Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: hV9LHvk/8D56FDCuCetVzVUoajEV17s9Ptr/Ef+oO0Y=
Subject key identifier: CF:14:1C:22:22:67:01:6D:5B:85:DE:05:FD:9F:08:58:31:A7:C6:B5
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 0199FB7CB7E3F96FA678A4DD918F92CBE34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0781
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: 4RI3bOBzdhP/RjEWSdx1zjj/1hjVN5smLqkKcbCpbOI=)
2: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=)
3: y77dBZKkwdBWSaHuC-2LOWhhnDE.roa (hash: Mve9fSJEqTyFEiPK9mxYy3Dvl/+0Q/tVpXlrv6a1VIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b7:e3:f9:6f:a6:78:a4:dd:91:8f:92:cb:e3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=cf141c222267016d5b85de05fd9f085831a7c6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:1f:28:f2:9f:af:21:1f:ab:a1:99:a1:c3:
84:2f:c0:b7:cb:3b:c9:b1:50:20:d4:02:13:d4:e4:
96:0b:88:d5:7b:a3:6d:b6:26:e1:aa:e2:d0:8b:e4:
f5:c0:6f:0e:12:3b:ff:bf:c1:81:df:ff:a8:9b:b3:
0a:42:41:0a:e8:a6:6d:8f:dd:5d:6f:4b:01:50:d5:
72:47:d7:43:a2:6d:42:2c:3b:aa:87:ce:6c:97:80:
5b:3e:42:2d:92:62:47:77:a2:11:ef:45:ad:ec:df:
d5:73:31:73:5a:39:15:89:9c:4c:d7:85:87:39:d8:
1e:84:4f:a1:79:0e:6a:d2:8b:b8:be:eb:59:6a:b9:
e7:93:8a:09:22:fc:0a:8f:b1:5b:77:67:0e:a8:55:
2f:06:cc:dc:a6:5e:72:17:a0:e2:1d:09:00:d1:90:
7c:6f:1c:c1:8e:a5:f2:cc:0f:d6:37:6e:8d:21:b4:
92:97:f1:4b:5b:b7:e0:ae:b6:f8:5d:85:c8:8e:3d:
1c:c0:86:7d:a8:89:14:ae:4a:28:f1:fb:32:64:1d:
c6:18:c5:cc:21:ca:38:49:cd:b1:3d:ba:ab:0b:9f:
de:55:6b:d5:41:47:2e:18:44:e4:c1:c4:f9:3d:1f:
95:cc:4a:ce:5b:e8:85:77:eb:0c:b1:61:5f:3e:2a:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:1C:22:22:67:01:6D:5B:85:DE:05:FD:9F:08:58:31:A7:C6:B5
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:02:80:24:58:29:21:a5:fa:ce:7a:5b:1b:28:56:92:1b:f1:
ed:e5:57:92:85:89:b9:a6:4d:f8:15:99:1f:24:91:a0:ae:33:
f9:36:16:51:35:ac:ba:43:3c:16:6f:8b:59:65:d2:5a:74:c4:
9e:fc:f4:40:c5:a6:da:72:81:8e:5b:2a:79:1a:82:e4:1b:8c:
3c:7a:44:e4:cd:91:bf:96:9d:12:34:5f:de:68:e5:e3:45:c5:
36:d4:41:70:dd:5b:a6:58:c4:b2:e9:a9:93:aa:64:1d:b0:08:
d1:0c:b6:f6:4c:c3:63:74:16:13:83:d2:14:54:ef:01:81:cc:
fe:ac:df:12:79:10:2d:90:62:4f:42:7e:9b:f3:3d:57:18:9d:
0d:45:2f:4e:34:dd:b2:94:ab:29:41:51:c4:5b:0a:85:2d:fd:
c1:73:1d:de:c4:03:91:14:20:1a:11:93:34:fc:1b:3e:6e:2d:
80:9d:03:65:99:b2:1b:a7:e2:bd:b7:03:a9:16:a0:0c:c9:9e:
87:e5:9d:ff:d7:7a:61:70:55:01:90:b3:df:bc:3d:77:50:47:
e4:da:02:35:10:c9:29:a8:cc:9c:f4:c2:5c:e1:7b:a0:44:d1:
f0:55:43:5f:3c:59:44:f6:ec:a3:25:71:68:6e:de:f5:5c:44:
d7:26:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:47 2025 by rpki-client