Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: NV8QIy4rY6PJsEcsAJbGkUCpyrS8C1/3S6B7PPaOufo=
Subject key identifier: 02:73:D7:B0:05:02:AF:1D:89:57:A7:A6:FD:96:E8:10:21:AF:9B:03
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 0199FCC6C19918348743A63EF458D571AB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 100B
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: 6OzbRe0BZsikA1ESlJb74IDlfy9169CETSxsHV3gJyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c1:99:18:34:87:43:a6:3e:f4:58:d5:71:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=0273d7b00502af1d8957a7a6fd96e81021af9b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:88:62:ce:6e:28:3b:f2:05:da:d9:62:5a:
37:89:c5:8d:30:f6:a4:4c:26:e8:2c:6c:8c:88:e8:
83:80:fd:b2:a7:dd:f0:06:09:30:c4:f3:f1:f3:28:
fa:df:3a:aa:72:09:ce:2d:c2:2a:63:ae:0b:5f:04:
af:a9:d3:4e:63:87:9a:d2:96:e5:78:8a:74:14:e7:
bd:d9:e0:0d:c3:51:c4:76:b0:14:9b:77:24:77:5d:
7d:74:3e:a6:2d:c1:43:e6:6c:62:8c:56:65:d6:98:
a0:db:0a:1c:e6:07:02:ee:c6:9e:1e:e9:08:bc:64:
bb:bc:08:6a:af:b4:ae:d4:81:e7:9a:db:a1:58:e8:
cd:56:3f:89:98:07:6c:40:5e:da:21:1d:8c:08:d8:
7a:08:3e:42:b4:a4:43:eb:cb:af:a3:c5:62:52:ad:
15:8c:ea:52:43:a0:c6:1e:cd:74:78:58:6e:48:63:
e9:82:bb:68:a1:5b:59:15:70:f6:6f:72:46:38:8b:
7b:a0:48:97:f7:60:d9:58:9d:49:c5:d4:59:f0:af:
27:ef:58:da:f7:4d:b6:8a:13:5a:9a:31:fa:b1:96:
4d:e9:35:97:57:c0:22:23:7e:53:bb:a5:1b:dc:28:
8a:f0:81:0c:24:45:75:94:ee:c5:4c:0d:72:3f:46:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:73:D7:B0:05:02:AF:1D:89:57:A7:A6:FD:96:E8:10:21:AF:9B:03
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e8:90:8e:46:fd:bd:6a:71:df:b3:1a:f4:e3:c7:e3:40:2c:
ff:c4:25:ec:14:09:3d:d7:50:09:32:62:b2:c3:1d:82:5e:59:
47:08:93:38:05:97:0d:14:1a:7e:1f:bf:cd:ba:4b:06:87:97:
cb:5a:b6:b3:3c:19:c6:ab:d6:5c:44:81:12:12:3c:55:a2:24:
b2:e0:07:f7:a3:00:9c:c4:d4:24:3e:05:0c:d7:b4:78:fb:b3:
61:67:45:7e:21:5e:1e:50:59:d9:2c:3a:4e:68:23:c4:62:f4:
2f:bd:19:41:f6:e4:38:ac:58:f5:fc:14:b7:7e:c6:9f:7f:25:
de:27:e5:f5:61:14:d4:d4:a8:91:24:89:7d:12:95:55:01:51:
1e:6d:b7:ba:ee:8d:7d:0a:dd:8d:50:5b:47:63:48:1c:2c:36:
da:04:80:cf:c4:20:7d:a8:ee:97:14:27:36:ce:07:b4:bd:88:
ac:5c:95:60:9b:83:db:6b:7f:bb:a3:31:66:20:84:e9:8e:3d:
4b:55:d7:7f:e0:ee:25:f2:38:16:69:e2:8c:3e:08:d2:0e:6f:
bf:ca:ec:23:14:1e:cc:99:f4:4d:d4:26:62:e5:c9:f3:df:98:
55:12:99:6a:37:26:06:a3:97:80:6a:23:f3:e0:24:18:75:7b:
19:33:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:43 2025 by rpki-client