Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File: dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier: +1S407AbIyfphGoAnFWEx7mQKB6kYHTeXRpPp0BnJmo=
Subject key identifier: 88:CF:DE:60:81:F2:E2:D1:C5:53:EF:63:02:1B:0E:8B:29:8E:E7:4C
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 019A006C5B2576B11B2A664841DF7BEEC292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 07:01:32 +0000
Manifest this update: Mon 20 Oct 2025 07:01:32 +0000
Manifest next update: Tue 21 Oct 2025 07:01:32 +0000
Files and hashes: 1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: p2RjACcz0jZyP0YpmJ7zPtJy5x32BtiP3UsS4L9Hpl4=)
2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:5b:25:76:b1:1b:2a:66:48:41:df:7b:ee:c2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: Oct 20 07:01:32 2025 GMT
Not After : Oct 21 07:01:32 2025 GMT
Subject: CN=88cfde6081f2e2d1c553ef63021b0e8b298ee74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:fc:60:6d:20:03:c0:28:b0:f8:c4:22:b6:
9f:27:ea:94:71:c2:b6:92:20:55:f8:a9:e2:f7:b2:
d2:8f:45:06:4f:cb:15:d2:21:90:be:7e:43:f3:99:
02:89:5d:6a:37:d9:ca:b9:a8:6c:6a:01:24:42:52:
57:c3:6b:a2:c6:45:b1:be:ef:0a:00:c9:10:ef:54:
10:0c:69:84:cc:06:e2:11:64:09:34:cd:71:37:52:
a2:97:26:0a:97:ac:34:ff:af:3a:c7:e2:5e:b5:4e:
18:ef:df:6c:5f:4c:1a:b0:49:1a:d4:41:0a:38:3f:
4c:d6:8c:49:5a:7d:39:0e:f2:ff:d8:86:83:4e:90:
4f:25:b2:44:5e:9f:77:dd:2b:08:30:57:4f:b5:f0:
50:bd:6c:2a:df:4b:e1:40:db:6c:28:b2:50:79:02:
b9:30:9c:4d:2b:cf:95:57:96:22:e4:d8:39:e8:ea:
a9:2d:67:91:7c:27:6a:b3:99:7f:8c:87:1b:8c:4d:
e3:bd:5a:b5:c9:e8:8b:93:92:d9:ec:00:1e:f2:57:
64:49:15:94:dd:55:48:02:94:44:8b:9e:52:c7:96:
90:01:ac:df:c7:24:79:27:af:83:41:92:21:13:cf:
19:44:ea:a5:cd:ef:17:e3:e1:77:40:dc:a4:8f:6e:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:DE:60:81:F2:E2:D1:C5:53:EF:63:02:1B:0E:8B:29:8E:E7:4C
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:51:0a:65:c7:f0:ed:24:d5:e6:44:82:e6:9f:d4:05:06:9d:
df:87:f9:89:0d:f3:8d:8d:c2:ac:af:c5:75:e5:9d:48:68:98:
86:da:e4:1b:08:77:d3:82:cc:98:6c:8e:2b:8b:d2:75:e7:c9:
5b:5f:73:c6:91:92:89:40:73:56:ca:86:87:2e:2f:4d:71:13:
75:07:55:c7:24:9a:cf:dc:4f:e3:52:db:16:36:db:58:2d:4a:
b7:f4:86:2d:d6:cf:31:42:ff:b7:48:52:24:6c:42:81:d5:1f:
df:91:a8:3c:01:df:8c:73:5b:b2:19:35:8e:2a:f7:1e:55:d7:
0e:ed:23:5f:76:27:6f:2d:b0:10:ea:75:b3:bf:8a:67:99:9d:
ed:4e:87:68:6e:53:e3:53:9b:27:a1:d8:6d:57:72:59:c7:ea:
d8:fe:73:f0:b2:3c:15:25:9c:78:18:79:87:36:1e:c1:99:e6:
b4:1d:15:40:2f:45:9b:a1:1d:c0:6f:20:ab:a2:ca:53:85:45:
1d:0e:76:ed:b8:3c:df:5e:d1:bb:07:6a:af:bc:4a:2c:bf:0b:
0f:7c:b8:03:d2:e1:8c:19:68:b0:38:1e:9b:44:8b:76:a0:71:
af:93:d6:fa:a7:f0:18:37:56:38:ec:0a:93:23:ca:44:7e:a8:
80:3e:a9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:06 2025 by rpki-client