Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: /63jPiZj5pifOso/8xXnZZrEktZFlrRr+6Z4P8OSXyg=
Subject key identifier: EB:D3:F3:4D:5B:D7:CA:78:A3:EC:DF:41:D5:5B:35:6C:87:07:C0:9B
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 0199FBEB5D86E32C15E2540B6AFB51C504DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 0DCB
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: eJyiBabNYMAvO+QtAWxbaILu4njrr2zJXcyvBXb0KCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5d:86:e3:2c:15:e2:54:0b:6a:fb:51:c5:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=ebd3f34d5bd7ca78a3ecdf41d55b356c8707c09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5d:46:f2:eb:4d:7d:f8:d1:63:8b:49:95:dd:
6f:84:19:5b:56:b7:16:cd:40:47:bf:4b:d5:88:96:
cc:a9:a3:a8:3b:0b:a0:c8:1c:fe:f1:bf:95:1e:c7:
cb:58:01:f9:e1:ac:8a:f5:aa:c7:92:ad:a3:a1:b5:
9a:8f:d4:a2:b2:15:1f:19:16:4d:10:f2:90:db:ea:
1f:75:49:03:ee:aa:63:d5:11:fb:19:2f:97:8f:32:
59:8e:99:df:40:5d:9e:71:a2:df:c6:9f:c2:40:05:
ef:dd:44:13:f4:2e:81:f6:31:45:ac:e6:95:ac:3f:
dd:d6:1d:82:f1:0a:9c:c2:47:e3:b4:bf:f1:71:6b:
e5:68:ad:2c:30:98:cb:7a:f1:33:0e:48:d1:2f:03:
54:33:81:21:c1:7c:04:8f:76:4e:24:a3:b5:1e:a9:
fb:32:d2:18:38:df:aa:ec:60:b2:fa:99:12:a1:68:
fe:65:bd:f7:13:91:f1:f0:10:b5:00:2d:ee:0f:99:
bf:da:51:0e:3b:e6:5b:31:5e:37:6c:22:4c:d9:51:
c2:c0:a1:df:c1:53:99:ed:f5:e2:3d:fd:13:0c:a6:
bb:96:f2:d2:c7:70:07:97:5a:ac:bc:3f:16:fb:f8:
cf:6b:6b:bb:4b:91:75:91:e1:cf:1e:98:da:3d:7b:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:F3:4D:5B:D7:CA:78:A3:EC:DF:41:D5:5B:35:6C:87:07:C0:9B
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d1:a2:aa:8e:06:e3:bd:85:45:8b:12:c9:88:7b:af:39:79:
31:6b:9d:5f:b5:84:b7:dd:ed:de:b4:b7:b1:44:06:20:03:8f:
6c:ec:2d:5a:84:a9:9f:4e:6d:0d:ff:ee:18:07:ee:26:ce:27:
a3:ef:55:c7:97:3f:01:9b:55:5e:98:94:05:84:99:fb:70:12:
b0:02:af:e9:d7:71:0d:80:85:f1:30:11:be:82:83:e3:23:f7:
7e:39:16:f4:c7:b9:47:3b:72:0c:92:3a:90:31:5e:4d:92:1c:
f7:5e:d7:b4:56:cd:ac:7c:c4:12:56:c9:5c:eb:a8:1d:f7:fd:
1a:0d:74:c1:9f:4d:6d:1f:50:46:08:4d:da:47:bb:27:f7:90:
94:8f:6f:83:92:b2:81:e3:0e:03:e4:19:7b:7e:c8:19:14:16:
cb:b2:b4:5f:03:2c:67:51:ad:15:ce:c3:76:de:97:33:25:ec:
61:b7:10:1c:2a:cb:ef:e0:ab:fc:e4:99:1b:74:b3:31:33:2a:
76:7e:70:50:a1:05:ea:71:02:c6:60:4c:13:ea:f0:c5:30:ba:
7b:69:1b:81:2a:ee:b4:56:a2:f4:f4:a7:1d:2f:13:ba:65:81:
8b:96:1f:d4:03:d5:14:4e:2f:3d:a5:12:25:10:85:af:4a:7e:
75:83:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:18 2025 by rpki-client