Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
File: fD2KpDg1BKMa_0sAaBCga88DBa4.mft (raw, json)
Hash identifier: vZGcdUM1OQYD5YSadOQU8hXeEW5t3tLFRZvhDainuY4=
Subject key identifier: 23:C7:5A:5C:9E:10:01:DF:BC:4E:8A:B9:B3:A0:00:7C:C4:60:EF:C3
Authority key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
Certificate issuer: /CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Certificate serial: 0199FC58990977B290AF1501274F62044062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
Manifest number: 12BD
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: 8L2O5GlhNp_lrqBMRrzhkCl_FU4.roa (hash: MpUCXGi4iU4O/s2W0Ri/evmaR2tEREi873mtgHCWuJE=)
2: fD2KpDg1BKMa_0sAaBCga88DBa4.crl (hash: fPDfI8al8HQixPjkY4IoVOq+xzZwOHiwZ+Mjf12QEQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:99:09:77:b2:90:af:15:01:27:4f:62:04:40:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=23c75a5c9e1001dfbc4e8ab9b3a0007cc460efc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:70:36:a5:56:dc:a9:b4:52:31:62:63:fa:
5e:f0:6c:43:99:a0:de:39:a8:3c:25:d0:2c:4a:94:
e7:86:56:e4:c5:88:b7:a8:21:9f:4a:ca:3a:c5:da:
89:b3:cd:94:bb:db:b5:e6:9e:a9:a4:56:9d:81:18:
12:1e:e1:f8:53:da:fc:67:92:95:bb:ff:53:1b:56:
33:c6:fa:e8:57:62:64:b0:42:b5:2f:12:20:46:1a:
e8:c8:0b:31:d8:30:5c:22:97:b2:a9:c0:10:0a:ed:
38:45:78:00:06:79:26:de:98:e2:4a:91:fb:ec:9d:
05:6c:43:7d:b9:b3:61:49:e2:5b:52:39:3e:96:81:
01:d6:c0:2c:24:72:c0:a1:53:ac:c4:57:5f:4e:34:
05:1c:55:62:e0:1a:93:ef:9d:94:c5:58:ce:b1:ec:
bc:49:51:94:d9:a0:24:dc:94:63:d7:9d:1b:32:cb:
40:26:0c:4d:cc:2b:22:13:93:0a:ae:14:6d:06:3b:
63:d9:8c:e7:05:1c:a0:4c:8e:0a:6e:14:f1:07:bb:
5f:86:a9:1a:41:4d:a6:52:fc:e1:60:3a:74:1b:4a:
5a:d9:fc:b1:e8:be:d8:f2:ef:45:81:8e:3c:14:68:
4a:09:8e:57:b4:c4:73:b6:5f:8e:4e:5e:b0:68:17:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C7:5A:5C:9E:10:01:DF:BC:4E:8A:B9:B3:A0:00:7C:C4:60:EF:C3
X509v3 Authority Key Identifier:
keyid:7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9d:0c:4e:2b:ec:6c:df:9b:9e:9b:ec:07:de:04:1f:bd:db:
87:b6:77:f7:54:e6:53:20:fd:22:a2:2a:c0:7b:c0:6c:8c:44:
6a:dc:5b:82:61:d4:03:8c:b2:41:aa:f7:5f:12:cf:3a:05:91:
4f:c8:65:e6:66:b8:5c:9d:2b:18:10:0a:80:33:b6:0f:d3:e4:
c4:fc:e6:3c:ba:c0:43:69:82:02:19:74:e1:86:68:22:0b:7b:
23:5b:49:1d:68:4b:35:88:ec:6f:2f:7b:54:a0:15:24:96:bc:
dd:57:81:ea:7b:37:2d:93:70:f4:e9:9f:18:56:08:9f:88:c7:
c6:a4:34:7d:ae:0c:76:08:eb:e5:87:32:40:5e:28:46:b4:1b:
0f:57:1a:a4:6f:f4:07:8c:b7:cb:b1:c2:6b:b2:ef:53:13:de:
d4:71:ab:e0:23:9a:cc:63:d7:00:b2:e0:8a:f8:1e:db:20:77:
26:a9:48:9e:f1:9b:b1:bb:4f:d9:79:31:b5:1b:c7:9e:df:28:
c0:85:70:1c:75:c7:5a:eb:5c:c7:58:65:42:7c:a4:b3:50:99:
f0:07:6b:61:11:99:d0:3f:8d:d7:7b:e8:3a:9e:9f:00:e0:bd:
ee:2e:e4:31:45:ce:c9:a8:11:bc:f0:13:98:8a:4a:88:e4:78:
fe:d0:df:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:06 2025 by rpki-client