Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: dKMQaEmmNXVKHCMBMwNgZFKGQ76zbvpSE4PtA0Vm0aU=
Subject key identifier: B6:8B:10:6F:F6:73:E6:BC:89:C3:F3:D8:DB:BC:9C:6A:30:D2:02:9A
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 0199FBEAD596794915F8C6AE7AD6E887B9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 0443
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: xDXMaopegOgQlIPuWoJMsULODL8Bt2ufWZRrK0Sgj3I=)
2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=)
3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d5:96:79:49:15:f8:c6:ae:7a:d6:e8:87:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=b68b106ff673e6bc89c3f3d8dbbc9c6a30d2029a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:e1:5a:b2:3c:c9:b2:41:c9:c6:c6:c1:c0:
1b:7e:df:0c:bb:46:50:b1:70:27:5c:aa:14:17:87:
ab:79:89:7b:9e:c7:67:55:d8:91:41:e4:37:8a:0f:
82:06:3a:60:03:b4:9f:cb:35:7d:b5:3d:c7:bd:21:
ad:8e:7f:2f:2e:ef:cc:6e:1b:97:9c:79:4c:0a:0a:
72:22:a2:7b:be:75:82:cb:64:ec:4d:26:7e:51:87:
47:16:35:73:f6:7f:86:f0:6e:67:7c:ad:6f:95:04:
f5:09:e7:34:0f:aa:66:de:00:09:51:10:da:79:b8:
36:95:9c:2e:32:f0:e2:f1:54:ea:72:fd:89:10:1b:
bf:ad:41:d3:78:39:18:95:15:e7:12:44:f2:a2:e3:
97:66:dd:8c:9f:a7:06:54:d5:aa:24:b7:64:ab:49:
d5:3d:fd:8d:6c:e3:a9:31:2d:d7:e4:af:82:ba:b0:
dc:ea:77:ea:80:09:71:15:12:37:3d:4c:0b:69:04:
89:66:5d:ef:1c:63:9f:16:4e:c2:af:26:29:0f:65:
bf:7b:06:a4:b8:bd:8f:5d:c2:a8:e8:01:e1:19:8b:
0f:af:03:81:16:cf:80:a7:79:c3:2a:66:df:98:a6:
8e:48:53:14:ef:b3:b6:97:15:0a:3b:85:7a:fd:2f:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:10:6F:F6:73:E6:BC:89:C3:F3:D8:DB:BC:9C:6A:30:D2:02:9A
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:52:97:fb:ef:4a:f0:b2:c4:96:b9:29:85:8b:71:65:75:ed:
ef:ed:f9:76:3a:13:09:a2:03:4e:e5:2e:2e:dd:eb:47:3c:59:
4f:f3:81:f0:2f:e0:b0:51:ae:8f:a4:56:9d:9d:d3:c6:bc:74:
2f:03:69:06:6d:b0:c7:97:24:c4:de:90:76:43:6b:0e:1d:c3:
cb:1c:f3:d2:48:a4:db:36:2b:ab:b1:7f:e7:73:c5:63:30:69:
01:41:36:30:c8:be:75:d4:d7:cc:33:4c:c9:d0:0c:6e:33:49:
a6:0c:0b:00:45:79:51:89:fe:9b:9f:64:1f:26:a5:fd:f6:19:
a9:1d:69:fc:6a:dd:e8:87:47:45:bc:b0:51:5c:62:7a:23:00:
87:00:4e:0e:54:e8:50:94:3a:2b:03:26:2c:ed:41:07:13:a3:
11:8c:c6:c4:71:b8:00:70:a3:fa:35:9f:c3:64:cf:10:d0:f0:
c4:92:8c:5b:12:a5:a2:fa:60:e8:82:55:ec:9a:ce:65:89:43:
69:6a:c5:0c:e3:19:c4:16:b9:3c:e1:0b:8d:e4:c1:fd:f0:f7:
1e:d6:5b:c2:ee:37:9d:b9:a9:8b:82:7d:a4:56:1d:2b:d5:db:
47:15:0d:f9:86:3d:d9:a9:2d:a2:d8:b0:7b:36:56:23:4d:79:
6a:9c:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:28 2025 by rpki-client