Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json)
Hash identifier: /o15Cb8TH7Vz5Z2ejKpw88PKt7t9jj4oeYrYiT7AnI0=
Subject key identifier: 96:7A:47:60:DE:AC:8D:A0:16:B2:61:70:F9:F6:F7:33:FC:22:F8:66
Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Certificate serial: 0199FBEB37341C8751B3B9D205E1EB9025D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: IjiLHf5oodS2k3hKLVIQHWIkVKgNOxtw8DaJvzcKu9w=)
2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:37:34:1c:87:51:b3:b9:d2:05:e1:eb:90:25:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=967a4760deac8da016b26170f9f6f733fc22f866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:84:ed:c1:83:2f:55:de:5a:d2:66:97:ab:
d2:db:8e:63:f2:e5:20:00:93:80:b9:cd:c3:a8:77:
0e:85:a3:94:c5:c8:3f:ce:cf:35:ce:da:02:d1:a5:
2a:de:5b:5b:8e:e7:53:ec:30:e5:c7:05:11:f7:b3:
f1:a4:d1:dc:59:d8:3e:7f:fc:71:ac:21:d4:e4:ed:
66:8c:ca:65:39:b2:fc:f4:b3:a4:58:b9:ee:f2:cc:
85:68:1a:c1:ed:aa:f0:c5:cf:2e:8b:37:35:6e:8a:
94:2b:4f:13:f6:c6:96:61:99:22:ce:fe:b8:78:01:
26:99:d8:f3:50:01:de:4e:10:d1:74:dd:e5:b3:10:
fb:76:74:f5:a3:7d:11:a1:b4:ac:40:36:47:d0:64:
fb:83:36:48:2a:09:59:6e:44:1c:2c:a6:d5:ab:64:
18:5f:2c:4a:66:58:83:88:ea:f9:6f:ee:5f:99:eb:
89:76:9e:2b:e3:77:a9:19:16:10:a3:e9:27:f4:da:
83:58:e0:a2:c9:04:6f:2a:6c:b4:2a:bd:64:2f:d0:
95:8e:4e:00:14:f7:b6:5b:39:51:33:09:fe:ec:29:
2a:1e:c1:c1:fe:ec:66:eb:fb:2d:77:9b:a4:4e:b2:
b6:72:f8:2e:c0:d3:a9:39:c5:d3:eb:f4:83:a9:9a:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:47:60:DE:AC:8D:A0:16:B2:61:70:F9:F6:F7:33:FC:22:F8:66
X509v3 Authority Key Identifier:
keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bd:1d:ad:de:1c:22:8a:4e:14:c5:fa:6f:80:98:75:dd:fa:
0b:30:46:94:70:56:46:70:48:29:19:cb:b0:21:2a:ee:54:13:
ad:32:6a:fc:33:66:7a:51:77:9f:e6:f0:05:df:63:45:a8:99:
0f:88:67:af:8b:fe:2a:ef:1e:4e:a5:35:6f:2f:f3:12:91:5c:
a0:cb:75:17:81:fa:59:24:75:5f:ba:88:bb:1a:e1:84:a8:00:
3c:36:db:5f:a3:df:2d:67:7d:59:c2:f1:ac:e3:68:e6:0a:fe:
f8:9d:dd:76:e5:25:81:82:97:ab:42:5f:e3:2c:02:8b:d2:96:
ca:9b:96:72:f2:8a:47:b5:97:c5:1f:c7:4e:ed:02:85:37:bf:
5e:4b:e6:6b:94:ee:8a:e2:39:7a:d6:11:a6:7b:19:1a:90:7d:
61:20:7c:6f:cd:16:6a:5d:f3:da:7e:89:65:2e:a8:48:b8:6b:
ca:bb:b1:b4:8c:b8:6e:a9:43:44:e1:d5:61:ee:2f:4e:83:1f:
d6:90:23:e8:9a:2e:28:22:f1:15:e8:68:fb:b4:cd:4a:09:4c:
78:03:bc:ac:4a:4b:ec:62:6f:a8:60:65:f1:9f:5a:25:4e:3a:
23:a5:cd:63:2d:f5:e6:b9:c8:57:a8:00:75:98:67:43:1f:dd:
9b:2c:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:20 2025 by rpki-client