Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: hs4CvUhh1TivVlwwx6jXsof4lLIPybIYlszMVERx2VE=
Subject key identifier: BB:94:55:72:76:19:0F:D1:98:5E:50:54:05:2E:D3:0D:D9:76:E4:C6
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 0199FCC6358492F061ED14831E0E52ADCACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: RoQ6ryfCdfTnPKF/+7GA7M53ujMr9CGXtGMNOzftGmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:35:84:92:f0:61:ed:14:83:1e:0e:52:ad:ca:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=bb94557276190fd1985e5054052ed30dd976e4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:b1:e5:e6:4a:39:08:f1:3c:9e:c7:cd:51:
54:1a:c3:9d:c7:14:8a:1a:07:b1:1c:34:8d:d3:6b:
e2:4e:1d:ec:ff:2b:f1:19:04:40:db:e6:71:c1:7f:
a7:08:a0:21:db:be:6c:f4:a9:7b:c1:ec:38:39:5a:
03:a7:07:99:f2:c1:40:33:76:91:31:59:9a:72:5c:
28:20:49:d8:75:9e:b5:d0:34:ea:94:68:a8:82:2e:
1b:b8:e2:c1:e9:94:c0:79:a5:80:31:5a:76:88:85:
96:72:4f:5e:1b:78:8c:88:de:02:ec:bd:d4:2b:34:
97:ee:4a:cb:8e:0d:14:23:07:4b:bb:d8:7b:f0:b2:
30:80:e6:00:6d:57:39:70:1a:0d:f1:95:39:1e:82:
8c:50:31:90:13:af:ea:3e:78:fa:f3:8f:b8:c5:96:
c6:a6:ff:03:21:c9:93:61:ea:7d:8e:73:81:3f:bf:
18:8c:a1:ad:74:9f:13:a3:b8:fa:af:dd:68:9f:e2:
23:b4:ba:6a:7a:43:26:d0:50:66:3d:25:17:e3:07:
94:bc:fb:11:cc:31:89:bd:1a:21:57:46:4e:06:1b:
6f:7e:cf:76:0a:ab:bc:de:7c:26:9b:d9:f5:8c:94:
f4:ab:1d:b6:b5:fb:2b:23:e1:50:ba:45:30:bb:6f:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:94:55:72:76:19:0F:D1:98:5E:50:54:05:2E:D3:0D:D9:76:E4:C6
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6c:a2:d1:62:13:05:64:84:35:69:e3:38:4d:43:03:c6:9c:
21:70:91:3a:91:50:08:a7:6c:0b:4c:d4:e0:60:7c:d5:44:b0:
6f:68:2c:8a:67:97:40:a6:63:09:56:2c:eb:12:a2:d4:a2:a3:
79:44:63:b2:bb:19:73:4c:07:2e:26:f0:e2:f9:fb:8d:8e:59:
de:ed:c5:c0:45:37:1a:18:51:73:4b:11:a0:ef:13:69:72:62:
30:f0:aa:ac:81:4b:f2:ba:b9:0f:6e:f1:af:50:fc:b2:5b:63:
16:3f:f7:10:5e:ca:93:90:f0:e2:45:fd:52:ca:56:4b:bb:83:
2c:24:63:2f:e1:73:d8:e3:3f:d9:b8:f7:fe:d2:bb:d3:89:1d:
68:81:3c:74:17:d6:4a:59:e1:7c:6d:11:fb:7f:96:c6:74:d7:
c4:8f:da:5a:19:b8:40:6f:1e:1b:85:bc:c9:56:fe:fa:c0:9f:
6d:a3:08:c4:ca:84:a2:04:4d:ef:d7:42:83:16:9f:a3:ec:ad:
84:14:7e:6a:0b:55:89:d8:80:a3:6f:2f:14:b0:eb:c8:9e:19:
fb:93:76:89:81:f2:f8:bf:4f:07:91:5c:bf:57:a2:b9:14:71:
5e:ac:e0:fe:bc:0a:6c:38:4a:a3:29:86:b5:86:89:44:7b:46:
6b:de:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:47 2025 by rpki-client