Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: bngBeQQVrA17gjPHx04UW1s4YttP655hK0SQ+b0jHwE=
Subject key identifier: 2D:BD:34:18:90:38:6F:C1:D4:39:15:F4:F5:4D:68:2A:4B:8F:15:81
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 0199FF22E58D734DC57D0EB9B00CA4C63FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 10DE
Signing time: Mon 20 Oct 2025 01:01:41 +0000
Manifest this update: Mon 20 Oct 2025 01:01:41 +0000
Manifest next update: Tue 21 Oct 2025 01:01:41 +0000
Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: ltj49hmZMUjk4JAL4RMWecMwQ+P7TCNlptIpAOemUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e5:8d:73:4d:c5:7d:0e:b9:b0:0c:a4:c6:3f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Oct 20 01:01:41 2025 GMT
Not After : Oct 21 01:01:41 2025 GMT
Subject: CN=2dbd341890386fc1d43915f4f54d682a4b8f1581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:1e:31:d2:a6:7f:3a:91:7f:b5:49:6c:70:
2b:5b:b8:2b:d7:1d:f3:a2:b1:33:b7:fd:32:77:eb:
6c:52:09:51:b4:0e:3e:0e:f9:c5:ea:63:fd:c0:5b:
6d:6f:36:12:d2:56:9d:9d:66:34:ec:e0:c2:60:df:
c9:bd:0d:78:d0:62:6c:e1:27:1b:40:1d:e3:12:3c:
ff:2c:21:64:c9:0d:4f:56:22:2d:ba:90:b4:6b:7f:
76:6d:a1:27:cd:31:62:0a:19:0c:51:ce:35:a0:08:
b7:94:c0:79:39:21:27:f3:1e:d6:77:dd:be:18:f6:
94:cb:bb:3a:c8:1e:dd:7b:5d:03:e4:0d:07:fd:f7:
89:97:c4:9e:f7:11:c8:2c:02:93:74:a7:19:b3:1e:
05:e5:e3:40:1d:d3:44:70:b4:64:2e:94:f8:ac:a4:
ba:56:f6:70:3e:84:a3:ca:fd:85:de:77:a3:47:07:
6b:8b:ea:b9:53:a3:1b:7b:38:5e:7b:ff:4e:74:b1:
a0:88:83:e4:d9:fd:fb:ed:89:a7:07:d7:d5:c5:e8:
27:8b:16:99:9b:fe:13:6e:e7:21:c9:ee:57:a9:51:
8a:7d:17:fe:46:4c:c6:0f:c3:5f:22:94:17:b3:1e:
a4:77:85:91:f3:93:4a:98:7d:72:08:d0:4b:05:d8:
24:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:34:18:90:38:6F:C1:D4:39:15:F4:F5:4D:68:2A:4B:8F:15:81
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:38:85:1b:5e:0d:bb:90:16:7e:f9:33:84:93:4c:e5:b1:92:
8c:2e:16:c7:98:f5:60:b0:62:8a:25:67:c9:dc:b0:33:e5:e3:
06:ac:a5:f8:fd:a5:5e:33:9e:d9:9b:fb:85:07:24:5d:84:a0:
3d:6f:a8:ad:f8:96:65:3f:eb:88:13:7f:b0:8d:5b:eb:4c:15:
71:fc:94:e4:c0:eb:76:e7:47:f9:21:a2:b5:b3:d0:62:23:2d:
10:ad:ef:74:00:c0:83:58:b9:65:62:db:0f:07:b9:67:eb:cf:
56:51:c9:b8:c2:86:38:c2:a7:24:4b:46:3b:0b:a9:69:25:03:
67:b3:2e:bb:3f:32:18:65:b5:b3:62:b0:79:cb:8a:2c:ad:6f:
15:85:2a:dc:63:47:12:ae:7e:bb:ff:72:6e:53:b5:67:bb:a8:
c8:25:1b:09:86:96:d5:d4:ee:a6:75:a9:45:1a:48:68:36:0c:
13:42:e5:c4:4c:42:c0:f8:a6:ed:cc:a8:7f:5b:8f:5e:78:e4:
87:23:f8:ab:8d:fa:67:df:aa:6b:da:6d:fc:91:fb:ce:18:ca:
45:4d:cd:41:62:a5:1d:ff:3b:ce:6d:1d:c6:e2:23:06:16:30:
0c:81:a4:29:b8:32:84:1e:8e:c0:51:52:01:be:fa:c1:4d:ee:
3e:a7:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:10 2025 by rpki-client