Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier: 4PSUPJ6nMfDODUbS6XnopVh5c+XQ6FIbiyIBFvLROW8=
Subject key identifier: 43:CC:A6:C4:1C:23:10:4F:02:CF:41:95:D5:AC:D4:EA:58:E6:19:80
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 0199FD349569D2427E1E9AEA696081DD5C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number: 11E2
Signing time: Sun 19 Oct 2025 16:01:45 +0000
Manifest this update: Sun 19 Oct 2025 16:01:45 +0000
Manifest next update: Mon 20 Oct 2025 16:01:45 +0000
Files and hashes: 1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=)
2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=)
3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=)
4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: 0sbb0QLmIrNdVpyqh78rHDXItec1POCKol2aZ7vQoh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:95:69:d2:42:7e:1e:9a:ea:69:60:81:dd:5c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Oct 19 16:01:45 2025 GMT
Not After : Oct 20 16:01:45 2025 GMT
Subject: CN=43cca6c41c23104f02cf4195d5acd4ea58e61980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:37:58:93:65:7f:a1:11:f2:2e:1b:0f:ce:
4b:3d:6a:ef:f1:39:08:1f:b3:ef:f4:a3:9f:aa:48:
d8:27:60:8c:0f:5c:6d:5c:d6:e9:08:13:96:a0:f7:
71:a5:9a:7f:66:11:06:d9:f7:12:ea:c0:f2:ba:49:
32:03:ec:28:f4:3f:88:70:f8:f7:e4:21:9f:71:cf:
6e:f9:55:2f:7a:3b:47:79:9e:de:d1:3d:fc:45:b6:
e7:6d:db:81:e7:18:b8:64:43:a1:15:51:2f:a0:8c:
dd:5e:6b:36:e9:83:86:bf:b6:2d:d8:6e:9d:ed:da:
7b:73:be:ca:e0:6e:04:5c:52:44:c0:04:de:34:05:
fb:2f:53:8b:a7:61:c7:ab:f2:d5:6c:90:ba:12:ad:
ca:af:46:23:53:2f:cd:e7:14:3e:1b:c0:0d:f5:41:
0d:d3:98:91:c0:4c:ab:fb:9c:78:bd:bd:53:24:4d:
ba:10:2d:b9:53:5d:b6:4a:81:85:08:8f:50:cb:d0:
12:35:be:25:ea:95:b0:70:8a:2f:a7:3c:61:be:1f:
42:f1:fe:3e:3d:4e:4c:3b:f8:5d:d1:b0:68:61:cf:
39:7b:18:b4:f4:bf:88:92:20:ea:31:7b:f8:59:72:
df:a4:7f:7b:ae:4c:56:45:00:03:b3:df:fb:a9:52:
e1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CC:A6:C4:1C:23:10:4F:02:CF:41:95:D5:AC:D4:EA:58:E6:19:80
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:83:8f:07:b1:f9:2a:bd:99:48:76:5f:7a:fc:97:6a:bc:f6:
51:b6:25:61:97:fc:55:ea:21:14:ff:9d:39:af:88:7b:04:6d:
07:f5:05:20:42:e6:fd:9c:74:ed:a6:af:67:8b:c2:62:38:f9:
c3:86:88:29:59:8a:4e:e9:e0:94:9a:62:19:3a:51:ab:80:b8:
66:7a:62:2c:ac:29:65:7e:30:07:2f:55:91:0a:49:61:b7:25:
27:27:d4:a4:56:fa:c5:b5:19:1f:57:19:01:38:b3:14:9f:ee:
f8:21:7c:af:9b:04:1b:08:cb:57:35:14:8e:8d:c6:2a:32:f0:
ee:23:f6:be:b6:a2:9a:5d:b2:bf:94:98:9d:6d:44:2b:65:c3:
c4:5c:a7:1d:e4:ab:93:6e:eb:df:a8:1e:cf:14:35:dd:91:b1:
3b:c2:99:79:ee:96:3e:d6:8d:66:46:71:64:76:f2:d6:ee:5b:
9b:e5:9e:94:0b:98:d8:fe:fb:05:b9:e0:27:7c:68:05:a5:0a:
a1:7a:22:7b:09:20:28:9c:de:2f:24:78:76:52:aa:10:35:5b:
93:f2:34:ca:fe:88:2a:c2:fe:24:cd:f3:b1:b6:bc:1d:01:db:
c6:5f:3a:a8:aa:d8:0d:6c:b0:6a:3c:6b:28:62:ba:9d:9b:5d:
a6:ae:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:33 2025 by rpki-client