Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: l+JHHRDcEx7C/5SLB3D2cBR/6FHwgEIE6wsel3aP9i0=
Subject key identifier: AD:62:FB:00:AF:37:32:6A:87:57:E6:45:47:6D:16:1B:9D:46:47:BB
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 0199FA6A76468B7299095F1695231B48D882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 1E
Signing time: Sun 19 Oct 2025 03:01:45 +0000
Manifest this update: Sun 19 Oct 2025 03:01:45 +0000
Manifest next update: Mon 20 Oct 2025 03:01:45 +0000
Files and hashes: 1: KcL9v8r1ilJRcQB0ccfbEYTCJtg.roa (hash: rlzaxnEOZCErQdw9cvJ2yLX/BKeb6IB9wJmrnWDfV8E=)
2: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: nVo3L8dfwUGH5OKdCU1nHfQ06To9Y2EfVoR8zt93lro=)
3: oLz2eFbmpRFR5A5oj9_IzGOfqTg.roa (hash: K42AQKk/5JQbpER6nQEE4PNnPHJ5tbcZAd8Cz+zivrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:76:46:8b:72:99:09:5f:16:95:23:1b:48:d8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Oct 19 03:01:45 2025 GMT
Not After : Oct 20 03:01:45 2025 GMT
Subject: CN=ad62fb00af37326a8757e645476d161b9d4647bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:24:43:84:01:47:6d:fa:86:59:29:d6:32:
98:16:2d:9a:5a:fa:98:59:55:39:21:1c:1e:ec:53:
1e:7a:a1:78:32:d3:38:97:25:d8:c4:1b:45:f1:f9:
e3:44:4f:84:82:a0:a8:70:08:0e:b3:88:f5:86:6d:
d1:40:62:16:dc:60:da:7f:d9:1a:2e:6b:7b:d9:a4:
d4:cb:97:a1:73:3b:b2:b8:a1:d5:27:d0:7e:ad:a2:
93:ad:65:55:2a:70:14:17:9a:82:ae:90:a4:34:08:
f2:2f:cf:0e:da:47:eb:02:82:f6:19:d4:69:fe:0f:
15:25:85:ca:80:8c:b6:11:ec:d9:31:f9:42:ea:5a:
96:c3:37:a9:26:ce:53:dc:d3:c5:a5:f2:30:a4:3a:
c8:3c:ef:03:16:32:73:1a:5a:be:60:fe:87:18:e4:
12:94:bc:46:22:30:56:5f:b9:ca:ee:1b:30:2b:16:
60:14:c1:d8:ed:7c:95:7d:57:a9:93:c5:a7:8f:bf:
f8:07:d2:b4:f5:53:c5:65:bf:88:01:52:21:a1:f4:
cf:52:60:0b:61:4d:6c:9b:cb:3c:34:cf:52:70:6e:
58:27:f6:3d:fe:ad:74:24:35:07:a8:31:97:dc:93:
8a:dc:f6:33:ed:83:2f:05:e3:0c:48:d8:90:03:c0:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:62:FB:00:AF:37:32:6A:87:57:E6:45:47:6D:16:1B:9D:46:47:BB
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:8f:4f:06:56:5c:90:04:a8:ca:f1:78:93:9a:c0:e5:c1:6d:
95:cb:8c:30:0f:23:d4:06:81:97:03:a9:49:ed:c0:18:e0:f1:
07:56:08:46:44:a3:3b:6c:9c:b0:ad:96:8c:0f:23:da:1d:8f:
0a:13:9d:61:b3:88:d7:f2:f4:d4:64:d4:5d:74:90:fa:dc:ea:
1e:78:27:3f:a6:0e:e4:de:4f:66:0c:c9:55:9a:e3:89:ad:b9:
6f:35:00:5c:e0:55:b8:31:66:e8:5b:3c:ed:7f:b4:04:a0:33:
e8:ac:42:c2:13:7e:f5:e8:c9:6f:13:ea:d4:69:f5:d8:45:48:
19:9e:3d:2d:bf:ac:1d:f7:41:71:63:9f:2a:18:32:f3:a6:32:
a0:7a:40:9e:3c:0e:d7:1a:e4:59:29:f3:d2:a5:69:ea:6f:64:
8a:32:31:0c:2c:1d:47:04:bd:e1:3c:35:58:7d:dc:44:99:43:
a4:d6:c8:e4:d8:57:cb:82:07:14:09:f3:a8:20:67:31:9e:8b:
a9:a8:f6:4e:69:9e:6b:2a:f8:0b:d7:05:db:7d:8f:cd:75:d1:
75:38:37:50:54:8d:d5:b5:ec:3f:ab:63:56:6d:5d:dd:3f:7c:
05:db:08:72:34:99:f4:bf:7a:e5:d5:40:8e:f1:02:eb:2c:90:
60:77:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:40 2025 by rpki-client