Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: I2ElI0zOc22nLfQyj4eN5ygRvQKCSKwxgfRh17g2VnA=
Subject key identifier: 0F:AE:98:8E:67:B4:30:37:AA:63:6B:BA:66:01:6D:91:D8:A7:5F:9F
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 0199FC587EED2D8B17714E747CBA1B5E1794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: 6qlZPrAehL9dUy2wTuS6LJOCNFZKbRsPw9PNRZ6roqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7e:ed:2d:8b:17:71:4e:74:7c:ba:1b:5e:17:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=0fae988e67b43037aa636bba66016d91d8a75f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:82:52:e1:68:c5:e2:47:ef:a3:48:19:50:
00:6c:ee:14:4a:0b:4b:01:27:6f:f3:6e:a3:65:dc:
1d:1d:b5:3a:75:a4:65:aa:a1:7a:83:32:d7:de:4b:
09:7d:c9:03:e6:0c:7f:f7:f1:90:26:bc:d3:23:b7:
4c:bc:72:06:1e:6c:c9:48:27:57:0b:a4:40:20:38:
4e:e4:8b:ed:25:69:22:2d:97:9e:88:65:00:7c:b0:
91:5d:2f:eb:2f:6a:6d:ca:ca:2f:2d:98:06:30:49:
67:b8:c0:75:95:04:52:97:b0:cb:ec:8c:41:10:24:
31:46:0b:ca:9c:e0:67:3f:45:f5:e2:aa:fd:ce:e7:
fa:2e:e3:b0:37:a4:0f:59:3e:43:f3:96:85:09:cf:
a3:bf:65:c5:ca:cd:03:d7:2e:88:34:0c:a1:d2:9a:
8a:0a:15:4f:e2:e4:0b:41:bb:27:b0:21:a8:90:08:
d1:b1:78:be:4b:d3:05:70:36:d4:cc:ae:70:40:cc:
83:90:5f:89:17:43:f8:21:20:d4:85:2e:a5:8f:a3:
13:67:9e:be:0d:c7:f5:4c:e9:76:0c:8b:1e:02:94:
01:0a:f2:2d:fb:29:5f:27:dc:9c:78:e8:8d:ec:8d:
1a:61:73:74:54:2f:b9:dd:a6:bc:e1:59:59:a9:e9:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AE:98:8E:67:B4:30:37:AA:63:6B:BA:66:01:6D:91:D8:A7:5F:9F
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:43:aa:95:75:7e:d9:60:3c:9a:dc:7a:39:ca:06:71:84:38:
e3:76:71:02:47:eb:ad:e4:82:b1:8e:71:1f:63:5e:9d:87:3c:
d2:62:59:d6:82:69:90:be:de:e1:12:e6:ca:a5:c3:e0:cf:ea:
f7:6b:33:b3:76:64:b9:78:2f:91:66:69:e6:e8:e6:e0:35:0a:
78:4c:b8:2a:4e:6f:cd:f4:de:9b:ee:85:61:3b:21:0a:ab:cb:
4f:db:d2:2d:fb:29:3f:de:9a:78:7b:52:29:44:9f:55:47:22:
0e:a6:78:19:27:23:2e:9e:e7:e8:83:22:fb:75:85:2d:6c:e3:
71:1a:b4:83:17:ad:44:80:57:04:54:9b:47:21:c8:80:78:b1:
31:84:b2:da:4f:b3:da:03:ea:fe:f9:07:f4:a7:4a:76:d0:92:
a7:8a:23:d7:57:85:1b:1e:aa:3a:32:8b:47:be:5b:75:86:03:
89:b2:4e:87:f7:1e:8b:b1:63:20:56:0c:03:75:f4:a6:f3:96:
2d:62:3d:1b:d0:a4:ff:06:ce:1c:6a:f9:39:95:f7:8e:44:5a:
90:da:6f:93:a1:76:75:03:78:a9:0c:bf:5e:df:8b:16:ff:bf:
b6:9b:95:0b:d6:a7:3a:65:c9:2f:5f:02:2e:4d:a1:4b:60:b2:
e6:d7:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:45 2025 by rpki-client