Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: g2kP61FaqPJW5U6KHCfmygkqIhn1XD1EFJ28vfP6N2s=
Subject key identifier: CD:A1:6D:A8:C8:C1:3B:CE:76:71:D8:B0:B5:FB:DF:3C:C2:A5:AC:8B
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 0199FEEB981A97E290D59C2CFC7A843D6346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 0689
Signing time: Mon 20 Oct 2025 00:01:16 +0000
Manifest this update: Mon 20 Oct 2025 00:01:16 +0000
Manifest next update: Tue 21 Oct 2025 00:01:16 +0000
Files and hashes: 1: HEZk47Tz0P7xLu1E-YbCfOk87g4.roa (hash: ITNGs0lC09kQd2YEI+tUesIYch6VaIyTGr6WiAe5ZUo=)
2: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: 3p75NcgKs7WbaayzAvfhzkz+iHir/KdhLstiLcopU/g=)
3: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (hash: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:98:1a:97:e2:90:d5:9c:2c:fc:7a:84:3d:63:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Oct 20 00:01:16 2025 GMT
Not After : Oct 21 00:01:16 2025 GMT
Subject: CN=cda16da8c8c13bce7671d8b0b5fbdf3cc2a5ac8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:77:71:b6:39:54:a5:d6:9c:e6:fe:92:ac:
af:88:65:6d:7d:91:1d:21:c9:43:73:5e:a9:e0:fd:
f4:ec:77:e8:1b:cc:5a:2f:18:87:8b:d6:59:c2:9b:
64:36:21:a0:cb:b6:d6:99:59:de:40:b7:06:f3:03:
78:e0:75:88:a5:de:f7:64:e4:a2:0e:d3:4c:4f:c4:
b1:92:0b:6a:d1:08:a2:df:41:d1:8f:69:b4:f1:25:
43:95:de:f6:9b:a4:69:8a:4b:80:80:98:af:01:16:
88:90:a1:c4:83:f7:0b:c5:a1:58:14:fb:fa:b5:99:
5a:9a:94:7b:b6:dd:49:af:dd:2e:bd:73:c4:47:8b:
6e:97:90:7a:0a:cb:8d:ab:97:b9:b2:b0:29:a2:3f:
eb:3a:5f:18:95:07:5c:70:d7:dc:b9:9a:81:56:96:
e9:e2:a9:80:24:94:95:12:60:0a:f9:bd:ed:f8:1d:
f0:ba:1e:01:14:40:2d:2d:85:3c:67:ba:ba:48:a4:
9f:6e:6a:25:77:98:c8:d4:26:a5:00:49:14:f9:ab:
43:0a:47:5b:4a:5d:f4:80:fe:76:3d:f0:c6:27:df:
8f:05:b8:cf:bb:41:f2:6c:4b:d9:1b:88:39:9b:09:
d5:e6:59:96:f5:f9:b3:25:c1:9c:a4:27:c3:f2:c1:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:6D:A8:C8:C1:3B:CE:76:71:D8:B0:B5:FB:DF:3C:C2:A5:AC:8B
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:76:9d:74:fb:1c:45:78:26:48:55:6f:a6:bc:76:6c:3c:17:
73:74:67:9c:a8:6f:76:8f:c3:58:3e:06:74:3b:e9:e1:72:c2:
2e:34:b8:f4:12:b8:5f:12:fd:d9:b4:48:0b:0d:3e:b3:23:46:
f9:0d:f1:c7:03:44:f4:64:2e:59:3e:14:eb:e3:e7:30:3f:b9:
77:c1:dd:98:08:54:27:82:b0:af:dd:64:db:22:d1:45:cc:bd:
5d:88:44:99:dd:00:81:33:98:ad:84:7b:3d:75:38:ce:df:a5:
5a:bc:8e:98:f9:2b:be:3d:22:d8:ac:0f:11:2d:90:ac:00:38:
17:c9:b9:3e:db:79:00:08:74:b1:ae:57:b9:18:27:02:8c:31:
90:df:55:b0:24:a5:de:4c:55:88:72:82:49:b8:d6:a3:2c:fa:
db:14:90:96:b8:61:95:b8:98:c6:f8:c2:5f:a1:1e:f1:69:89:
68:3f:0b:b8:d4:b7:5b:2f:14:13:c3:ff:4f:ab:e7:6d:8f:63:
88:94:2f:ef:76:a6:6c:e8:d8:0f:f9:c6:e8:2b:42:e3:0a:f0:
c3:40:d0:d2:74:c8:af:5d:d9:36:e7:14:d2:ed:b1:95:9b:cc:
6a:66:a4:ff:b3:75:31:93:5e:3a:a4:d6:11:43:73:89:29:d1:
ab:c5:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:08 2025 by rpki-client