Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
File: f_dNq9TrGqEUcUThWwJmnpgv3k0.mft (raw, json)
Hash identifier: /JLcBF3aUwVEvjIXLlMEdgXvhGmE5d/OPl9gTLPfH8U=
Subject key identifier: 78:ED:4B:EF:6C:02:6B:5E:93:43:0C:48:18:3E:99:DF:83:9C:2E:48
Authority key identifier: 7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
Certificate issuer: /CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Certificate serial: 019A01EBDF73EF1B10B442755FE8ED9E9483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
Manifest number: 0690
Signing time: Mon 20 Oct 2025 14:00:26 +0000
Manifest this update: Mon 20 Oct 2025 14:00:26 +0000
Manifest next update: Tue 21 Oct 2025 14:00:26 +0000
Files and hashes: 1: 2MgYI85TPEBCwm2elQTNgUHdzmQ.roa (hash: YR8wZ7h+NpjeTm3CMSeXFipDMaRQTBJNPwjk/7JOMyM=)
2: f_dNq9TrGqEUcUThWwJmnpgv3k0.crl (hash: y3ppSWoy2cc1+OGC+XVcKvVOGa3y+UUaIetmf4pci0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:df:73:ef:1b:10:b4:42:75:5f:e8:ed:9e:94:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff74dabd4eb1aa1147144e15b02669e982fde4d
Validity
Not Before: Oct 20 14:00:26 2025 GMT
Not After : Oct 21 14:00:26 2025 GMT
Subject: CN=78ed4bef6c026b5e93430c48183e99df839c2e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:f1:4d:5e:f7:90:f9:a8:35:40:8e:10:26:
ad:fd:6c:34:dc:17:a4:4a:f8:f6:30:8e:bc:5a:a5:
6d:44:c2:bc:df:19:f8:5b:9d:b0:d6:7c:32:b4:20:
d4:56:a6:22:d3:24:98:fe:95:fe:20:90:98:e1:b9:
fc:bd:6c:1c:b9:84:dd:fd:fb:48:1f:e5:66:c0:46:
6e:52:65:af:12:64:0d:46:7f:85:44:62:41:28:31:
f3:e6:ba:96:28:3d:0d:b3:7c:4e:14:2f:71:63:93:
0b:70:58:86:38:76:ac:62:18:61:9e:f4:5d:4c:90:
10:90:71:f2:41:c0:25:99:c6:47:b9:4e:d4:36:48:
fe:50:76:6e:f9:52:01:14:e3:39:c6:5a:35:c2:9c:
97:79:be:a7:fe:35:f3:ef:17:c6:4b:43:10:0d:e0:
ae:5f:f7:8d:77:63:2a:3a:62:97:79:c0:bf:fe:b6:
13:04:6f:de:54:06:71:9a:07:dd:15:17:15:36:d9:
4a:13:2b:0a:00:3f:93:60:65:6a:25:06:7c:cb:25:
87:25:e3:a3:98:f3:e9:0d:cb:46:c0:99:e8:ec:8d:
81:92:f7:55:a8:7a:60:cb:a4:0b:9b:16:6d:b1:f2:
9b:90:a3:ee:d1:38:e8:3a:b1:2d:ab:82:28:9f:62:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:ED:4B:EF:6C:02:6B:5E:93:43:0C:48:18:3E:99:DF:83:9C:2E:48
X509v3 Authority Key Identifier:
keyid:7F:F7:4D:AB:D4:EB:1A:A1:14:71:44:E1:5B:02:66:9E:98:2F:DE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_dNq9TrGqEUcUThWwJmnpgv3k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0fbbf5-c83d-4b97-9cea-055c49ac6828/1/f_dNq9TrGqEUcUThWwJmnpgv3k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f1:81:70:ef:90:85:43:5d:b9:a2:b8:75:12:42:1b:53:1f:
0f:6f:e1:e3:f9:6f:7f:8e:06:f0:62:f2:a1:24:31:49:f2:07:
73:29:ba:9f:8b:ca:17:fc:54:f5:0d:c1:91:81:81:5c:e5:1f:
64:cc:24:e5:96:7c:69:44:48:70:dc:94:79:fa:68:f2:12:d1:
64:de:d6:09:da:f0:c8:58:c5:cc:90:22:3c:b7:da:7f:ac:60:
95:77:43:15:80:7b:26:34:8d:98:b9:4f:31:97:57:1c:88:88:
6b:93:00:03:7a:72:7e:ec:88:71:93:de:9e:2b:5c:52:93:e5:
89:15:56:af:8c:b8:a6:d7:b4:b9:38:62:e8:e3:d2:b9:fd:8d:
bf:82:32:6f:fe:7f:a3:03:c4:c6:06:29:35:b2:0e:a3:22:78:
64:95:43:53:e5:de:14:cd:12:af:71:a4:5f:95:56:fc:48:02:
b5:9d:13:1b:c2:f2:b4:7b:7c:b9:9c:a3:57:71:9e:83:60:fb:
a2:a7:15:46:4d:06:10:23:7b:b8:50:c9:ea:aa:22:d5:2d:92:
cf:05:fc:f1:7f:77:68:5e:0f:ba:df:89:8f:34:7f:1a:ba:77:
71:d0:6a:c4:d7:0e:7a:b2:a8:8f:7c:f0:e4:c7:b3:9f:02:6a:
80:fc:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:41:11 2025 by rpki-client