Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: hFauepPxozm+SKJrc4n0MYfKFaubCvxDT5EsPVQcd2Q=
Subject key identifier: 91:94:8D:C9:32:BE:DE:6F:80:CF:8D:49:90:36:51:8D:0B:EA:3E:EB
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 0199FE4762E5EEDA0F3C4C632A50484A4041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 1038
Signing time: Sun 19 Oct 2025 21:01:55 +0000
Manifest this update: Sun 19 Oct 2025 21:01:55 +0000
Manifest next update: Mon 20 Oct 2025 21:01:55 +0000
Files and hashes: 1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=)
2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=)
3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: JyvAiDR1fs/0c6yxVyAiyGgOsFYiVgaq8v7UDgif7SI=)
4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:62:e5:ee:da:0f:3c:4c:63:2a:50:48:4a:40:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Oct 19 21:01:55 2025 GMT
Not After : Oct 20 21:01:55 2025 GMT
Subject: CN=91948dc932bede6f80cf8d499036518d0bea3eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:19:32:f6:29:ba:b1:0f:ca:77:ee:e9:f5:
a7:1f:12:cf:10:35:e1:32:1e:11:03:ab:ce:76:9e:
ed:9f:1e:e3:13:24:f7:7f:1b:80:a2:c8:db:66:72:
a3:35:cd:bd:6c:51:dd:f4:df:57:c1:1e:28:59:1d:
52:ac:6c:6c:f4:a6:18:b6:3b:a6:0b:b4:d8:e0:8b:
6e:d5:7b:be:ef:fa:c8:56:99:3d:0d:1d:1a:fc:75:
ba:8e:26:c4:e6:d2:72:54:0b:77:97:f7:ba:1a:6d:
79:85:97:7b:03:ce:cc:eb:d2:71:4d:23:14:6d:c6:
af:80:b0:97:03:6f:2d:b5:4b:18:be:ae:b3:f5:4c:
d5:7b:05:a9:22:67:8f:54:99:36:a3:66:3f:d7:5f:
9e:70:92:1c:a0:65:13:f9:aa:f1:3f:0a:28:78:aa:
27:91:41:14:e1:49:a4:e2:55:3f:f1:28:25:34:71:
e7:cc:88:ec:2e:80:3d:12:44:24:ef:f6:2d:26:d7:
d2:4a:4c:70:30:85:36:3d:68:79:74:55:dd:07:5e:
3a:b4:a2:e9:e3:5e:87:d0:83:f3:c1:50:10:b6:0b:
8f:eb:87:78:6e:cb:a7:e5:97:22:12:7a:16:87:a6:
3c:7b:99:e4:e1:6f:cc:5e:dc:20:50:91:4e:da:53:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:94:8D:C9:32:BE:DE:6F:80:CF:8D:49:90:36:51:8D:0B:EA:3E:EB
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:e9:34:cc:f6:1a:14:5a:5d:7a:20:96:24:3f:dc:79:7b:
bb:36:71:38:50:05:52:46:72:81:13:b7:bf:0d:75:fa:0d:1e:
92:08:1a:71:ff:8d:00:09:31:26:19:69:bf:ee:e3:85:41:a2:
d4:24:f7:11:4c:ed:68:a8:71:3e:9c:a9:35:e0:bd:cd:f0:a1:
19:05:15:2f:d7:95:52:8a:42:fe:02:af:a4:79:80:c1:aa:d2:
87:13:5d:ac:8d:ff:d8:da:b4:f7:49:53:4a:26:84:4a:98:50:
6d:cb:6d:7a:59:45:3f:24:1d:a5:70:03:9e:5c:8a:dd:37:25:
d8:64:83:b0:a8:c6:ad:8b:ea:23:c6:b9:0d:aa:74:d1:26:af:
4e:d9:c1:95:7c:5d:b2:16:d2:ba:14:11:ea:bf:af:84:2d:4d:
d7:ba:48:1d:8a:f7:78:dc:f6:45:3f:92:82:73:45:13:44:94:
72:37:30:21:68:20:72:6f:fa:60:85:5c:ba:6f:be:0d:f8:2c:
18:b0:f3:ac:d3:02:cf:47:85:fa:f3:64:2c:ec:f5:d5:3b:4c:
60:1d:2f:3d:a5:3c:14:26:bd:0e:73:ef:a3:38:1f:f0:d3:58:
6c:3a:71:2a:37:9c:12:55:86:2c:67:e8:17:89:89:7c:b6:0d:
35:ec:75:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:26 2025 by rpki-client