Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: F+hTl4D/kiX49hq3Vir6nGd3Z4Jzu3n4qrnDi6fxl+c=
Subject key identifier: 53:F8:3D:07:CB:B3:B6:94:80:58:73:7B:4B:D4:54:BB:A8:62:C0:A1
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 019A0110CDB861169029B084C1C6AF03D8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 10:01:09 +0000
Manifest this update: Mon 20 Oct 2025 10:01:09 +0000
Manifest next update: Tue 21 Oct 2025 10:01:09 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: BUHYZn1CjWlm0MLBKog9jcoEPuOiE5R9eEKMHeRv1pQ=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:cd:b8:61:16:90:29:b0:84:c1:c6:af:03:d8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Oct 20 10:01:09 2025 GMT
Not After : Oct 21 10:01:09 2025 GMT
Subject: CN=53f83d07cbb3b6948058737b4bd454bba862c0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:ae:2b:fe:86:d6:48:b3:9c:c0:e4:a5:83:
07:84:fe:62:59:59:03:79:06:fc:1f:a9:ed:bb:e8:
34:4f:0c:66:2a:73:dc:21:9f:2f:38:80:db:91:10:
24:9a:28:5a:e7:d3:d0:48:ec:fe:2e:fe:90:8c:1b:
52:43:fc:eb:b4:a9:bb:65:21:5e:5a:ba:7f:a1:8f:
fb:91:16:0c:6d:9e:e9:bd:54:d4:66:c2:53:c8:db:
82:ee:56:17:fd:9f:7b:29:24:7b:40:68:78:41:3a:
ec:4b:da:2c:80:e5:31:24:2d:54:0e:8d:f1:63:24:
96:f1:2f:a8:8c:9a:75:19:ca:25:ae:ea:3b:fc:27:
f1:15:42:a3:e3:99:17:4c:d9:31:d6:ff:18:cf:ff:
69:b7:98:11:8d:cc:be:ba:39:47:19:b2:83:39:5c:
42:c9:51:aa:93:45:eb:06:ad:b2:ee:dc:c5:a3:74:
2f:40:4c:fe:27:90:16:13:9e:86:70:f3:5c:fc:85:
1e:83:64:dc:c1:b9:88:60:64:b2:50:8f:51:ab:29:
7c:67:7d:a6:33:17:a7:ba:40:b2:cb:c5:1f:04:94:
65:27:d1:16:13:4a:7e:0a:fb:2f:04:d4:40:a8:19:
a7:96:64:8d:a1:45:74:86:9c:f2:e6:71:dd:e4:bf:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:3D:07:CB:B3:B6:94:80:58:73:7B:4B:D4:54:BB:A8:62:C0:A1
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:78:20:18:3d:ba:f3:25:8d:42:a4:50:f6:4f:db:9d:ef:09:
4e:85:c8:b9:55:20:22:34:81:28:96:f5:d8:16:ca:e3:fb:e7:
22:18:16:6e:68:a6:13:a1:11:42:16:e8:bc:49:3b:58:4a:65:
11:92:e1:61:0e:fb:2a:8f:01:e3:90:d5:92:e7:34:11:36:e3:
c8:11:0c:a4:ab:4c:c3:e0:8d:97:4f:28:05:52:70:6d:ae:60:
11:8f:f5:fb:0e:c6:97:e3:58:72:53:28:6a:dc:03:c5:13:62:
9a:3c:d4:32:3e:d0:cf:5f:ca:bd:73:2c:56:19:33:04:6e:59:
61:f1:14:08:03:f8:28:5f:c7:37:3b:a8:1c:06:0f:bd:8c:03:
b9:e5:fe:ab:f5:0a:01:65:34:84:36:4b:10:53:39:ab:72:18:
76:55:10:ac:05:76:12:34:8b:e4:8a:71:97:f6:86:c4:f2:d0:
c3:fa:1c:5b:65:13:9c:fc:f2:80:6f:59:1f:4d:58:c1:d6:52:
e6:94:4f:14:41:22:b2:f3:46:56:74:f1:be:8c:7d:a7:d1:4b:
ea:6c:22:fd:5f:cd:5d:75:85:37:3c:e0:ad:40:61:5f:5c:1b:
e5:81:51:10:ce:d2:a4:f5:d6:46:48:2e:fd:ca:18:75:34:4a:
e2:1c:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:15:47 2025 by rpki-client