65:c8:
c1:23:9f:8c:0a:a1:eb:8d:1b:3d:a8:04:01:af:b0:
6c:47:06:bc:7b:77:90:ee:f9:7b:ac:7e:94:af:05:
68:43:aa:01:31:43:7a:95:7b:4d:65:0d:e2:b8:56:
a9:21:75:8f:b3:d3:16:35:57:22:94:f4:84:f8:9a:
a8:45:0c:d9:c8:ad:af:e8:59:24:da:9d:d8:91:a3:
3f:46:49:27:9c:03:fb:7c:4f:f3:97:7e:31:02:30:
1f:be:81:fe:2d:d3:98:ba:b5:c7:15:d8:22:c8:d0:
1c:5b:8f:23:87:74:96:55:a1:de:91:4e:58:c0:ea:
e1:91:73:b5:fd:33:9a:a5:5c:eb:26:1f:7d:53:8c:
31:85:34:cc:b6:c1:66:c0:3b:4d:88:1a:a5:55:20:
99:0c:82:35:39:05:4d:74:59:6c:6f:0f:65:f7:8d:
84:59:6f:7c:49:63:d4:70:1e:1f:da:24:3c:66:04:
a8:5d:53:cf:d0:0a:7b:2a:b7:80:1e:28:89:a4:e6:
f4:7e:97:64:b1:af:91:3d:cb:51:5b:05:78:de:1b:
cb:30:ed:11:a5:6b:12:90:eb:2b:65:57:a2:7b:2e:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:9D:1B:9E:65:A1:6C:CC:DA:23:3B:55:04:E0:C0:5B:27:38:14
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bf:b6:5b:87:be:68:14:6a:0f:35:54:0f:ad:61:ab:04:eb:
f5:56:56:49:75:09:64:13:76:aa:4c:b2:c5:a9:3d:93:e1:af:
0f:cc:a7:c2:03:b1:b6:cd:a4:60:6f:d8:6c:28:be:9a:25:ce:
0d:c0:f2:31:6a:1d:f7:4f:31:55:02:0c:c9:78:75:8e:19:e1:
30:14:62:b8:e7:a5:43:a3:e2:ed:7a:95:75:5c:53:4d:eb:4f:
b4:4a:50:42:50:2d:01:11:81:6c:28:1f:99:fa:cd:51:f4:3c:
8c:61:23:f1:b3:6a:a5:87:f5:64:47:c9:07:5c:e1:b3:0a:82:
95:c5:81:fb:43:08:e3:03:f9:d0:4a:c7:e6:28:ea:87:67:14:
65:59:f0:0b:5e:cd:00:2f:65:08:d0:f6:22:71:f5:e6:f6:a1:
f1:e9:03:b0:fd:34:dd:4b:87:ad:da:b8:8f:ae:e2:14:c7:b1:
53:30:81:3a:e5:97:97:65:0d:d4:fe:fe:ef:97:91:61:ab:38:
62:63:2a:a8:b4:9a:40:93:d7:87:b6:1c:90:8c:da:1e:f2:63:
4e:71:1a:09:81:52:77:7b:65:9b:fb:54:44:1c:26:f1:a8:07:
c3:1c:74:5c:95:8b:94:ff:47:9f:6d:77:59:f7:60:26:c5:34:
50:c9:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:10 2025 by rpki-client