Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: hbVMrqj2brznPODoULNUq7h2Co9iQrp6EBku/ABwRqE=
Subject key identifier: B2:2A:C7:1D:CF:00:4D:57:58:CC:65:CC:2F:18:68:80:A6:8E:C4:74
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 0199FB45F5E8262260DE9B101212E661A301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:30 +0000
Manifest this update: Sun 19 Oct 2025 07:01:30 +0000
Manifest next update: Mon 20 Oct 2025 07:01:30 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: 0IZcPBTvfZrrQkyH0DOOrXQkEoTb+Pf6JxQPCtZKcy0=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f5:e8:26:22:60:de:9b:10:12:12:e6:61:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Oct 19 07:01:30 2025 GMT
Not After : Oct 20 07:01:30 2025 GMT
Subject: CN=b22ac71dcf004d5758cc65cc2f186880a68ec474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:04:dc:42:e5:b0:25:94:33:9e:b8:60:86:
d2:94:f2:12:95:0b:0f:af:bf:84:a7:97:08:23:a0:
94:bc:0c:de:05:fd:44:88:01:a2:6d:28:43:b3:c2:
67:c9:d3:b1:5d:ed:8f:cc:49:d7:fe:5d:76:d4:0d:
5f:5b:08:4d:dd:41:fd:b4:e1:43:d7:c0:63:e9:22:
9e:39:2f:e6:49:32:93:22:d0:e1:03:88:4a:c9:fa:
52:e3:bc:fe:df:2b:34:43:79:3d:5d:b8:ae:3c:88:
63:36:e0:1a:09:eb:28:5d:14:b6:b4:ea:0d:30:ee:
c8:c9:e2:98:4f:8d:b7:d5:84:85:af:da:09:f2:fc:
46:be:8d:d4:6c:ef:77:50:9d:a1:7a:07:df:88:43:
47:88:c7:b0:9f:06:cf:f3:89:98:eb:ac:bb:b5:d0:
76:bc:4b:b7:64:7e:11:3d:b8:9d:b7:e5:9b:bf:2a:
46:79:41:68:5c:94:ed:14:37:44:21:bc:2a:ca:09:
28:3a:a6:8a:97:d0:cc:90:b1:75:0b:e6:47:1e:1d:
a9:37:ae:d2:24:c3:27:c7:e3:6b:da:1c:07:6c:11:
ea:ee:c4:c4:ee:3e:20:6f:eb:3a:b8:9b:db:e2:d7:
32:c0:6c:fd:4c:35:3a:20:db:50:50:c6:8a:55:9a:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2A:C7:1D:CF:00:4D:57:58:CC:65:CC:2F:18:68:80:A6:8E:C4:74
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f6:d9:da:c9:2a:76:32:98:6f:40:1e:55:13:c8:09:43:5b:
08:ce:a3:37:3b:f4:fa:ab:21:b2:00:8b:f6:71:67:f7:c8:a0:
22:86:d2:48:92:97:ef:f8:65:c3:d4:df:c2:8f:be:3b:80:e2:
5a:89:44:1e:71:83:a3:14:46:89:fa:29:c9:16:e5:29:93:a3:
b0:97:7d:7f:4e:1b:cb:a7:27:8f:8a:8f:b6:de:a3:e0:36:d1:
04:1e:5c:33:67:37:8c:13:27:07:3b:39:8a:c8:14:7c:43:d6:
4e:3b:f9:78:5e:15:05:20:77:cd:3b:4a:64:7f:50:c3:f1:8f:
f4:a0:af:aa:91:04:79:f4:12:d1:47:19:7d:82:2f:ce:e0:b6:
65:f3:5d:09:ac:f9:36:8f:55:07:b5:be:ba:26:5d:82:cf:6f:
1c:c0:8c:64:23:31:75:12:56:20:a7:21:86:7f:c9:9b:34:cd:
10:92:ea:e2:fa:8c:2a:7c:dc:61:fe:9b:1b:78:1a:46:43:28:
94:1b:20:90:db:a1:05:5e:1f:d0:8d:ef:0a:2b:7b:f8:0b:73:
30:06:7d:4c:2d:ae:93:86:06:a4:2f:5e:7b:32:00:6a:56:c4:
51:11:05:98:52:8a:3c:34:c5:a3:2e:2a:35:00:51:57:81:cf:
e9:3c:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:30 2025 by rpki-client