Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
File: 29T45HYjd_hrB6h1P26Y9vS2t5I.mft (raw, json)
Hash identifier: nqp2uL6v1ChABhsIH7EdVIh/Dk/gywH7e1d4PfYeBlw=
Subject key identifier: 10:BE:F2:51:4A:66:32:57:E8:CA:D2:3C:DF:B6:0B:E2:6E:3D:0E:19
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 0199FC8FC3A2D9FE214CADA8042E201738E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 13:01:44 +0000
Manifest this update: Sun 19 Oct 2025 13:01:44 +0000
Manifest next update: Mon 20 Oct 2025 13:01:44 +0000
Files and hashes: 1: 29T45HYjd_hrB6h1P26Y9vS2t5I.crl (hash: FSkbmm2WB945qtNkYAh3lwg9L7ctINBUeXt7R44RZLM=)
2: Bx5AqFrmCEvvpg5PP6G3iYi6cm8.roa (hash: nv+50RjE0P7RZsHAtUfv4vKeiING47CC1niIjtZ9NmE=)
3: EjiEhqCQfFeJxheh78DjOW0HnX8.roa (hash: xMjHQVoybWNabo3SxaU+I1LoAYBSZrLhM+vfUEw6Ma8=)
4: gmpsE3gYpq4JCSohIVHDm3a0vAc.roa (hash: UIxgMbyZxswMhLzYSeqRYLHgjf+FlKpy5d7Je9K3bz8=)
5: hsQv-_pPjXxEs3KS3Yli7KkGY8s.roa (hash: hNWKluVfWlyL1Lj4BF60xi3YP+tHJFMq6o5hVtlALzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c3:a2:d9:fe:21:4c:ad:a8:04:2e:20:17:38:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Oct 19 13:01:44 2025 GMT
Not After : Oct 20 13:01:44 2025 GMT
Subject: CN=10bef2514a663257e8cad23cdfb60be26e3d0e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:b3:56:aa:4f:5a:9f:a9:6a:02:61:27:8c:
73:8c:da:93:a9:68:37:c5:22:a8:5e:bd:11:07:89:
65:d4:55:a8:cd:03:34:f9:37:a4:e9:21:05:c3:11:
78:c2:86:f8:6b:30:d6:5e:4e:7a:e2:f2:e4:05:86:
3b:fd:9d:23:bb:a9:cf:b2:5f:c0:0b:7f:ed:0e:f0:
98:48:6e:37:2d:aa:7c:91:36:d6:db:39:25:6c:67:
e6:76:ff:80:81:e8:ba:28:15:c8:04:88:0a:53:7b:
75:60:db:de:05:06:3b:98:d1:e2:00:14:18:69:60:
ba:53:40:97:37:e0:b1:71:0a:5d:56:7b:71:b7:a9:
11:1a:c5:5e:8f:e0:7a:52:2f:96:40:90:78:01:ea:
84:d9:7e:79:c4:da:47:5b:8e:95:9b:9f:b8:d3:50:
0d:90:40:c6:cf:5b:5d:a9:87:19:ed:f4:b8:f1:b1:
78:e8:e5:16:c3:7b:fd:2c:cf:d0:9a:f1:df:2d:e4:
6b:5d:fd:8d:39:af:f5:f6:a2:8d:63:16:ef:01:58:
16:61:ea:9e:1b:9b:e7:dc:32:11:dc:67:a9:41:87:
ee:51:db:23:50:83:c8:5c:94:fc:69:e8:1b:b8:74:
c8:5d:e9:2b:7a:93:ac:b1:28:0a:5f:77:32:4e:38:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:F2:51:4A:66:32:57:E8:CA:D2:3C:DF:B6:0B:E2:6E:3D:0E:19
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f9:ec:13:1b:cf:a2:e0:3a:6a:b2:58:99:8e:97:05:88:86:
55:ef:e2:6f:37:6d:b3:27:f7:76:68:8a:5e:62:3e:f0:7c:e5:
29:81:d9:a3:2c:b7:72:80:76:ed:c2:06:38:b4:37:53:25:c7:
26:9a:87:d5:f1:de:f5:46:65:70:80:6d:9f:70:a1:96:cd:fc:
de:42:e9:42:c9:bc:16:19:6d:db:ac:46:71:20:37:d0:c2:e9:
07:f2:8e:39:e8:0a:5d:a5:bc:cd:04:1c:ce:61:05:3a:91:4f:
e1:c1:a2:26:6f:98:4a:0c:35:13:42:c2:1f:34:09:5b:6a:1c:
2a:90:5d:40:c1:2c:d2:da:d9:9d:17:48:35:64:fe:0a:63:1a:
89:7a:1f:cc:e1:93:fa:04:5f:1a:8e:a2:65:3a:ba:a7:9f:fd:
30:40:89:36:d3:f2:82:22:de:f4:44:fc:1f:a4:a8:46:0a:bb:
d5:16:b8:dc:fb:39:8d:52:07:e1:59:cd:12:58:e9:e8:a2:53:
d2:55:53:c6:8d:d4:57:2e:9a:2c:0b:80:ab:22:65:b4:e4:08:
9c:53:e5:4d:7f:93:99:e3:7a:4d:f1:8e:dc:89:c0:ab:74:33:
9a:ab:8d:23:fe:db:fe:bf:66:fc:b6:f4:ee:94:22:a0:2c:4f:
65:e4:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:47 2025 by rpki-client