Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: Z37+pgft03qEpvUQIcjjcWG2zIuqM+7EFmfTKUiukwQ=
Subject key identifier: 87:82:DE:6B:5B:D1:21:10:4C:65:22:D1:AF:EE:82:F5:A2:AB:89:29
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 0199FBEBA2E6AF1221C62DD1584E3924F7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0A96
Signing time: Sun 19 Oct 2025 10:02:27 +0000
Manifest this update: Sun 19 Oct 2025 10:02:27 +0000
Manifest next update: Mon 20 Oct 2025 10:02:27 +0000
Files and hashes: 1: TP6kkH0vZwohnuu8LaNGGzK2bx4.roa (hash: 5TOk/KFa4qvBJB1w3rUK12jUjLhZzxVEKo+9hT469YM=)
2: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: O8cB8xKPGns/XJx1JjhWqXFNll0Kr28WNKbPzJ9qeY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a2:e6:af:12:21:c6:2d:d1:58:4e:39:24:f7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Oct 19 10:02:27 2025 GMT
Not After : Oct 20 10:02:27 2025 GMT
Subject: CN=8782de6b5bd121104c6522d1afee82f5a2ab8929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:44:c5:38:ca:1b:9f:8f:72:a8:ce:7e:e6:
c0:3b:84:db:12:30:43:e1:a3:55:95:41:0d:be:55:
9c:a1:24:26:c3:85:cb:8e:e7:11:ba:e3:b3:8b:e6:
31:70:e3:a9:ea:d6:d1:3a:f7:4d:a2:84:78:c7:7b:
36:4b:46:f8:43:67:cb:04:03:41:c4:57:33:38:cc:
63:ec:1c:c7:a3:93:b3:ca:f5:42:be:ca:5a:44:6c:
e5:fd:b6:e5:f8:6c:c7:15:b6:33:03:41:a2:6c:50:
c9:03:88:16:cf:00:9d:d5:fd:6c:0d:e4:3c:bf:3c:
77:44:87:fe:02:0f:08:c1:78:ca:dc:c2:37:31:fb:
98:78:9e:39:af:7b:e7:07:30:b1:99:ff:f8:b3:94:
6d:69:4b:e9:85:f9:be:c0:e6:1a:d5:92:f3:8e:75:
0b:8e:85:72:60:ec:66:59:f3:71:4e:98:98:70:63:
17:4c:70:f1:41:ff:38:da:bb:96:29:6d:5f:09:3b:
1d:ef:a0:b9:86:c4:2f:81:ce:fc:6a:4b:e4:fb:51:
0e:6e:38:8b:b0:ec:a6:b2:f7:ed:c2:27:ec:f9:07:
3c:3e:ef:5d:99:e7:23:3d:2f:9e:9b:4c:ea:4c:f1:
87:e9:76:93:22:52:cc:fb:cb:1c:1f:99:68:7b:cb:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:82:DE:6B:5B:D1:21:10:4C:65:22:D1:AF:EE:82:F5:A2:AB:89:29
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ed:2f:0c:7f:5b:26:7a:f3:23:6e:80:eb:c6:cc:f8:0a:ac:
63:66:01:5e:e0:1b:bf:f7:88:a2:cc:2f:50:68:15:bf:f3:a9:
72:a9:75:69:6a:80:4d:79:73:fa:0b:3a:59:05:b6:f8:ef:b1:
08:2d:84:31:57:9a:6d:1f:e2:fa:53:ef:91:f9:c8:10:41:1d:
13:80:f8:d2:f5:f6:18:a0:9c:03:89:5f:85:20:ac:24:9b:81:
88:ed:f3:45:ce:e0:a3:d0:a7:d6:00:71:df:9f:32:f0:f9:93:
c9:f1:5b:3c:d3:f6:99:d2:70:3c:e2:5c:fa:3b:f1:5e:f1:13:
8f:44:52:a9:0b:0a:30:9f:69:51:29:bc:cc:28:21:c6:99:52:
50:3f:5c:ea:57:93:8c:1c:f1:47:78:95:58:25:3c:bd:20:47:
1a:b5:97:2a:9f:1c:e9:8f:31:35:1e:07:46:f3:fd:b4:ff:de:
25:4e:b9:66:0b:ab:76:72:fb:89:82:19:43:50:63:23:be:2d:
28:1f:8d:a3:d1:ac:41:a8:bf:35:92:52:f4:1a:9f:f4:a8:57:
d1:e8:af:06:da:71:0e:20:ef:82:1f:7c:fc:01:cb:e5:4e:a8:
cc:6d:53:02:8e:70:e0:c3:39:ee:b9:a4:e1:cc:86:2a:ed:af:
3d:33:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:38 2025 by rpki-client