
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json)
Hash identifier: Dx6AmqtYpgHynqVr+zbsq5XyT20+FHakdBra5o/sOCY=
Subject key identifier: DA:4A:6C:1B:30:C6:55:45:4D:07:9E:57:90:88:75:EA:42:68:54:A1
Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Certificate serial: 0199FC8F21FADA6AE6CF3170DD2B1F3EA07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
Manifest number: 14A9
Signing time: Sun 19 Oct 2025 13:01:02 +0000
Manifest this update: Sun 19 Oct 2025 13:01:02 +0000
Manifest next update: Mon 20 Oct 2025 13:01:02 +0000
Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=)
2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: M9u9woR1mKjVByQWmUQhXOQ9+gbZI8a0kn4oY+GAjxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:21:fa:da:6a:e6:cf:31:70:dd:2b:1f:3e:a0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575
Validity
Not Before: Oct 19 13:01:02 2025 GMT
Not After : Oct 20 13:01:02 2025 GMT
Subject: CN=da4a6c1b30c655454d079e57908875ea426854a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:af:ac:0d:03:92:66:1b:80:93:0d:a2:bc:
fd:dc:fd:ad:47:26:af:4a:4d:fd:dc:57:67:f3:3a:
4b:7b:bc:cd:9c:bb:90:ff:b1:13:eb:25:6f:c2:1f:
94:13:7b:40:60:79:61:1b:8f:c6:6d:0b:2b:36:f4:
11:79:51:8b:9b:61:c8:55:64:f3:89:62:2f:89:27:
95:9f:69:ee:7e:ca:d7:c4:c7:a9:6b:a8:99:4e:0e:
ea:ee:74:40:4f:58:bc:fc:90:1a:7b:0f:72:99:23:
98:d3:98:71:f7:b7:01:59:fa:63:68:91:ec:8a:d0:
d0:90:52:f2:26:cc:7f:3b:0f:bb:f7:aa:24:23:f3:
4c:29:34:8f:71:ea:f6:52:f6:d8:da:b0:24:36:7c:
06:f1:04:6b:a7:56:e3:c0:93:d9:bd:b6:c1:30:31:
44:d6:1f:02:57:71:ee:2b:92:ed:03:94:7f:04:ae:
21:67:f4:ce:73:9f:f2:c1:41:26:02:78:36:24:0f:
47:b3:5d:16:aa:db:cf:16:4c:3f:a5:0c:a8:cb:f9:
0f:9b:db:f0:5f:5e:75:5f:57:66:c9:1c:2e:ad:57:
70:76:bb:0b:2c:12:c7:e0:f2:81:d4:9f:c6:e7:fa:
b9:d3:f7:b5:27:28:83:c3:88:33:98:4a:bb:f0:48:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:6C:1B:30:C6:55:45:4D:07:9E:57:90:88:75:EA:42:68:54:A1
X509v3 Authority Key Identifier:
keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c9:eb:92:97:f6:1f:e5:70:ad:97:dc:bf:1e:80:8a:ea:76:
c5:43:d2:d8:d5:dc:d3:da:32:cb:64:c3:a0:cc:b2:5c:19:3a:
02:55:6e:e6:e7:dd:6b:8a:d9:e8:6d:11:22:e4:02:e4:3f:41:
7f:43:c3:58:84:32:a8:2d:9c:32:7c:fa:5c:9b:7f:1a:26:27:
8e:e1:08:37:ff:60:c8:c5:12:ea:c6:f6:23:ed:38:2f:0b:28:
c6:b0:57:7e:7a:18:63:63:d7:2f:fd:a8:78:68:3e:35:48:74:
7c:57:2a:50:97:8f:62:29:78:27:a7:22:6c:ee:b6:bf:0e:73:
a2:20:fb:09:19:01:bd:ce:1b:5d:67:a5:bc:3b:47:ed:e8:0e:
ec:65:6f:5b:eb:c6:b4:49:9a:dc:5f:a9:81:cf:9f:b9:d8:b8:
bf:9a:5c:39:0d:64:e6:8f:96:ab:4b:1f:53:2b:72:a8:6a:06:
ce:f5:6c:ca:ac:b9:e5:1a:4c:d2:f0:d4:da:17:d0:5b:78:91:
76:94:38:2c:14:0f:7f:2e:aa:28:96:b1:2e:96:f2:4f:c2:d7:
ea:0b:03:a0:0b:35:88:f9:3c:66:27:b4:dc:98:ae:2b:c5:b7:
ed:92:6d:0c:53:cd:e6:56:5b:eb:75:23:30:43:aa:15:d4:a6:
59:4c:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:59 2025 by rpki-client