Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: rwcEV284NwnFSWzdGQhyaBhI1brgqo/9gObikcoE0MY=
Subject key identifier: D6:10:C6:DE:11:23:60:9D:59:3C:83:46:D6:17:3C:A2:2E:B2:00:A7
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 0199FC58C8CBB58C675849680C131DB551FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 10C7
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: b3iqlWWdaCVWpHkQyp75d+jIyyX0tMIc8W1kwC35xrg=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c8:cb:b5:8c:67:58:49:68:0c:13:1d:b5:51:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=d610c6de1123609d593c8346d6173ca22eb200a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:06:8e:3b:ef:1b:07:51:74:22:db:2f:93:
6c:56:1c:1b:26:9d:f5:e2:03:91:14:01:7f:83:c9:
45:c2:67:f2:0a:0c:c7:8a:58:10:3a:1d:6b:79:24:
37:cf:60:cc:d6:74:77:48:2d:ea:bd:4a:3e:c6:dc:
2c:ac:1f:7f:e8:cb:3c:b2:07:3c:5d:bd:88:ff:45:
8b:84:3c:a5:f8:02:e3:15:08:4f:5f:ee:5e:1b:8a:
b9:3a:b4:a8:49:43:2b:69:61:82:8f:fe:2b:ef:ee:
b2:8f:aa:46:53:87:60:7e:cc:88:60:32:f2:0b:d8:
de:d9:2f:10:55:dc:22:8e:cb:f0:45:a0:77:af:65:
2c:0c:b5:0a:51:cf:f1:79:23:0d:53:39:0f:53:1d:
51:4e:29:f7:18:6f:e8:7c:f8:e4:2a:f9:0d:ff:aa:
be:9f:2a:48:b9:2b:ce:7c:aa:7b:f4:0d:15:e7:94:
12:91:f3:43:e2:cf:e5:4a:fe:13:f1:b9:d2:59:c9:
5e:d1:25:06:86:a1:bd:fa:2b:1c:6f:76:e7:8c:a5:
c8:12:1b:1e:36:20:4f:d0:de:57:38:ff:3a:9e:ed:
45:a8:aa:af:88:87:5f:1f:0a:c9:db:50:3f:da:df:
ee:9c:b2:77:7f:2b:b9:ba:50:ad:63:4d:0d:81:89:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:10:C6:DE:11:23:60:9D:59:3C:83:46:D6:17:3C:A2:2E:B2:00:A7
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:68:84:ea:1b:7e:a0:14:88:ba:69:66:5c:2e:f9:0d:88:b4:
d5:f4:80:1f:d0:c8:f2:8f:00:52:ac:89:02:4e:81:25:06:39:
fa:37:ea:1c:07:24:b7:31:f3:57:d3:67:c5:71:cb:0f:4b:da:
5b:2f:d2:d1:8b:ae:21:30:69:1f:c8:ed:09:1f:f2:14:38:79:
86:b4:d4:a4:46:9c:4d:6b:f1:ec:d9:b3:be:6f:41:5d:15:7f:
70:b7:3b:7d:ae:52:2a:26:f6:f4:bd:19:84:30:31:17:ad:41:
2f:13:cc:f9:33:b5:5a:81:20:2f:20:25:3b:e4:48:d7:43:57:
71:a7:4d:99:a7:28:3c:d0:d5:d1:e8:15:16:70:d5:65:bd:7e:
c8:18:a6:62:6c:94:07:94:06:df:66:41:76:c5:1f:05:db:9b:
6f:16:ed:04:69:e0:a7:85:db:9f:8a:ea:73:11:05:de:18:b9:
ad:18:ad:81:b9:d3:65:7d:a4:bc:3c:9b:bc:7c:09:e0:a0:ae:
e4:d2:68:05:6f:2b:67:85:28:33:2e:49:73:b8:ab:ce:e6:9e:
86:bf:ca:05:bd:62:c6:cd:86:9c:47:97:0d:54:10:de:cf:fc:
3b:67:d8:33:8d:38:7c:97:ad:34:7b:dd:7c:b9:38:a5:a0:42:
74:da:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:27 2025 by rpki-client