Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
File: dn62YZNtyV2j7MTKPq9YE4nA2FU.mft (raw, json)
Hash identifier: 2IQJKJIr0GcI32LorPBWANqVvVeXbweiiQBo4lqTIl8=
Subject key identifier: 21:B8:31:99:42:B6:FA:B0:4A:2F:05:A4:81:3A:46:C2:F9:63:A4:C6
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Certificate issuer: /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial: 0199FB7C99A35147781153C81CD481F16799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 08:01:10 +0000
Manifest this update: Sun 19 Oct 2025 08:01:10 +0000
Manifest next update: Mon 20 Oct 2025 08:01:10 +0000
Files and hashes: 1: 1-1fD9INC6tdul0-Zxx4kw5UQaSA.roa (hash: xArWY+ZJbdFaL3BIojqGwzrX81Sbjb4pJCyT9h2MU5E=)
2: 8_gnS_gysL9vFXycvHFYUuT3eFQ.roa (hash: fdIKsa34nJXAe2MSq8dUjvxc5//TDcQhR1zCGckQ59Y=)
3: dn62YZNtyV2j7MTKPq9YE4nA2FU.crl (hash: TEVsLWLd7p6cIaed0+5ocgQpgPBplJG9IEyTxAHdzoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:99:a3:51:47:78:11:53:c8:1c:d4:81:f1:67:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Validity
Not Before: Oct 19 08:01:10 2025 GMT
Not After : Oct 20 08:01:10 2025 GMT
Subject: CN=21b8319942b6fab04a2f05a4813a46c2f963a4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:46:0d:c9:9e:6e:3c:6e:e8:7a:17:37:02:
6b:9f:25:f7:f4:35:2d:0f:37:b9:ba:a3:b5:b4:cc:
7e:6f:69:4d:24:7b:85:d6:39:8f:7f:5d:1e:f1:fa:
e8:48:27:6c:d1:4e:74:33:e2:b7:90:86:ba:a7:06:
17:9c:7f:b8:d8:9b:19:88:b5:30:2c:c8:3e:47:11:
23:7b:aa:aa:e7:a6:20:ef:16:46:85:fe:57:e2:63:
55:3a:98:1f:93:b1:7e:64:3e:1b:df:96:1f:9c:c5:
89:73:9f:4b:4d:aa:14:e1:2c:6c:f0:de:9c:a2:6a:
94:c9:67:8f:7f:c5:b9:c6:89:a5:74:95:5c:44:46:
e4:9a:03:5d:07:e1:85:a9:7c:bf:2b:e5:17:96:aa:
aa:a9:73:1b:d1:4d:2a:a9:fd:41:fa:f3:0a:78:a5:
42:7b:03:5a:99:9d:7d:49:0c:4f:0e:23:d2:94:24:
56:89:81:7f:af:e4:2f:29:8c:ae:e9:38:05:e7:bf:
55:f4:ae:83:06:04:b8:dc:5f:9f:91:96:ad:d6:58:
bb:47:60:0b:6c:9e:66:39:ad:0a:36:d9:92:31:b8:
ca:9b:d8:ef:42:17:e2:15:d6:18:85:a7:9d:02:5f:
8a:02:53:e4:a3:5d:65:c0:f6:4f:f3:c4:b9:88:89:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:31:99:42:B6:FA:B0:4A:2F:05:A4:81:3A:46:C2:F9:63:A4:C6
X509v3 Authority Key Identifier:
keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9f:9b:64:ee:b4:6c:17:2e:ee:54:cd:87:cb:02:0e:77:63:
06:e7:da:5c:83:7a:e6:1d:f5:f4:7f:a5:db:c9:94:97:09:20:
da:cd:e2:15:c8:c7:72:a6:12:e9:96:3e:f9:e4:a8:c2:44:96:
87:c5:a1:e3:c7:d8:18:89:54:99:ad:b1:62:98:98:ae:6c:3c:
a2:56:d9:54:9f:b7:bd:0b:5d:10:26:63:0b:76:2d:01:11:d6:
2a:fd:75:13:5f:0c:ae:16:48:a6:b3:d3:c5:dd:3c:9b:be:05:
63:0f:52:92:23:8a:9c:9c:d5:4b:7c:15:81:a9:f8:2c:43:d5:
36:1c:31:3b:d1:3f:80:63:aa:68:3a:fe:c0:fb:64:14:d6:2b:
1f:03:1f:1c:95:e0:8e:70:ce:39:dc:b7:07:8a:35:4c:79:0b:
5c:1a:72:c7:98:fb:f2:43:59:88:90:67:6b:a3:7f:ca:e0:ab:
ba:ba:1a:a1:88:a0:45:38:40:b8:80:76:17:dc:97:8f:f9:a3:
33:71:64:d1:1c:2f:ba:d5:56:2b:53:fa:29:2e:4a:92:e6:f0:
6a:71:f9:f2:b0:c8:93:b6:70:e9:58:4f:ad:87:0c:04:91:e2:
8c:7d:7a:bb:2b:b8:cf:05:c9:4d:82:0b:28:f0:89:24:92:d6:
1a:b3:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:44 2025 by rpki-client