Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File: deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier: 7iBbV+C3fZzATq6dP/4Ci11wyzsikz28qM7+vU/tuTY=
Subject key identifier: 47:C8:8D:10:B3:05:44:7E:74:61:F8:17:8B:4C:D1:9D:A9:7B:26:38
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 0199FCFD65016613B8B47804BADAE08F59C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: HQ3g25P006ROllKfG3gdhpSNHOg.roa (hash: JkW/Op/fvYeKeMra4WDWooddbprrjz6RgWEE7Fl3VHc=)
2: T23Nk-nWZ13uL-vUgHBSmBD0a5Y.roa (hash: /bhq2aMKeWlXXVjqRKG1maK35mjghRj8veSjPURu6WI=)
3: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: Y40aq6IvkmGkLckQXSqJmxCEkdUrAy800H3Vh5k/Sv4=)
4: koi0-CGVFzzCbkI5al5_w7LgOj4.roa (hash: Ypeyl95U2AAhobdLkDDvp1F6OHWp8H5ed2csv8B3QLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:65:01:66:13:b8:b4:78:04:ba:da:e0:8f:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=47c88d10b305447e7461f8178b4cd19da97b2638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:49:d8:b3:4d:bf:10:e9:61:92:27:4d:36:c9:
30:28:9b:dd:74:25:2b:5a:df:bd:7d:9b:63:45:3f:
fd:b5:22:90:43:b1:57:69:66:d9:ea:c1:4e:4d:5a:
a3:1c:91:b8:ea:7f:d1:89:fc:7a:44:e0:86:fa:c1:
cc:bf:bc:9c:f9:83:23:0f:b8:86:89:8a:a9:5b:b0:
8e:8f:df:95:30:4f:6c:83:56:74:21:99:51:bb:25:
6a:08:a1:1b:ad:76:ec:ee:d8:cc:4e:56:e5:c4:3e:
ac:37:72:f7:af:6b:92:22:87:9e:cb:a3:0e:d6:b2:
17:97:c0:d4:6d:53:43:7a:f4:23:91:d7:e2:00:a5:
bf:c8:f7:fa:f8:30:50:16:35:fb:65:57:48:50:47:
88:51:b2:c2:2a:b0:da:19:29:24:8c:ad:ad:0b:50:
1c:a1:33:c8:ae:85:c9:c9:c2:46:a2:5a:e6:2a:61:
b5:f5:3f:a9:27:50:3c:78:78:3b:06:f9:a9:09:92:
15:b9:24:74:af:33:88:d7:e2:d0:e3:49:92:1d:d3:
ae:be:41:9c:39:45:14:03:7d:ce:28:ec:6d:68:81:
d4:ce:ba:12:86:43:0a:6f:bb:bb:83:f5:a9:8a:94:
b3:3a:62:f6:24:db:84:bc:ff:fa:80:5c:06:57:f6:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:8D:10:B3:05:44:7E:74:61:F8:17:8B:4C:D1:9D:A9:7B:26:38
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:31:14:87:ed:59:5a:c3:94:75:03:a1:f0:17:eb:6b:4b:f7:
87:98:c1:98:6e:32:32:aa:8f:f4:b8:93:79:62:b7:d8:ef:fe:
e6:33:22:bb:00:55:28:aa:ce:ae:7e:01:80:29:64:cf:f0:db:
2f:30:2f:78:4f:89:b5:87:8f:36:10:f3:36:0b:10:74:07:3a:
18:70:32:5e:fc:fd:b2:f1:d6:21:7b:29:cb:6f:3d:41:99:b8:
84:2d:88:bd:0b:19:3d:45:c1:28:09:f2:42:5a:e8:4b:d8:8f:
ea:6a:09:63:72:3d:fc:44:1c:d2:cc:00:8d:22:a9:d2:57:00:
fb:73:cf:0f:da:fd:f0:58:3f:69:bc:7c:54:c4:75:a8:ba:40:
56:3e:44:19:83:85:f9:ae:cc:13:53:77:15:4b:ad:10:ef:b1:
3d:dc:ed:c4:21:16:7a:3f:07:a1:51:ee:38:12:60:37:b9:f8:
e3:02:4c:5d:32:cf:96:de:b8:01:89:ab:4d:55:57:36:ca:18:
90:53:2c:50:13:27:b2:97:ef:3b:3c:5f:2d:da:48:7a:5a:29:
97:f7:94:05:bb:3d:2f:50:d9:8f:72:ce:8d:f8:f7:5a:c5:0a:
84:ab:5e:0b:ec:28:24:7c:0c:63:9c:02:ee:0b:9e:fa:72:30:
b2:c3:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:06 2025 by rpki-client