Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier: kUIPB+2fvsan9+U2dQXIS74t19nZ92dxe0PKsJP9ebc=
Subject key identifier: EA:7D:8B:8A:0B:93:8D:12:3C:77:16:CE:6B:87:F3:F8:D9:7C:74:95
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 019A4FD015890D2A348A918C03110F0EA783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 17:00:28 +0000
Manifest this update: Tue 04 Nov 2025 17:00:28 +0000
Manifest next update: Wed 05 Nov 2025 17:00:28 +0000
Files and hashes: 1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: Q7uyFoceG4is1UsCTbta8hoL/cb7QejihDzBAikgXMI=)
4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
7: oDzpo9P1CSTveVeS7HO-MB_9-so.roa (hash: TBsZnZ6Hce91sBTky4DlDhCeMhJRvacSOmd1DwZB9+E=)
8: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:15:89:0d:2a:34:8a:91:8c:03:11:0f:0e:a7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Nov 4 17:00:28 2025 GMT
Not After : Nov 5 17:00:28 2025 GMT
Subject: CN=ea7d8b8a0b938d123c7716ce6b87f3f8d97c7495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:85:a9:e9:64:db:88:a4:46:40:b2:f9:33:
3e:7d:a2:20:2f:df:3a:4f:0e:7b:b7:c9:ed:07:e2:
e8:18:1f:fd:5a:ba:f7:95:4c:42:95:b7:67:30:a8:
05:67:b9:b5:79:48:83:c5:fe:9d:5b:e0:b2:01:77:
a4:56:7c:1e:8c:7f:de:79:5a:7f:d5:6e:7b:41:46:
96:8e:6d:65:4e:0c:e8:47:3e:5b:30:18:80:97:f5:
56:62:69:b0:ae:39:1f:71:f4:39:95:6e:73:08:b2:
c9:14:cc:ff:3a:93:57:ea:2b:22:55:66:ab:03:36:
44:2b:cb:9e:77:98:d5:4a:c1:1b:e1:aa:32:45:31:
74:68:48:67:6f:72:c4:60:50:2b:e9:b3:58:2c:3e:
08:eb:00:d3:60:4f:8d:fb:9d:04:aa:46:50:29:93:
6e:13:fe:cf:31:b8:12:dd:f7:5a:9e:a9:5e:23:06:
85:ef:c0:10:53:05:dc:90:36:76:4d:32:49:95:b8:
f4:56:99:8e:92:83:77:3b:43:34:7a:63:30:4b:50:
bf:5a:0d:3a:71:76:ef:93:f4:09:0b:b5:81:72:9c:
ed:2b:ee:b4:df:68:91:c5:7e:a3:81:35:9c:d7:70:
bf:a6:e3:2b:24:73:3f:bd:7e:f8:f9:bb:bc:04:74:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:8B:8A:0B:93:8D:12:3C:77:16:CE:6B:87:F3:F8:D9:7C:74:95
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6c:8f:a0:21:0a:ac:1b:c5:52:3d:e6:84:c5:78:8b:f9:9c:
aa:54:3f:73:0a:02:ac:b0:fd:66:7f:fc:03:60:53:77:cd:97:
70:20:c2:30:81:93:80:fb:28:79:3d:f7:d1:e2:4f:a4:fb:ec:
d7:db:33:e4:f4:24:12:82:f0:73:18:f6:34:ea:cd:90:55:52:
f5:49:bd:1e:aa:c7:d9:a3:0d:f2:d8:e3:da:d1:06:7d:ef:a8:
aa:71:ac:03:74:37:13:f1:1c:e2:53:d5:1b:53:6a:fc:6c:20:
93:40:ec:1a:90:1f:0c:9e:cb:35:e2:84:0b:be:f6:7f:5a:24:
65:54:d6:0d:91:9a:c1:8e:bc:c6:ef:e8:26:11:89:fe:3a:e0:
61:35:e0:56:1a:a3:8d:8b:f9:14:e6:ea:09:b7:f1:83:6d:03:
82:45:08:15:ae:d1:a5:78:eb:c5:93:ce:6f:9f:15:76:e0:85:
9d:73:5f:ac:f2:50:4b:39:4b:dd:29:d4:a3:8c:46:33:20:62:
a4:a8:8a:0e:6d:2f:b1:73:56:16:d8:51:d5:7e:1e:ca:4b:8b:
4b:67:74:7c:50:03:dc:d3:ba:d1:65:7f:b4:5b:69:b0:0b:56:
bd:d0:1a:e8:0d:cd:1a:fd:8e:aa:bb:13:5a:2c:9d:e2:bf:45:
e1:f8:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:09:59 2025 by rpki-client