Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: r0JCuTQE9F+oX/VhE3CTw5zWcxP1WJ/9LlOt3YjdNs8=
Subject key identifier: BE:21:54:BA:E9:75:B9:09:5E:83:FE:C5:2F:F9:5E:6E:72:B8:3A:60
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 019A4F621599118A4F2593F9CF6AB662FCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 1062
Signing time: Tue 04 Nov 2025 15:00:19 +0000
Manifest this update: Tue 04 Nov 2025 15:00:19 +0000
Manifest next update: Wed 05 Nov 2025 15:00:19 +0000
Files and hashes: 1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=)
2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=)
3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: AhKbCUGqTVRDXX/jaPrjpnJo4coQk7Q7hCNIhB6ief0=)
4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:15:99:11:8a:4f:25:93:f9:cf:6a:b6:62:fc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Nov 4 15:00:19 2025 GMT
Not After : Nov 5 15:00:19 2025 GMT
Subject: CN=be2154bae975b9095e83fec52ff95e6e72b83a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:cd:98:5b:bf:cf:11:26:47:28:73:a1:20:
75:82:c1:c1:2d:6e:7a:ca:12:b1:d6:7e:40:49:2c:
c0:79:40:87:43:e8:41:6c:ae:e2:22:5a:98:18:d8:
6b:1b:d6:1f:b4:44:25:1b:0c:07:38:8d:68:44:ac:
bc:64:7e:a1:6e:a8:68:23:ff:d7:da:30:a9:26:d1:
32:44:b1:d9:88:7b:cf:0e:be:0b:ef:09:26:a8:ad:
40:e1:23:34:20:da:aa:df:9b:4a:1f:11:24:9c:83:
17:a5:42:29:9a:c5:bc:3b:2c:96:cf:75:53:ce:d1:
b9:21:6e:98:78:2f:06:d5:a8:2e:e9:e0:e0:2b:ac:
c9:95:ac:c4:68:3e:e2:6d:b3:be:91:75:c1:93:59:
e8:7d:ba:e3:bb:74:81:44:1f:70:6d:6c:d0:a8:20:
5d:26:5c:bb:ff:b7:96:c7:79:72:74:ff:e5:fb:15:
83:0f:7e:b6:ef:2e:a2:42:5d:37:8e:f0:64:3e:bd:
4a:10:f0:9f:8a:0c:34:d7:4e:76:c3:9c:ec:08:01:
e7:31:ad:e8:c3:43:07:14:b9:2d:aa:91:06:34:de:
36:06:3b:f1:30:a4:07:4b:fd:07:5f:31:aa:35:74:
86:68:64:09:67:2a:47:50:ad:11:71:bd:70:d2:cd:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:54:BA:E9:75:B9:09:5E:83:FE:C5:2F:F9:5E:6E:72:B8:3A:60
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d8:61:d7:16:4f:b1:e2:06:e5:a7:ad:14:9c:22:32:26:6f:
ca:9d:5c:9e:b7:68:b4:d8:b6:15:36:25:10:b7:d0:6a:1a:22:
c2:e6:02:c7:c4:96:f0:f4:cb:05:ee:0a:fd:7c:6d:41:2d:54:
f6:cf:be:29:77:80:28:ce:96:ac:f1:24:d0:c6:be:bd:cc:be:
2f:a1:3a:e8:f2:27:44:63:07:6e:b8:71:f3:b8:b2:0a:cc:67:
2c:49:fc:5a:dd:fc:68:4d:19:48:a1:08:8a:d2:21:dd:19:34:
1a:37:5e:55:d8:ba:b9:9f:f3:d9:e2:1f:b6:03:4d:e9:0a:f8:
e2:6e:66:70:dd:49:ad:0d:97:a3:8f:ad:41:9a:86:f4:2c:9b:
ee:d1:a1:f4:d4:6c:57:bf:1f:2a:40:80:49:7c:55:15:65:9a:
86:d4:cc:4b:90:30:aa:9a:bb:c6:5f:92:83:77:2f:65:af:ac:
8a:06:29:6a:43:2e:c6:8f:17:93:2c:17:5c:36:b3:c9:5f:22:
d0:ec:28:7e:aa:e4:b1:04:68:4f:0d:07:4c:d3:35:eb:3d:8b:
ef:0e:d2:e9:92:15:c0:3d:08:76:65:8a:65:32:fe:38:92:ce:
af:8b:ed:93:c0:f6:55:6c:8e:1f:e0:57:e6:c9:f3:97:8e:da:
7a:86:d0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:03 2025 by rpki-client