Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: WCbZFqj1LpzC/Lcs4g3mUCJedzjjg7+vBIKH+YfdSLM=
Subject key identifier: DD:65:80:E2:39:C9:42:A7:58:E9:E4:DA:28:07:46:72:07:1E:37:05
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 0199FD6B32AF5A2B50FDEFCDC45CD63B6513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 0448
Signing time: Sun 19 Oct 2025 17:01:24 +0000
Manifest this update: Sun 19 Oct 2025 17:01:24 +0000
Manifest next update: Mon 20 Oct 2025 17:01:24 +0000
Files and hashes: 1: 7SbxWOq-MRP5ULWQ2099XB6fnsw.roa (hash: 5+GTdZJjZ/hGlJyiza+hMgn0Xvc9DgVXyOpbY9SRSSQ=)
2: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: WuNxgRR+fR3jMRhs2xEGaVcm70SWQDk+P5b2G6Ljxdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:32:af:5a:2b:50:fd:ef:cd:c4:5c:d6:3b:65:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Oct 19 17:01:24 2025 GMT
Not After : Oct 20 17:01:24 2025 GMT
Subject: CN=dd6580e239c942a758e9e4da28074672071e3705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:08:b4:bc:3d:f1:94:4f:6a:3b:f7:dd:09:
94:26:9e:da:a1:b5:da:fe:d1:6f:89:68:78:81:e1:
0d:36:06:67:c8:97:72:a7:23:af:b0:b4:67:6a:3f:
9d:3e:f8:d4:22:2b:3b:6d:b3:f9:e8:45:10:55:dc:
3c:32:9a:a4:88:4a:16:48:8b:82:8d:82:14:6d:d9:
40:af:1c:0a:54:85:05:70:9c:2d:60:94:2b:75:22:
8d:8e:01:f2:ce:57:5a:71:c9:aa:3f:50:2a:1e:63:
5e:d1:8b:e1:db:69:15:2d:29:dd:3c:7c:32:65:fd:
9c:1a:25:fd:c3:1d:5c:b5:67:58:f7:54:9a:ab:e3:
22:f8:5d:6d:95:e4:62:ef:70:be:b8:43:12:d0:7b:
08:27:3e:44:32:0c:24:92:ca:91:86:87:84:de:34:
73:83:25:04:96:96:6f:a5:bf:75:e4:99:6f:6c:ea:
79:d1:6d:6d:13:d1:e5:38:c8:4d:ac:45:8e:62:87:
89:7f:46:57:cf:0c:96:4e:c8:f7:78:26:47:84:77:
53:ad:e2:9c:6b:bc:f3:4c:f9:b5:d2:24:53:5e:a4:
88:17:34:50:73:d9:85:8f:ea:42:a2:d6:e5:3f:41:
2c:58:52:97:1d:8d:99:a7:30:d1:d4:78:7a:49:05:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:65:80:E2:39:C9:42:A7:58:E9:E4:DA:28:07:46:72:07:1E:37:05
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:67:d7:38:6e:b9:d0:19:de:98:07:58:42:9d:94:93:61:fe:
11:3a:d2:c6:ef:8e:54:3c:86:47:cc:22:2f:20:78:48:a9:87:
4d:b4:4f:57:2b:a4:26:25:d3:db:75:c8:41:b2:b1:45:8d:fc:
3f:88:13:4d:2c:33:7a:2a:48:5a:ba:4b:76:d7:ab:dd:c1:d5:
06:d1:69:ba:81:fb:0d:a3:b9:ea:27:78:40:9c:ca:c2:e8:20:
03:41:a7:b9:72:0c:ba:92:4b:fd:de:86:70:6f:82:67:21:82:
28:61:03:97:b6:89:9c:a4:7f:ab:ba:5c:0e:1a:46:35:0b:5e:
6c:01:db:e0:4b:42:e4:3a:e3:a6:75:72:64:7d:eb:52:74:fc:
ed:dc:c5:80:fc:34:de:82:bc:e7:76:f5:e2:e9:04:31:d0:ba:
06:07:41:72:e9:f2:da:b0:9f:4e:0b:76:94:c6:5d:0c:03:c8:
4d:32:bb:c0:12:97:db:e3:f4:7b:71:1a:5d:f9:53:9c:19:92:
bb:7e:09:65:a5:97:b9:1f:4d:36:bd:34:d6:0d:a4:f1:01:8e:
26:1b:44:28:58:f0:72:ae:2c:f8:83:78:ce:93:af:c2:7c:59:
33:7d:e8:06:30:83:62:c0:16:aa:eb:51:47:4b:e8:7b:75:b2:
97:5c:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:54:57 2025 by rpki-client