Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: uy6ZrKYeJKksRArrNfhnHuJlETLSMf75TSYTLVMcYow=
Subject key identifier: 77:B1:2D:3E:6F:A5:3B:59:D4:20:3E:45:C4:74:13:B1:B6:76:83:AA
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 0199FBEA91EB4515D872B4DF2CE025FB6C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 14A1
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: qA1debxCtrh1GeJhwh9tdyg1Rq+2voZ9+5vDsgqeA98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:91:eb:45:15:d8:72:b4:df:2c:e0:25:fb:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=77b12d3e6fa53b59d4203e45c47413b1b67683aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:3b:12:1b:a9:28:d0:d8:6d:76:e8:2d:58:
04:f0:df:cb:09:49:59:72:5d:76:47:6b:06:15:1e:
e7:39:76:e0:32:c5:ab:5b:c1:d3:21:77:38:25:3a:
8d:bf:f9:37:3f:35:ef:8f:25:97:60:c8:96:7b:0b:
d2:5f:48:ba:3c:8e:4c:17:e3:15:1e:4b:a8:29:3a:
f7:77:12:54:8e:9d:2d:c8:91:2e:2f:ce:81:41:5f:
b7:80:42:be:4f:2f:39:2c:04:5a:97:83:6c:4c:cc:
75:6d:ed:61:f5:b2:a9:f5:d8:a6:f6:2c:4c:da:cc:
db:7d:fe:4d:2b:25:b8:39:4d:62:28:b9:a7:72:65:
d1:d6:4f:08:66:33:c2:04:0d:99:ca:69:a0:e1:43:
b0:12:c5:07:ca:67:f8:f7:1c:d7:40:fd:72:ff:46:
0c:6c:ea:59:b6:1f:16:13:16:2d:81:1c:96:53:4f:
d3:6b:a0:ad:5c:31:3a:66:73:e6:10:43:8a:af:f3:
f1:6e:ec:d1:c4:2b:08:5f:ea:22:ad:e9:27:87:7e:
09:9f:59:6d:38:9e:be:36:66:e9:d2:fb:53:a9:f1:
08:28:b2:5a:f9:16:c3:ed:bf:8a:5a:d2:bf:3f:8b:
34:22:e0:b4:88:42:cc:b5:95:b1:c3:23:7f:2e:bc:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B1:2D:3E:6F:A5:3B:59:D4:20:3E:45:C4:74:13:B1:B6:76:83:AA
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:91:16:04:bc:d7:e1:1f:71:e7:97:2b:1e:86:20:b7:1c:48:
78:e4:2e:5f:e7:8d:99:a9:08:3e:6c:07:bf:fc:d7:6a:30:77:
69:c6:bd:8d:67:0e:34:3d:40:9c:cb:83:0d:7f:6e:04:2d:1b:
b7:2b:a8:b3:98:c9:03:c1:86:39:06:9c:b2:87:b1:d5:5d:21:
ee:4a:87:3d:a4:df:71:b2:93:92:0f:e4:ce:8d:a7:89:11:8e:
49:6a:7d:ae:05:28:32:8c:ee:c7:bc:a7:96:f3:1d:f0:53:bb:
d1:20:9c:29:ba:ba:22:ce:4f:dd:39:61:b7:5f:a5:c4:46:4b:
af:32:33:46:c7:f5:85:00:7a:3c:76:ba:47:37:f3:30:fa:35:
92:78:d9:40:3d:59:c7:bb:b0:e7:fa:e4:2f:91:dd:36:1f:06:
2c:bc:20:2e:86:d4:2a:77:1c:10:1c:95:e5:f9:d7:5a:e7:e1:
61:2e:b0:0b:79:29:70:49:7f:9a:d3:d3:59:f7:02:fe:82:c5:
eb:4b:8d:af:54:07:36:0c:33:1f:ff:2a:66:79:f7:dd:08:70:
48:9c:13:27:f6:44:19:98:2d:03:27:2b:60:cb:ca:ae:6d:fe:
56:66:77:fb:aa:4f:00:b0:55:72:f9:e6:ea:f9:65:00:ce:0a:
45:59:f7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:49 2025 by rpki-client