Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier: Pz4KWhnz+qUzfq7DWbrNUeT4hmPUQJRsKf1jl7YL6kg=
Subject key identifier: 46:F9:64:62:AB:31:40:60:86:74:32:D4:DF:95:23:17:B1:35:6D:79
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial: 019A01EBD6AE2B9360AD3DC524D75C48BEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number: 03C9
Signing time: Mon 20 Oct 2025 14:00:24 +0000
Manifest this update: Mon 20 Oct 2025 14:00:24 +0000
Manifest next update: Tue 21 Oct 2025 14:00:24 +0000
Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: iLPxqTVl9Slbklq7AtUUf2XF4Z+dtkVj/HMQ/i+cIX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:d6:ae:2b:93:60:ad:3d:c5:24:d7:5c:48:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Validity
Not Before: Oct 20 14:00:24 2025 GMT
Not After : Oct 21 14:00:24 2025 GMT
Subject: CN=46f96462ab314060867432d4df952317b1356d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:92:3c:29:e3:e1:b9:68:b7:77:f4:7a:1e:8b:
54:eb:cf:fb:06:3a:13:0e:bf:cc:74:69:cc:42:31:
13:d5:33:82:ea:ab:83:9f:13:cf:3a:29:9a:4b:50:
e8:e5:75:81:ad:0a:6c:c8:76:2b:de:fb:15:18:a8:
85:84:5a:f4:61:4d:fe:14:18:9d:b4:4f:a8:36:e4:
01:f6:4b:98:20:cd:bc:00:f0:0d:33:00:1f:f2:52:
4b:ca:78:e5:51:75:7c:5c:6e:68:7e:78:46:43:c0:
a6:75:5d:c3:86:3e:83:08:af:6f:fa:57:42:df:6c:
96:d3:69:b0:e4:3a:b2:70:98:69:b9:85:ae:39:bb:
ff:21:2d:f8:dc:54:ce:85:1c:40:23:c8:da:01:98:
f6:aa:01:4d:2b:44:04:cc:0f:c3:30:5b:e6:93:f9:
0d:a8:83:97:19:8f:5c:ef:ba:40:7e:82:1d:f1:d4:
fe:86:81:c0:cc:86:c4:c8:13:95:46:41:b9:20:63:
00:8a:18:7d:23:cb:e5:66:03:05:31:13:9e:3d:24:
ff:1b:b0:90:53:fb:1e:fb:7d:38:a6:7a:fa:6a:56:
de:2c:13:5c:2c:5c:59:e9:fa:ed:c6:86:10:77:7d:
d9:b8:2b:98:3d:fd:8f:d6:12:16:9f:e8:b0:ce:71:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F9:64:62:AB:31:40:60:86:74:32:D4:DF:95:23:17:B1:35:6D:79
X509v3 Authority Key Identifier:
keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:50:96:a0:78:37:88:da:65:05:0a:c9:af:b2:df:d7:fd:36:
0e:2e:58:d5:5f:63:c8:ae:40:3d:15:e2:43:34:17:df:c5:72:
e9:96:80:ba:4c:20:4f:37:c0:05:b7:9a:e4:be:36:3d:1f:bb:
16:ce:97:9e:6f:86:71:fa:a2:f2:a9:94:76:5b:60:58:6d:37:
d6:c6:d9:a6:43:77:8b:90:78:5c:7b:ab:0f:ae:05:56:fa:ef:
08:f4:fb:eb:08:62:87:09:31:d9:42:94:24:e5:3d:95:53:98:
77:57:48:d7:25:aa:4c:f5:26:35:64:88:c1:84:ef:9c:59:50:
be:fe:4f:dd:15:97:37:4b:2c:ff:fd:a2:cf:19:21:8e:cd:e0:
ce:7f:15:e5:a0:be:00:e0:3a:8d:dc:1c:7b:c3:5b:66:ee:03:
7d:e4:e0:a7:22:9e:99:a7:55:c4:89:86:e7:fb:a8:4e:fc:6d:
fe:12:3a:cb:94:47:ec:8c:d3:a8:2d:c8:a3:7f:db:da:c8:5a:
09:91:f9:d8:eb:46:d4:15:9e:b1:a3:f3:ef:05:2d:c9:dd:1a:
69:95:da:e5:d3:0f:48:9d:99:2b:e9:35:c3:b6:00:47:82:49:
a3:09:69:a5:21:ce:45:6a:0f:8f:c1:6a:59:cf:1c:08:ba:94:
db:ce:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:34 2025 by rpki-client