
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: C9jJ0pE1LSaRHCS69uAdzCOI7bsp03D6XYBeFKkpOL8=
Subject key identifier: CF:B8:55:18:90:DC:97:F5:79:F4:F8:C5:A7:AF:FB:3E:69:2B:7F:55
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 0199FCFDAAF5E501E5556A3D08B15B03BB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0C19
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
2: KPlaq01Tm_7ZQDcSXoByiFXkYP4.roa (hash: pqcUxo+09w1rwwb/a+Pv1KMDwz7jBVowX0NYd3fbC7s=)
3: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
4: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
5: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
6: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
7: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: TIlmHal7knoRh9ous6gdD8Cho8uyHhxsF1H1iYu28KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:aa:f5:e5:01:e5:55:6a:3d:08:b1:5b:03:bb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=cfb8551890dc97f579f4f8c5a7affb3e692b7f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:d7:9a:47:05:44:de:de:fd:95:7d:9f:68:
33:96:c2:92:c6:6b:9e:cf:e0:33:68:b2:f5:ae:a4:
af:74:45:cb:b2:76:54:1c:76:76:a7:f0:c0:ad:e9:
33:29:8f:e7:5f:f1:35:82:21:98:36:db:af:a4:04:
43:46:fd:d9:1e:d7:71:dd:a1:ae:3b:2a:ba:5c:7f:
64:7a:e2:51:e9:7b:ba:52:8e:84:8a:b9:40:54:8a:
ec:63:c4:23:48:31:c2:7d:35:2f:70:74:3d:2c:24:
cc:26:dd:5e:cd:da:9d:5b:76:f7:5e:74:c3:db:c3:
f8:69:f8:57:db:5c:cf:2d:fc:85:4c:7d:d9:41:2a:
dc:76:6f:21:ed:45:cb:1b:b3:fa:f5:df:2e:3f:e4:
2d:c6:13:96:b2:6b:75:a4:35:de:45:34:0e:dd:6d:
00:35:91:5f:1a:f8:ad:62:8f:05:cc:2a:3c:5f:c9:
9e:f7:59:af:58:81:10:22:78:a3:da:a9:4c:ad:50:
33:cd:6d:1a:95:27:35:d0:2d:49:e8:c4:b5:8a:01:
f3:ce:fc:e9:67:13:7c:3e:9c:54:09:a3:6f:21:13:
d3:5a:98:9e:20:2d:cb:da:b3:08:78:fc:5f:98:c2:
a6:d6:49:6c:c4:a3:73:c0:94:e1:37:bd:ee:08:2e:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B8:55:18:90:DC:97:F5:79:F4:F8:C5:A7:AF:FB:3E:69:2B:7F:55
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9c:5f:74:16:2f:95:0a:98:93:e6:95:c1:aa:eb:2e:5d:4c:
55:8d:2a:72:27:aa:99:e9:c6:69:4a:63:33:cb:1d:d1:19:90:
87:c2:d2:60:43:a5:43:41:2a:92:bc:fb:3b:46:bf:6e:fa:82:
cc:56:09:55:86:29:69:bd:a9:b2:d6:6d:cc:bf:95:1c:cc:42:
e0:da:38:19:7d:51:63:b1:b7:4d:50:d4:d0:09:e5:64:72:10:
86:2f:8e:af:2b:ae:03:d1:6a:b3:26:04:67:e3:a2:f0:ae:e4:
f1:f2:23:39:ed:f5:ff:7a:b6:b7:26:bc:63:9e:2d:55:82:af:
d9:2a:a1:13:27:26:a2:8b:20:a0:f6:2a:3d:13:a8:7d:e8:df:
4d:6b:1e:83:e7:4c:95:38:8f:57:25:e0:5a:f0:c2:99:04:5c:
3c:58:93:20:cc:9a:f1:5f:f8:36:93:81:3b:aa:60:b7:9e:b5:
79:b2:11:a7:30:25:1d:a6:1a:b2:9c:94:0c:72:a9:c2:e3:65:
87:16:fd:83:fc:f7:24:33:c7:94:09:c4:d6:45:f6:25:4c:c5:
e5:45:ec:d7:c0:29:39:a1:93:a8:4a:5d:cf:d2:91:ad:fa:ca:
a7:bf:73:1d:e0:3a:6a:e1:cc:05:69:af:ac:0e:3a:e5:47:43:
41:37:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:21:48 2025 by rpki-client