Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File: deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier: Tcz0aUgx09ZdPqa81tm1J63xZKw1qpLWjVbuLq9apyY=
Subject key identifier: F2:79:A7:0B:89:E2:90:DC:17:40:23:D0:D3:F8:BA:94:FF:5A:12:42
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 0199FEEC0EADB23783FA8B0715166FEBABE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 00:01:47 +0000
Manifest this update: Mon 20 Oct 2025 00:01:47 +0000
Manifest next update: Tue 21 Oct 2025 00:01:47 +0000
Files and hashes: 1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: oOWk1tlrOBanDo7Xviq8N4/YD2lzlgqoLfCeYxeNooQ=)
4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:0e:ad:b2:37:83:fa:8b:07:15:16:6f:eb:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Oct 20 00:01:47 2025 GMT
Not After : Oct 21 00:01:47 2025 GMT
Subject: CN=f279a70b89e290dc174023d0d3f8ba94ff5a1242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:c1:99:e7:e4:ed:26:9f:d4:ba:17:20:9b:
ea:fa:fd:86:82:18:a3:44:7c:77:0e:bc:82:c5:4c:
fc:b2:4c:44:fa:65:de:6a:06:ff:e7:d9:a0:f2:2f:
5c:32:48:de:a7:98:91:30:09:9d:72:4e:a3:6b:ea:
73:25:4b:e3:c5:f8:8b:e6:e2:4d:e1:c0:eb:ff:d3:
4e:c3:44:cf:72:8f:a5:48:05:5b:42:84:7a:7c:79:
fc:7f:41:7c:27:49:86:0f:6e:a0:fb:8f:f1:57:88:
a8:c4:50:d2:9c:63:be:f6:4e:01:e7:96:97:cb:94:
12:36:b0:13:90:8f:17:8b:fd:00:4c:1f:4e:4f:32:
8e:e3:c4:75:ae:a9:17:e3:87:ed:cc:da:76:5f:51:
fc:1e:5c:ec:35:f1:17:4f:36:31:3c:f5:e6:77:c0:
07:dc:5a:bd:f1:c5:aa:f0:8a:2e:97:56:89:8d:af:
39:8d:47:61:46:2e:71:5f:b6:44:3f:14:50:d4:0a:
b1:b2:fe:67:ac:16:48:31:33:e5:8c:ad:b2:aa:ea:
97:05:66:ce:d8:3a:18:98:2e:d2:7e:ed:bd:96:36:
5d:78:1f:6a:b0:63:e8:68:f3:5d:27:c0:8c:54:5f:
e7:e4:ce:fc:f8:6a:57:86:0f:a6:2f:66:c6:2c:ca:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:A7:0B:89:E2:90:DC:17:40:23:D0:D3:F8:BA:94:FF:5A:12:42
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e9:d7:38:73:d5:61:08:51:24:bb:0b:49:66:e8:3d:d4:94:
c3:a4:d6:2c:9c:f3:d8:1d:d2:d8:51:4b:1c:a5:6e:6a:48:49:
b0:26:29:ef:19:c2:0d:d8:f3:c1:bf:ad:be:48:e1:b9:43:0a:
bc:9e:f1:c0:79:e2:84:73:b0:08:48:48:43:63:c7:0f:2b:c4:
3b:df:7c:a0:68:b8:57:fd:d7:da:4b:40:c7:5d:79:44:0d:57:
eb:b8:6f:3b:91:09:9d:32:0f:31:e1:d4:e7:b6:42:13:43:62:
b3:c8:c7:55:0d:96:f7:4c:17:07:1c:66:19:5d:0f:f4:61:bd:
63:c2:97:65:0c:a3:9a:48:92:0d:6d:79:48:55:dc:a6:b4:7b:
fd:a2:1d:a5:0a:28:7e:6d:82:08:ff:0c:80:db:b8:8b:f5:ac:
4c:06:34:c6:77:cf:d6:7b:a9:7f:7e:40:3b:84:0c:36:9b:1e:
7f:74:6d:82:15:e8:a4:96:1d:30:34:82:47:da:65:19:c9:f2:
4c:e1:bc:0f:cd:a6:a1:5b:d1:56:7f:19:26:4e:0c:a4:67:b0:
0a:11:1b:c9:d3:5d:2e:23:25:ac:15:9a:42:aa:9f:a7:1d:90:
33:85:76:62:be:15:06:96:82:03:8c:63:a7:0b:67:81:9f:ab:
a4:b2:10:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:30:25 2025 by rpki-client