Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: lvzps+ydLADYTSE882/NYpHPKashkJk3OvuGkHFO50Y=
Subject key identifier: 75:9E:A7:2D:12:C3:DC:9C:42:83:9D:F3:DE:2A:72:2B:85:B0:F8:F5
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 0199FC5845A49A41ED18FA49FE16E0D853B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0CEC
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: eOzFMR0SQcDwsdx9LZac9NwvVVAr283fVN1YXuGf7cM=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:45:a4:9a:41:ed:18:fa:49:fe:16:e0:d8:53:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=759ea72d12c3dc9c42839df3de2a722b85b0f8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6b:0c:b9:bd:38:97:1d:00:e8:74:07:dc:dd:
f8:24:a5:a9:c9:e9:e6:39:4d:13:52:d6:30:d0:df:
09:6d:ab:ea:94:3d:53:d9:52:65:6b:b9:db:d6:cc:
9d:ae:75:90:b4:ba:f2:49:6d:65:56:64:f9:27:d2:
09:31:98:b3:7e:21:ab:f2:a0:f8:73:47:2e:fe:f4:
57:c7:50:da:83:8a:e3:8f:b0:da:53:56:9e:62:ff:
37:15:50:a8:6a:6e:e7:6c:91:05:13:10:dc:ee:f0:
a1:73:14:b7:e3:3a:ed:2d:e2:e4:e9:40:96:5e:c4:
0c:13:e5:a2:bb:c3:2b:44:56:db:b9:8c:7b:f8:10:
35:91:80:04:a9:a9:ff:74:e1:52:c3:ee:db:9e:2e:
80:89:e1:3b:3e:2b:28:cf:fa:0d:98:e5:47:38:1e:
86:2d:64:47:73:1e:dc:ac:de:1b:e3:27:44:c2:32:
2f:09:d8:b5:fe:0e:1e:a2:d7:65:49:3d:45:10:3d:
38:bc:30:32:a8:23:8a:88:13:7c:da:54:e2:d2:95:
c1:4d:1a:58:6a:86:26:d2:bf:28:6b:86:e6:08:3b:
6d:cb:7d:20:17:c2:f0:bc:a6:fd:69:62:06:e4:7a:
00:53:b2:7b:26:ae:65:c1:43:96:0a:31:17:cc:b9:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9E:A7:2D:12:C3:DC:9C:42:83:9D:F3:DE:2A:72:2B:85:B0:F8:F5
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:20:da:49:75:3f:0e:6a:51:43:69:2f:ee:00:be:ff:bc:
74:01:78:6c:63:d9:dd:04:50:7d:37:99:20:5e:cd:f7:8f:28:
3d:13:22:a5:e7:aa:4f:5d:2c:80:3b:76:b8:c9:ee:c5:62:ff:
bd:e1:93:20:16:ab:31:65:e8:97:93:39:d6:db:d3:5e:9e:41:
3a:df:d0:78:15:41:54:a9:66:d0:28:c1:b0:22:bc:55:2c:04:
7e:0c:b3:1a:79:e3:ee:5c:06:af:aa:7a:5f:66:79:b8:e9:98:
4a:97:4c:d9:09:41:53:c8:28:0a:7b:8f:53:c5:76:4a:1d:44:
2d:e3:8f:48:32:a6:55:70:d7:ed:91:fb:82:8a:bc:00:25:6a:
a2:fc:6f:62:d1:a3:3d:cc:c6:3d:f0:92:92:cd:8f:57:cf:69:
6f:05:5c:5d:3a:45:91:dd:c8:83:fd:df:04:40:99:eb:89:47:
83:0f:2d:d7:dc:7e:11:7d:d0:59:08:56:df:12:6e:c2:00:90:
bd:c2:a3:76:a0:13:2a:98:bd:05:80:bb:f3:8a:6f:0e:72:58:
f6:8f:12:e1:ed:5d:2d:54:52:bb:48:68:4a:7c:60:23:8a:f3:
fa:52:41:75:20:b2:9c:19:52:71:8a:19:7f:a8:22:cd:7a:29:
be:3b:6d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:10 2025 by rpki-client