Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File: _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier: IV8fYcAdOmwV9h9g24WQXQxo0XHhEkHj0uaQIWWqX2U=
Subject key identifier: 19:AB:84:25:65:42:A2:0B:57:6C:F7:EE:90:D9:6D:D9:AF:30:A1:5C
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial: 0199FE46E30F5EAD19325174039DDADBD0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number: 152A
Signing time: Sun 19 Oct 2025 21:01:22 +0000
Manifest this update: Sun 19 Oct 2025 21:01:22 +0000
Manifest next update: Mon 20 Oct 2025 21:01:22 +0000
Files and hashes: 1: D477qKV-aPF2n8oBjSmgcuod2kE.roa (hash: pyW25bQPJKBFO/7F+t0bHE29cloxJ5T2+KSGVCTHaws=)
2: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: lCrIXtkfLtj9aMjAslsamw58BCU6Ivy7nSE9ktxZ2NM=)
3: f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa (hash: Gw3xzXZPKuGmrAR2PrIl2quzqApN9VDz3sjokAQjW1Y=)
4: pVTqCR0peatjWSp4Jxs9VZ9aHR0.roa (hash: yjFFs3Sic83blHCl+jWhjWUGXXoo+/pXsN4k7VdljkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e3:0f:5e:ad:19:32:51:74:03:9d:da:db:d0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Validity
Not Before: Oct 19 21:01:22 2025 GMT
Not After : Oct 20 21:01:22 2025 GMT
Subject: CN=19ab84256542a20b576cf7ee90d96dd9af30a15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:91:9e:ea:cc:a6:e4:52:a9:8d:91:6e:8e:ec:
c7:d9:3e:d4:68:04:fe:90:d4:a0:7d:66:cd:6f:14:
27:0c:47:da:10:ca:f0:2b:bd:87:3b:c5:59:5a:3b:
e4:8a:fa:16:29:4a:04:96:b2:13:30:aa:04:7e:64:
52:b9:22:ee:83:f8:03:4c:87:b1:82:af:87:84:e5:
bb:1c:d8:e8:3c:d5:49:54:74:c4:c0:a1:a7:6d:cf:
2d:d9:84:ac:fa:8c:7e:e2:28:bd:3c:91:88:b5:36:
83:71:60:c8:5a:a8:73:bd:fb:35:1f:c6:d5:05:44:
ab:01:01:26:76:dd:7e:d3:f8:4d:64:7f:20:38:1e:
2c:01:c9:9f:fe:13:16:07:35:1a:ad:97:12:d4:52:
27:52:29:64:8e:8e:f1:cb:e2:ee:e2:67:64:aa:9b:
3e:af:6d:8a:1e:44:89:7e:67:df:e2:75:c4:35:79:
35:92:80:a6:c1:4d:75:28:5d:ba:ff:cc:f7:3a:a3:
f1:15:28:ed:33:d3:5b:74:7b:ca:e8:6c:14:1f:45:
31:0a:76:2f:40:da:21:b3:c5:fb:3f:4e:a3:0e:04:
2a:b1:1e:12:12:34:40:35:9f:2b:f9:54:f7:d3:fe:
98:14:fe:87:29:78:e5:f0:2d:3d:2f:e3:18:ad:78:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AB:84:25:65:42:A2:0B:57:6C:F7:EE:90:D9:6D:D9:AF:30:A1:5C
X509v3 Authority Key Identifier:
keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1e:85:19:59:04:9b:c6:cc:75:f8:af:91:35:f9:a0:4d:67:
c3:83:11:da:21:6a:a9:e9:72:1a:2c:99:cf:fe:b7:93:8e:3b:
2f:9d:23:e7:02:bf:5a:ce:29:11:16:75:9a:69:59:54:c4:c6:
54:5a:65:b2:09:73:68:34:ed:e1:ab:31:23:bf:16:f2:94:9c:
d4:3a:0a:42:e2:53:d2:d4:ec:84:71:84:2d:14:b8:f4:c8:ef:
ec:4e:a0:74:19:d5:2e:35:ee:8d:a7:30:ec:3d:db:8c:17:d5:
e1:90:62:49:ef:29:08:b1:cc:43:9f:71:39:13:12:6f:57:42:
74:0b:41:47:72:e2:cc:6d:f5:28:98:42:d1:38:ac:93:d0:b7:
64:83:52:7f:0c:ff:d9:2a:15:66:e2:6b:db:8d:fc:72:de:56:
52:d9:a2:71:22:7e:6c:db:88:43:39:9f:cb:02:b2:90:a5:6c:
95:11:06:48:2b:f5:f2:49:99:5a:67:bc:55:d8:f4:d3:70:b4:
02:72:49:b4:3a:fa:a8:c9:3c:1f:40:e0:81:31:4a:5d:fb:81:
40:6f:d7:ba:23:8d:fa:32:01:d4:87:11:c2:24:df:79:03:87:
6e:02:cb:83:2b:de:6e:bf:f9:a9:17:30:5b:e0:4d:a4:38:19:
75:2f:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:46 2025 by rpki-client