Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: utn48UZ8hpBDG/QXqaFaTjbHCTEKu0z4hA38t3OHt/4=
Subject key identifier: F9:F6:4A:4F:22:00:0C:17:E9:AC:23:C1:BA:FF:F4:01:9A:2B:BE:5A
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 0199FCC683F468809B774520DADED111F5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 13A4
Signing time: Sun 19 Oct 2025 14:01:32 +0000
Manifest this update: Sun 19 Oct 2025 14:01:32 +0000
Manifest next update: Mon 20 Oct 2025 14:01:32 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: /9Cof/fCss02Rp3w3V4/rk2x9PrpVQyTa8OkP9wA3m0=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:83:f4:68:80:9b:77:45:20:da:de:d1:11:f5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Oct 19 14:01:32 2025 GMT
Not After : Oct 20 14:01:32 2025 GMT
Subject: CN=f9f64a4f22000c17e9ac23c1bafff4019a2bbe5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:df:5b:d7:7d:69:6c:de:35:08:cd:24:6b:
72:5e:5a:6b:d5:69:e2:12:d1:04:92:bf:7e:78:2b:
93:fe:1b:cd:67:6a:ea:12:21:58:5d:18:b5:90:9d:
ae:c4:d5:a4:a9:b7:ec:8a:1c:d6:7a:69:41:51:76:
f5:a8:82:86:c2:0c:76:1a:6a:79:04:5b:4b:d0:e8:
19:0e:9f:b8:fa:0f:d7:b7:c7:ac:f7:98:5b:b8:30:
3d:a9:a4:14:d3:23:bf:11:93:aa:28:4b:71:57:29:
3c:9a:38:b4:a8:2b:a5:e6:3d:4a:e3:bc:a6:35:88:
6c:26:06:7d:b9:02:fd:dc:5c:4d:04:5b:57:29:ba:
8b:81:9f:c0:20:7b:17:3b:02:85:75:74:dc:ba:b4:
49:64:d4:27:d1:1c:d3:ea:e9:7a:93:07:0b:12:4e:
43:dc:91:21:65:6f:e6:3c:a0:09:6b:66:dc:d0:b1:
8c:48:ba:57:f1:c6:fa:08:51:f0:07:d7:cd:36:47:
c6:0e:f4:e7:78:50:4b:19:16:00:8a:70:34:81:99:
31:9b:ac:7c:53:6e:72:f5:ad:ae:f7:a5:5d:fb:47:
8c:91:13:70:f7:f3:24:9b:c8:d1:cf:a7:ad:b8:c9:
b5:64:b9:59:6a:6c:36:a3:eb:a8:68:9a:d4:c4:9a:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:4A:4F:22:00:0C:17:E9:AC:23:C1:BA:FF:F4:01:9A:2B:BE:5A
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4e:f2:cf:ec:9b:43:0c:5d:f7:b2:ea:74:c3:73:1d:c4:54:
b6:c1:d2:1d:1d:28:c8:8f:43:78:f2:1f:38:9b:b5:65:c6:8a:
e1:c0:eb:6f:32:a9:f3:06:2e:ca:fb:97:ce:28:2a:69:14:0c:
6c:4d:e0:bf:83:84:db:77:53:f3:b4:cf:57:88:56:52:7a:dc:
fc:04:54:27:23:5c:75:a1:b9:db:63:4d:b0:32:10:5d:0b:e2:
3a:86:f8:2e:42:fd:e1:3b:7f:23:c1:59:62:d3:3e:0c:fd:23:
8a:69:e7:de:f7:c9:74:e3:49:42:0e:4e:1a:1b:f7:b6:36:bc:
88:69:aa:93:1e:53:cc:58:d9:0f:7a:b2:9d:a9:10:7a:d3:1c:
14:de:e6:c6:92:e5:4a:0c:8b:84:e5:71:7a:d2:45:96:e4:da:
21:bc:18:d7:7e:e8:9a:91:e4:3f:82:c2:06:40:44:08:71:2a:
fb:2b:3b:67:ed:3b:c2:78:94:98:64:fe:da:3a:29:b2:01:34:
c4:b4:94:3c:26:7c:64:82:e9:8b:5b:ec:90:3c:24:20:d6:f9:
26:2b:18:4b:7a:23:c8:cd:5e:16:2c:02:2c:ae:00:2c:f6:29:
14:35:54:2f:98:e2:00:e2:41:e0:77:f1:16:12:6f:9b:07:b6:
0d:28:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:48 2025 by rpki-client