Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
File: dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft (raw, json)
Hash identifier: yrwUnKmFEmV1OfhRvKWHdr/y3iiTRWKyQU9nvp4eVFs=
Subject key identifier: B3:47:7D:68:39:6E:1D:1F:12:9B:E2:11:B5:2C:31:8A:E5:7A:3F:A1
Authority key identifier: 74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
Certificate issuer: /CN=749ea3b1e58ba060b41fc2a078f6016264759664
Certificate serial: 0199FFC74F5E7FF1CBA4C0A7A867124D1D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:01:15 +0000
Manifest this update: Mon 20 Oct 2025 04:01:15 +0000
Manifest next update: Tue 21 Oct 2025 04:01:15 +0000
Files and hashes: 1: 8ufIDITsiM6oD6O8MQCNfNFjxSc.roa (hash: 8hR826cHBgGmwXj/DW4UGY4gM4QS8fSh6KW7UDD9poY=)
2: dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl (hash: PZxUNrPXerMpSXTOhpc+DY1L6oErE3ug09FGnsgpASs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:4f:5e:7f:f1:cb:a4:c0:a7:a8:67:12:4d:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749ea3b1e58ba060b41fc2a078f6016264759664
Validity
Not Before: Oct 20 04:01:15 2025 GMT
Not After : Oct 21 04:01:15 2025 GMT
Subject: CN=b3477d68396e1d1f129be211b52c318ae57a3fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:b3:4a:c6:45:57:a7:c8:da:3d:85:75:f7:
db:e2:7e:4d:95:cb:08:ed:58:b0:14:89:c8:a1:b0:
eb:6b:58:d0:42:51:16:66:bf:6e:1c:33:60:67:52:
65:a2:9d:2c:7c:cc:cd:56:5d:5d:eb:e8:ba:f6:b0:
3a:fc:cb:32:ae:5b:4c:3c:d6:01:7b:20:ba:fd:e9:
aa:2f:be:49:e5:a8:88:a0:7d:2e:f1:87:45:b6:87:
07:12:25:b4:1d:51:fa:b5:69:a3:d8:dd:fa:9d:43:
81:a9:52:40:4b:83:ac:58:62:5a:40:b3:72:f2:54:
ca:fb:4f:52:7f:e3:43:e3:6f:66:41:47:df:30:ae:
69:2c:76:a8:25:1d:d9:69:59:ec:b7:aa:27:65:d6:
83:8f:b9:8a:2d:18:f4:7c:07:0d:14:58:1d:55:6d:
85:15:73:11:1b:06:4b:4f:9d:6f:a4:11:b7:66:b2:
9a:d2:e8:66:28:54:d2:1c:95:5b:fe:14:69:ff:35:
96:4d:73:7d:01:47:1f:a3:b4:0a:c1:7c:9c:b5:7e:
91:6b:b1:ff:9c:cf:f3:a3:e8:b9:64:87:95:b9:6d:
b7:d0:86:6c:64:74:d5:db:fb:98:58:b4:26:84:e4:
d2:7c:2e:a0:1e:82:12:f3:7c:70:27:ab:90:4f:e5:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:47:7D:68:39:6E:1D:1F:12:9B:E2:11:B5:2C:31:8A:E5:7A:3F:A1
X509v3 Authority Key Identifier:
keyid:74:9E:A3:B1:E5:8B:A0:60:B4:1F:C2:A0:78:F6:01:62:64:75:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJ6jseWLoGC0H8KgePYBYmR1lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86246a-f033-4e48-b7dd-2f4242a13d00/1/dJ6jseWLoGC0H8KgePYBYmR1lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:67:62:38:93:c1:8c:4b:5b:09:c8:ee:39:a6:8a:a4:a7:d7:
b7:7a:fa:af:04:1c:86:9f:b1:d9:b8:f4:1e:d4:1b:22:f0:86:
c8:be:4a:61:ab:1b:3c:a1:ab:2a:8b:d4:64:6c:92:4a:3a:09:
45:c1:52:f4:5b:e1:26:6f:8e:44:43:d2:96:90:30:a4:38:8d:
9d:93:3c:6a:cd:f5:6d:9b:c7:f4:37:87:63:5a:d0:9b:1d:bc:
90:45:b4:86:79:83:1b:a3:a0:4a:19:62:8a:7d:09:c0:94:28:
5c:bc:d1:9a:a3:98:85:0f:42:90:8e:99:5d:67:6b:49:4a:10:
42:ce:3d:d8:5f:92:28:8a:b0:72:59:89:a2:21:8a:31:f1:77:
fe:4f:14:81:7a:61:75:21:b3:b1:53:e1:b0:03:48:c7:5d:05:
82:48:2d:66:ab:29:34:c7:5b:fb:5c:87:08:42:6b:0d:91:f5:
c7:39:a4:b4:b3:9f:03:20:56:0d:42:dc:52:42:d1:36:88:65:
9a:58:cd:f7:06:e3:66:b3:2e:63:ef:2d:f8:3f:6c:45:46:95:
fc:ba:7e:e3:c2:b3:e6:82:73:06:4f:4b:bf:15:b1:e2:50:51:
3e:99:b9:91:23:e4:82:cc:a7:f7:f4:27:ca:46:21:64:9b:7a:
36:81:32:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:53:56 2025 by rpki-client