Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: RGQzQwUTMeQYz4h/hQsZ8grdw3w3KxwkHAkRpZoZg+g=
Subject key identifier: CB:43:B6:12:12:00:97:9D:C6:B6:B3:25:ED:8B:AD:35:7E:63:E8:C2
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 0199FEEBF4CFBA3B92D6213FE15BE23846CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0B31
Signing time: Mon 20 Oct 2025 00:01:40 +0000
Manifest this update: Mon 20 Oct 2025 00:01:40 +0000
Manifest next update: Tue 21 Oct 2025 00:01:40 +0000
Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=)
2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: 3UsiYKPdexgmmMvkSbvhrMZdPonHEdegYV3XircoxpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f4:cf:ba:3b:92:d6:21:3f:e1:5b:e2:38:46:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Oct 20 00:01:40 2025 GMT
Not After : Oct 21 00:01:40 2025 GMT
Subject: CN=cb43b6121200979dc6b6b325ed8bad357e63e8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:21:cb:f3:62:6f:f5:0b:c4:52:de:59:59:
19:00:e0:45:d0:66:5c:25:b4:9c:00:95:73:2e:9e:
6a:6c:76:b3:67:3e:40:1b:0a:30:2e:2a:3a:a0:34:
a9:eb:8e:19:06:ad:5d:07:7e:91:ab:f2:6c:ce:8a:
1a:b7:78:f3:47:27:04:40:47:b9:30:e3:c3:b8:2a:
49:de:dd:81:8f:f0:92:e5:07:e3:4d:c7:7c:67:9f:
d5:d3:97:f8:c9:4d:07:44:b9:47:2e:48:17:69:52:
3b:01:93:58:d4:3f:da:ab:43:21:b3:f5:2e:f8:65:
32:15:5e:e3:7c:f6:76:c9:1a:6e:28:b7:e2:c5:ac:
25:cc:3b:7e:96:b3:ea:ce:7f:70:07:d2:be:9d:72:
a6:5f:f8:d2:b7:67:c6:d1:e4:12:ec:07:68:10:46:
fa:0a:64:f8:0c:74:a7:e1:54:c2:52:3b:34:c1:c5:
44:9d:e4:ea:0c:7a:7c:01:44:7c:0c:0d:2b:95:86:
eb:b6:a7:27:61:37:19:72:d7:52:cc:3a:f1:67:9c:
60:d3:b5:ff:c5:1d:60:49:5f:01:73:24:a6:a3:76:
63:ab:49:4a:f0:2c:c4:a0:c3:5c:b6:e9:d8:5e:6d:
4f:ad:42:05:0e:74:be:f4:53:15:97:a2:d2:7e:65:
0f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:43:B6:12:12:00:97:9D:C6:B6:B3:25:ED:8B:AD:35:7E:63:E8:C2
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3d:bd:56:ce:40:24:49:9e:22:f4:fc:ad:97:c1:52:a9:a5:
40:a8:fa:67:a3:55:9a:2e:a0:5b:78:7e:92:90:43:bb:3a:cb:
3c:08:74:00:b8:1d:e0:c8:fb:8c:6b:c3:e4:9d:58:10:70:61:
e2:d7:46:87:d9:6f:af:67:a1:30:8f:b4:97:f3:f7:c8:b4:d3:
f0:e1:21:a6:c6:81:9d:d9:3e:e6:93:82:2c:2d:ce:f5:04:71:
5b:60:69:90:4f:0c:01:b6:c2:c4:38:3e:c1:b5:48:3f:e4:7a:
65:29:1d:17:cb:41:87:88:e9:3b:f9:b0:b8:d6:ea:e5:01:69:
df:28:95:2f:ab:86:7f:fe:d4:03:a2:73:0b:87:27:d3:da:00:
c7:9c:71:50:d7:ed:54:7e:20:18:3d:b3:b1:2e:eb:d9:03:b3:
43:90:73:bb:6a:bc:b5:86:8a:21:f8:53:74:3c:e4:d5:ac:b1:
eb:6c:81:76:9d:f2:b1:bf:05:c7:12:c0:14:eb:74:32:b9:5f:
7f:a7:a5:a5:79:01:31:c7:6f:34:43:e7:7e:66:12:65:cf:fa:
d5:cc:c8:3b:78:6c:a4:83:59:e1:09:6c:dc:35:8a:90:59:39:
27:cb:8d:aa:7e:41:74:82:a9:38:5c:6b:73:e1:e1:49:11:67:
fb:43:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:03 2025 by rpki-client