Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: sNVNq4py4+6OPyssieQmNneEfkWOTRH6eauD6Basza0=
Subject key identifier: BD:75:12:FF:41:A5:C5:88:00:74:57:AA:99:6C:A3:F8:24:8D:D6:2F
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019A4F62CEB7B05218DAD03BBF42AEF0CE19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0683
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: 2CWxlLP-g2_NKa4Kkpj2mT541B8.roa (hash: mmFiMDnNmanIcg6TQLMQsrDR/+z17sNvs6gtqCoQhp0=)
2: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: IRUAm2vbBRKvcK99M0uCdjy8fWEzAh2mmFYoR5h44n4=)
4: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
5: zGpb-ZeCY1IKeaoUCFy7z97Xemo.roa (hash: mbhMc1h15zK2CFg+s3mq9POrXrfojhoCA2jehVwrtX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:ce:b7:b0:52:18:da:d0:3b:bf:42:ae:f0:ce:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=bd7512ff41a5c588007457aa996ca3f8248dd62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:5b:72:28:c3:7d:69:cc:ab:41:23:ea:69:
4e:2d:cb:52:31:de:93:6b:09:a0:4f:6c:6d:9d:61:
c6:bb:c3:ae:1d:88:fa:c8:ed:90:80:1f:ca:b6:18:
d3:d3:1e:2f:43:b7:05:47:07:a5:37:69:28:bf:83:
3b:41:01:e4:71:22:01:f5:88:89:a8:64:35:95:84:
90:51:44:4d:d6:d6:0f:f1:41:40:40:22:09:35:3c:
cf:29:dc:b6:d4:6b:cc:46:6d:d6:7f:37:42:89:6c:
2d:13:1f:80:27:eb:9f:bf:f0:9b:98:35:02:5e:50:
55:97:c8:63:9c:48:65:0d:82:b1:fa:6f:13:ca:37:
b0:5e:bb:b7:9b:4f:fa:5f:3c:78:b6:7e:77:cd:0a:
d9:8b:d6:9b:f7:9f:65:af:51:f4:54:91:1c:c7:47:
78:2f:7e:90:37:15:2a:22:2f:5f:91:91:1e:41:7e:
1c:a3:31:38:8a:24:03:ec:63:5a:cb:e9:6f:68:b3:
2a:c7:3c:8d:0e:5b:47:48:f3:21:5d:a7:59:bc:fd:
a2:e2:b4:96:5c:94:fb:e6:30:6a:e9:97:a4:1f:73:
ad:55:35:64:ed:34:4c:f3:78:33:3e:e9:78:5c:28:
ef:65:48:ce:98:cd:85:62:f3:d1:48:22:79:84:19:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:12:FF:41:A5:C5:88:00:74:57:AA:99:6C:A3:F8:24:8D:D6:2F
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8d:bf:d2:51:6a:5d:5c:00:77:2a:26:8e:4c:f7:2d:01:ee:
d5:03:e0:79:d2:17:2d:9d:29:b6:8d:54:38:b3:8f:01:49:4b:
b0:2f:f2:aa:1f:b7:93:34:65:74:47:41:58:8b:45:8b:5b:93:
85:69:87:d5:41:4e:cb:2d:fd:5f:05:fd:f4:21:a7:24:b4:4a:
c1:8d:ee:83:14:24:0b:25:b0:f7:fd:28:73:5c:3f:81:ae:40:
48:d7:79:1a:07:85:27:39:2d:8b:9b:36:2c:1f:50:f8:74:aa:
7d:f4:af:f7:7b:c4:c5:9a:62:3e:00:7a:fc:61:5e:b4:f3:fa:
dd:b2:56:72:73:d8:95:4f:b0:ac:a7:ee:c8:2b:88:bd:28:b2:
44:cd:13:1c:76:95:bb:57:8b:91:96:28:3c:c0:07:29:cb:06:
ea:d8:ae:c1:b4:e7:01:ce:66:09:e5:48:a6:4d:63:d0:e9:c7:
b7:6a:dd:9f:ea:2b:98:54:ea:98:85:b0:21:a2:f8:3e:f9:0e:
a8:fb:a3:bc:9e:a0:45:44:81:16:1e:b5:19:e0:55:e7:88:08:
65:58:2b:a5:da:3e:2f:ed:5b:72:36:c7:60:5b:bc:6c:76:c8:
e7:46:3a:97:de:19:59:db:c9:1e:f7:b3:d6:f1:d2:a4:cc:bb:
35:75:b8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:47 2025 by rpki-client