Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: ocAhpB+2iB38PehU6mz2jCov9klyhJso54EnB4n/gsU=
Subject key identifier: 34:5D:C6:D4:D4:C8:B5:F3:80:07:AB:D6:44:01:9B:69:0B:40:4F:A7
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 0199FD340BA4158327A5D0C8D98D44BAA262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:10 +0000
Manifest this update: Sun 19 Oct 2025 16:01:10 +0000
Manifest next update: Mon 20 Oct 2025 16:01:10 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: OXTYNIhZrahCk/IcR1QlE7lf0OFVYerFSdc+IISOFgc=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0b:a4:15:83:27:a5:d0:c8:d9:8d:44:ba:a2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Oct 19 16:01:10 2025 GMT
Not After : Oct 20 16:01:10 2025 GMT
Subject: CN=345dc6d4d4c8b5f38007abd644019b690b404fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:e1:3f:e7:73:76:32:96:98:a6:69:f0:5d:
af:d5:5a:2e:9a:4a:a5:f9:df:fa:9f:3d:f3:16:57:
f0:47:da:77:bc:e1:c9:9d:1c:e6:eb:03:05:ad:a7:
f4:c0:c0:6d:99:a5:ca:bb:c1:ea:b5:ea:cc:b5:5f:
63:c7:3e:10:6e:4a:20:4e:93:19:16:db:13:85:a0:
9e:13:7e:67:13:ff:20:4a:2c:58:31:ee:c6:ec:d2:
f5:5d:c8:63:c3:47:df:44:d5:e8:ac:ca:8b:ef:93:
8d:c7:46:fd:6d:91:57:c6:d7:65:6c:09:4d:52:cb:
02:b9:a1:19:88:2f:67:98:bc:f3:75:2b:cc:fd:a2:
8a:85:87:6a:9c:35:df:a5:19:97:0c:0e:07:48:a5:
ad:91:13:d6:88:fe:de:4c:99:f9:fa:15:6f:83:de:
43:55:18:72:c0:0e:a8:e1:58:e7:cc:1a:69:80:ea:
ec:a1:8b:d8:e9:95:54:90:d2:cf:a7:67:46:0c:31:
4a:7a:8b:69:95:88:7d:83:15:83:aa:09:85:02:dc:
55:98:ba:2c:06:e3:3b:a0:d9:af:28:fc:98:66:87:
72:68:bb:2d:d6:8a:d2:49:09:21:17:e6:c1:48:b5:
44:71:39:fc:8f:ca:63:1e:b6:29:8f:33:fd:a4:53:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5D:C6:D4:D4:C8:B5:F3:80:07:AB:D6:44:01:9B:69:0B:40:4F:A7
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e9:1a:59:dd:fa:d4:b2:6e:5f:38:86:03:77:2d:23:dd:0c:
a8:bf:de:93:04:68:48:e1:28:7f:88:bd:77:c0:20:38:5b:a3:
d2:45:54:6a:35:93:85:be:b6:0c:1d:36:a2:a2:cf:ee:93:2c:
c4:86:b7:e6:34:a7:0d:63:2d:be:41:c8:c8:ad:26:79:7f:f4:
28:c8:42:cd:05:88:06:46:77:6c:b0:1c:d6:fb:25:e4:a7:b6:
13:b5:8b:90:de:15:23:91:93:94:7c:8a:a6:68:ff:23:14:39:
f5:07:96:13:2d:98:c1:c6:8a:6a:a2:da:20:f3:72:4b:4a:a6:
09:64:80:2d:98:48:9b:e3:35:4e:88:11:13:f5:7d:74:e3:28:
ce:ae:e4:18:ab:02:61:dd:ca:ea:0a:6f:bd:c9:07:4d:c1:81:
22:06:5a:44:7c:39:5c:c6:a1:09:40:6e:9c:a3:fe:27:69:be:
1b:7c:3f:67:c1:f3:be:9b:53:08:55:37:02:69:e7:21:6c:af:
a5:f7:30:1a:b6:d9:ec:f5:16:e1:62:89:f2:5c:c2:74:81:23:
ac:6a:2b:ef:25:e3:3d:43:5a:97:76:af:9b:7a:79:29:ce:0e:
46:83:98:92:5a:b8:50:55:2d:e7:3c:db:0f:e6:73:28:f0:30:
54:29:6e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:55 2025 by rpki-client