Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: DHpK+7P+bAxcnQI0Zx9z6yUrJ7S5OgB7VnAuDUn1aJc=
Subject key identifier: B0:2F:7B:8B:A7:C0:C5:7E:F0:62:F9:26:B7:80:67:B1:2A:1B:FF:CC
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 0199FDD9B0FF25443D9C065A485E7BCA8782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:06 +0000
Manifest this update: Sun 19 Oct 2025 19:02:06 +0000
Manifest next update: Mon 20 Oct 2025 19:02:06 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: 52lvOBi9Vu4odoXQABvOkbLkoIkfu3T6D+OhlUHjKAA=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b0:ff:25:44:3d:9c:06:5a:48:5e:7b:ca:87:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Oct 19 19:02:06 2025 GMT
Not After : Oct 20 19:02:06 2025 GMT
Subject: CN=b02f7b8ba7c0c57ef062f926b78067b12a1bffcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:df:fa:8c:7d:25:23:d2:88:76:1f:58:e7:
5d:7f:c4:66:04:89:dc:4c:63:b6:c1:62:9b:eb:69:
51:35:be:cc:08:ba:fc:7c:c4:59:c2:63:86:c1:2f:
42:37:01:0b:07:8a:9a:82:54:73:92:cc:e6:18:04:
86:76:ca:97:c3:bc:d9:72:21:6a:44:75:03:73:5b:
cb:1d:f5:bb:01:47:e6:e2:7b:c3:25:cf:c9:d1:50:
a1:8e:0a:fd:11:4a:2a:b4:17:80:1c:3b:e2:46:40:
7e:95:c4:6b:c0:1b:cd:1d:48:73:e7:0f:dc:23:b2:
51:ab:31:63:a5:19:5c:f6:b0:95:57:04:c4:ef:af:
ee:da:e7:2d:7c:7e:9b:d4:14:84:65:47:11:29:15:
e0:82:04:14:e4:f9:83:5c:bc:b3:c5:02:b2:f1:47:
59:cb:af:3c:6d:75:99:76:b2:e2:65:de:83:2f:91:
67:d4:48:28:6d:71:9c:64:f4:bb:5b:e1:60:da:c1:
74:18:49:6c:fb:ee:f3:67:1b:9f:30:3a:6c:09:58:
50:85:11:6d:9c:aa:a2:5a:ef:02:c7:39:4c:6b:c7:
f8:e7:51:2e:b3:17:31:80:5b:ef:96:22:3f:e0:8a:
c8:96:fa:29:d9:d8:ea:4e:44:ad:5e:b2:ba:9f:8c:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:7B:8B:A7:C0:C5:7E:F0:62:F9:26:B7:80:67:B1:2A:1B:FF:CC
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:85:61:86:c6:c2:fd:d3:ef:f2:3c:d6:79:2c:96:12:05:be:
e2:a0:70:6a:6d:ac:23:d9:b8:ae:d4:c9:58:34:ea:52:7b:23:
6c:d9:e0:f6:f0:47:11:34:43:f1:6f:79:8f:8f:00:76:b7:a8:
f2:7c:65:8e:42:ac:f5:a1:fb:e4:06:6e:20:42:7c:e2:1b:fd:
1a:6b:56:f0:8b:8d:37:5e:83:8a:d4:ea:6e:35:da:83:e4:67:
f6:0b:51:38:ca:1e:57:3e:1f:b8:2c:9a:aa:af:76:21:35:ee:
69:32:75:d5:eb:55:80:72:1c:19:20:57:f9:23:b0:81:e6:2e:
6b:52:5b:dc:d2:2f:5b:b0:2c:26:13:eb:a9:e3:57:a5:74:26:
59:85:97:c3:ca:99:83:8a:0a:1b:f3:42:e3:86:11:e7:8a:86:
b9:fc:b9:af:f8:71:ba:ae:34:48:79:e9:07:6a:7d:f4:31:8c:
f3:33:f8:dd:51:50:8e:39:b2:e3:69:b3:05:14:9d:c4:9f:2e:
02:b8:9e:15:2b:42:1c:45:f5:f6:36:10:df:2b:b4:38:00:32:
7d:46:62:9f:b4:99:33:9c:c6:ac:07:b6:8b:08:e0:53:61:ac:
be:80:6d:09:3a:57:40:5e:4c:62:84:b4:12:f1:2c:d0:14:d9:
53:66:a3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:31:22 2025 by rpki-client