Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
File: dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft (raw, json)
Hash identifier: D1hwERhEH/9Ww7fJBzSrbK3AK32CD3JlcvOyB0HbR2o=
Subject key identifier: 65:41:06:8B:E7:75:F9:A9:15:39:9F:2F:02:C6:82:2E:78:0A:13:1E
Authority key identifier: 74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
Certificate issuer: /CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Certificate serial: 0199FAA0E332442FA13FC9DB93055CA0622F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
Manifest number: 59
Signing time: Sun 19 Oct 2025 04:01:11 +0000
Manifest this update: Sun 19 Oct 2025 04:01:11 +0000
Manifest next update: Mon 20 Oct 2025 04:01:11 +0000
Files and hashes: 1: 9aSGIa-WEC1bN7Ni4E8-efLmGGQ.roa (hash: 9siiR4LDQpp3LbxItU8xD6C1s0IOvLTqKZo+clC6imU=)
2: dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl (hash: wSC7GX5t++CiklWuk9S+ohQmSbMW2guQbLr+3z+uxtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:e3:32:44:2f:a1:3f:c9:db:93:05:5c:a0:62:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749d8a4328930b938fa86018b1e447ee4d8da8f9
Validity
Not Before: Oct 19 04:01:11 2025 GMT
Not After : Oct 20 04:01:11 2025 GMT
Subject: CN=6541068be775f9a915399f2f02c6822e780a131e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:65:a4:4b:e0:12:69:eb:ea:92:f8:83:2b:
69:a6:c4:86:66:d0:99:8a:5e:a3:48:37:a2:4f:20:
0e:08:03:60:7f:92:d3:0e:67:f9:39:d8:d7:6b:7b:
e4:78:23:ed:64:b0:d1:53:66:11:52:36:af:c5:af:
89:ea:2e:e1:84:0a:c0:3d:ed:cb:bd:4a:5f:a9:17:
48:5a:fc:1b:74:73:a9:8c:67:c4:d1:da:28:14:75:
b1:24:2f:84:5d:96:98:de:a3:ca:43:2e:19:b5:d7:
3e:6c:49:c9:9c:5c:43:a2:66:64:34:32:1d:ab:ce:
44:12:cc:da:91:48:1f:4c:1f:52:36:58:f7:13:5c:
30:19:76:38:a7:7f:3a:6a:15:45:3d:c7:10:1b:7a:
92:2f:e7:76:64:33:77:41:b2:f0:44:94:df:c2:37:
6e:80:6f:ff:a6:cd:83:94:cb:20:45:c1:21:98:ef:
a2:f4:87:67:e6:a8:78:42:b4:9f:dc:b8:21:db:6f:
41:b8:2b:80:71:11:0e:31:10:87:30:dc:7c:8b:16:
64:58:1c:cb:8b:49:70:d1:f0:07:0c:a6:cb:4b:1a:
9d:65:2d:a7:49:e8:82:07:cc:2f:6e:5d:56:0a:5b:
84:66:25:f0:dc:fc:79:81:34:00:4d:66:c5:ed:26:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:06:8B:E7:75:F9:A9:15:39:9F:2F:02:C6:82:2E:78:0A:13:1E
X509v3 Authority Key Identifier:
keyid:74:9D:8A:43:28:93:0B:93:8F:A8:60:18:B1:E4:47:EE:4D:8D:A8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ2KQyiTC5OPqGAYseRH7k2NqPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3fa217-85f5-4f19-b91e-0889e3ecd1f6/1/dJ2KQyiTC5OPqGAYseRH7k2NqPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:92:eb:cd:af:e4:2e:46:27:a4:43:56:1f:52:b8:59:f5:1f:
e0:8c:2d:72:66:1f:e1:d1:e7:c7:30:74:e4:38:4c:65:55:fa:
5a:9b:94:36:d4:e5:89:c9:cc:8f:94:0d:92:65:60:ae:57:5b:
22:cb:07:6a:a4:b1:66:bd:99:7f:69:a0:61:c5:dc:53:6a:a7:
37:3d:cb:92:f8:a0:19:fc:6b:b2:02:0e:9c:37:ea:9a:e1:39:
46:7f:f1:e8:1f:3d:c2:2e:8c:e8:54:97:87:17:a6:f4:4a:e7:
d4:e4:94:70:ed:62:e5:81:98:f8:0d:91:c0:db:5f:9a:b7:a9:
25:63:73:5c:35:9c:e7:6f:97:34:4e:85:97:5e:e6:78:ab:96:
ef:a7:af:fe:d7:97:b4:a2:43:30:f3:72:b6:a2:74:29:6b:9f:
72:7b:4c:9e:2b:44:74:29:9e:f6:f9:56:71:04:7c:03:8d:18:
06:02:39:bb:35:91:b5:86:9c:7e:52:0f:af:48:9d:5f:55:1e:
cc:b2:97:33:49:8d:0e:ac:72:a3:77:f2:ab:bf:f3:fd:81:87:
23:4f:a9:0e:5b:20:a7:e7:96:cb:00:37:20:fd:b3:0a:94:9b:
85:8d:e5:95:d6:9a:89:26:05:37:1a:ba:41:74:3a:9a:8a:e9:
b7:c3:cd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:57 2025 by rpki-client