
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: b1ALQ8D/SVdP4KEkaa1WP6+2uF4ZsT0co+oqNxWRcaI=
Subject key identifier: 59:A7:30:49:F2:BE:7C:7A:A9:A5:54:3A:B7:48:60:B4:FF:7F:F4:3E
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 0199FC8FAD017F0EDE05D9FA2813C8A909AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: IV6OFBoVmOzwe6W8OAW5iTBixZ6WG5njWJ5FAZuXtoc=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ad:01:7f:0e:de:05:d9:fa:28:13:c8:a9:09:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=59a73049f2be7c7aa9a5543ab74860b4ff7ff43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:46:0a:0c:e6:1c:9e:f1:e1:fc:79:a5:30:
b1:3c:23:cf:3c:60:79:90:6a:e2:42:c7:83:d7:ad:
6c:0a:8c:0b:97:9e:fc:77:1e:0a:f5:f8:2b:ce:1e:
9f:6c:b2:db:ef:4a:e1:74:97:11:5c:8b:a7:ae:c0:
9e:90:10:a2:9a:00:9a:3a:5f:a7:a0:0e:a8:96:cd:
03:37:cc:7f:e3:47:10:50:69:ca:55:33:59:d5:78:
f5:53:36:de:db:28:76:84:6f:26:ee:fb:6c:8f:85:
88:65:bc:df:a1:f0:0a:1f:31:c0:a1:0d:8c:c2:db:
78:14:6e:76:d6:15:a4:6d:9b:94:d8:7d:d3:97:17:
e8:62:07:59:d5:24:dc:be:bf:fb:db:96:95:cc:72:
92:23:14:33:1c:f5:34:a4:be:66:2f:fa:10:32:14:
55:0d:73:8a:d7:8f:a4:2b:35:66:5a:b4:6b:bd:43:
a4:3c:d6:49:70:85:a4:2b:e9:c1:7d:7d:92:37:df:
5a:ab:c4:3e:01:0f:9f:18:08:41:80:46:71:10:4c:
5d:b1:28:1d:b0:dd:c8:1d:af:03:53:9a:f9:db:0a:
04:b1:e1:5d:d1:a5:02:5f:2f:84:7a:c8:07:6f:36:
9c:0d:01:ee:97:94:09:27:57:f9:d2:e0:bb:29:86:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:30:49:F2:BE:7C:7A:A9:A5:54:3A:B7:48:60:B4:FF:7F:F4:3E
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e6:58:3e:82:41:9a:65:16:9e:64:cc:02:a5:48:08:68:27:
f6:47:4a:fc:5c:22:22:a2:41:b1:a4:b0:1f:9a:76:14:e2:17:
d2:0c:d0:57:42:23:29:c4:15:6b:cd:e0:2a:8c:31:2c:4e:b8:
b2:2a:d2:0a:fa:2c:36:2f:81:09:91:e1:e5:1c:e2:3e:7f:f8:
7c:d8:68:18:2a:45:24:ad:a7:bd:ee:66:84:05:05:fa:d1:f3:
66:ed:d3:9b:53:11:d3:df:1d:c3:6e:80:df:ad:dd:4b:b5:e7:
e8:d2:61:1d:95:15:05:e3:c0:11:5f:77:dc:87:83:cf:0f:48:
2c:27:36:14:89:22:a6:d9:36:ca:4c:24:00:c6:2f:73:ad:85:
15:a6:9d:1b:02:c2:3c:82:52:d5:c3:88:c1:c1:72:e2:5f:5f:
e4:6c:7a:d8:d7:95:98:2b:fe:9d:ed:6d:0a:2d:49:b0:64:72:
3e:03:c0:83:43:6a:c0:7e:92:ba:51:7f:8c:4a:0a:59:1c:db:
c1:9c:00:0f:ce:e7:08:7c:a3:43:37:b8:b8:13:40:32:90:cf:
bb:70:f4:cd:12:2b:9c:b8:7d:57:d4:c6:15:5a:d8:98:58:68:
86:c9:7d:09:a1:2c:31:e7:93:05:5a:90:94:39:6b:6d:45:f9:
dc:d4:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:56 2025 by rpki-client