
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: TCPp7j62CDjKopoyFHG5kAyaS1I3x6cEHBJKiixM5oA=
Subject key identifier: F7:07:F7:89:6C:E1:48:A6:31:F1:7E:2C:9B:D1:D4:06:D3:EE:B1:DD
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 0199FBEB0F34AAA43A386E28C417395F6509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0E59
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: K8+iFGgKAJRV50B68DnyxMw/zghhBVsIBq1n720OCC4=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0f:34:aa:a4:3a:38:6e:28:c4:17:39:5f:65:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=f707f7896ce148a631f17e2c9bd1d406d3eeb1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:b4:2f:ad:19:09:0b:67:b0:38:0b:e9:2c:
64:58:a5:e8:b1:24:a1:38:62:da:ca:17:27:83:4f:
45:38:d9:15:ad:d5:4e:bd:a8:2c:47:82:e0:cb:2c:
66:99:b2:55:4f:fa:0a:8a:d5:ec:c8:f7:db:13:a4:
ed:2d:74:1c:e5:0c:81:25:db:87:4b:fa:1a:1b:21:
81:d1:d5:e3:4b:4b:51:6f:0a:57:36:df:49:3b:f3:
5d:6c:6f:0d:9d:e2:a2:51:ed:b3:fa:03:02:4e:65:
7d:a4:0b:52:e7:6b:90:4a:c4:97:db:ce:c3:8d:c2:
45:a3:dc:a0:da:18:4d:12:fb:c6:6a:f5:4a:e7:69:
13:d9:c8:0a:8d:d5:a4:1f:eb:47:23:53:9b:67:a4:
c1:18:35:08:09:ac:b2:01:0b:c9:87:12:5a:66:97:
b7:33:0b:ff:eb:60:d7:c3:fb:96:74:e3:16:c9:ec:
22:07:a4:d0:4a:5d:ec:60:b3:66:e1:b5:d6:31:98:
46:13:3a:f8:31:c8:84:26:d6:85:54:fc:f2:57:97:
2d:c2:81:be:2e:c6:cd:aa:3b:9a:26:49:79:37:43:
fa:db:01:c6:57:6c:04:58:25:1a:43:c8:1c:9d:e8:
40:2c:ce:97:36:aa:83:3a:14:50:75:f7:77:34:fd:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:07:F7:89:6C:E1:48:A6:31:F1:7E:2C:9B:D1:D4:06:D3:EE:B1:DD
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e4:45:4b:4e:e2:72:62:f0:40:57:e0:96:9e:26:96:d9:47:
0a:68:4c:f2:6e:6a:f9:4a:90:db:bd:63:96:5a:d2:fe:de:cd:
dc:0c:83:d3:37:21:df:e5:75:5e:03:13:96:43:e8:7f:8a:7d:
03:c7:f4:cb:3c:14:3b:73:16:a5:28:84:f7:0e:b8:1d:80:08:
16:8f:ae:22:fb:46:67:9a:5f:5d:4a:fe:3d:4d:3d:12:d3:65:
d7:8b:0d:d3:7b:8c:34:d7:e3:85:eb:95:a9:2c:e6:9f:d0:5a:
57:43:a4:ce:d7:a1:7f:65:19:9d:43:6b:ab:93:fb:00:d0:3d:
41:81:86:1c:41:9c:9d:54:2c:5c:d4:41:35:53:b4:28:52:60:
b9:58:28:b8:0c:a2:c1:89:3d:ae:fe:94:81:5a:8e:f7:02:7b:
73:f5:f8:4f:e1:34:64:6e:d4:12:0c:75:f7:c4:b2:74:a4:54:
0d:b8:9a:e9:41:70:92:0a:64:13:d1:10:7d:b0:80:84:bc:55:
b9:b6:3b:96:46:90:5f:ae:13:93:a7:89:42:21:23:c4:a3:9c:
93:09:d3:f2:05:9a:a7:f3:47:ea:46:ce:05:2d:08:04:4f:67:
95:cc:80:e8:c8:01:81:9a:8c:c6:07:d2:0d:4b:fd:9a:0b:f6:
88:77:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:12 2025 by rpki-client