Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier: n55VwPUdMJRTFcfCMtMwfmtEUkLG7MY+Yx9UXzukcb8=
Subject key identifier: DD:C1:9A:43:54:95:3A:B4:5D:EB:FF:FD:E9:D3:71:B9:77:78:10:2A
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial: 0199FCFD85A8CFF4FAA817B685F6F1C468CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number: F2
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 249HxpirTi_osbw5WvlBrcgIzks.roa (hash: yk0Ki2ByYsC3iFN0F5s91hPx79cwtd3H/FikkHXhlh8=)
2: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: WkSthYHYj5jyxXvMsWK56rt7D24dUU4/dx22MqxDT+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:85:a8:cf:f4:fa:a8:17:b6:85:f6:f1:c4:68:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=ddc19a4354953ab45debfffde9d371b97778102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:01:34:0e:8c:d8:8c:f6:c0:09:2b:0e:d6:9d:
15:cf:31:3d:d0:97:ef:e2:77:5a:49:61:3d:69:00:
3f:50:07:9b:1a:8f:1b:21:f8:ac:2b:71:59:a0:e1:
9c:ab:84:81:c6:19:39:d8:2a:af:48:33:92:1b:19:
dd:c3:4b:fa:a3:81:9a:32:0d:d3:32:f9:19:36:da:
69:2e:0f:9f:c2:9f:80:ba:fd:d8:ad:86:8b:16:51:
7b:a2:ea:8c:38:e2:e0:d1:63:fb:b5:0f:50:a3:68:
84:f2:c4:fe:25:a6:9e:36:24:63:ea:4a:97:a7:59:
b0:b2:e0:b2:da:13:d3:05:52:1f:2e:5f:8f:8c:fa:
e3:c1:0d:42:2f:79:fd:ff:37:dc:94:ec:21:d2:b5:
dd:50:c6:ee:14:39:51:2d:79:c6:5c:f6:70:4e:03:
54:68:d3:cd:92:c0:f7:59:77:30:6f:cc:46:4f:55:
bb:65:ae:15:46:dd:c6:34:04:53:be:33:1a:7a:70:
6d:80:4a:62:7e:dc:ca:5a:37:f9:ea:8b:c3:ee:24:
68:eb:47:9e:ec:e8:84:46:3b:f1:b2:3b:9a:20:be:
7d:04:06:76:3f:1d:47:2a:d1:2d:de:a8:b7:ea:f4:
e1:77:6a:dd:16:f0:70:46:72:92:0a:61:bf:da:a4:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:9A:43:54:95:3A:B4:5D:EB:FF:FD:E9:D3:71:B9:77:78:10:2A
X509v3 Authority Key Identifier:
keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0f:76:04:ed:64:22:44:15:1a:51:a2:5e:7a:29:9d:e1:06:
fd:76:9a:a0:66:96:d7:2c:88:0d:bd:7d:4f:e1:da:38:8b:27:
29:a6:18:03:a8:45:4e:f2:08:4c:06:c0:2f:01:ca:da:af:b7:
29:ef:4b:b3:e7:37:ae:e9:52:81:20:50:77:bc:0c:85:95:ee:
a7:c7:1b:8f:78:2c:e5:b0:10:b2:4c:cb:7d:3d:7c:6c:6e:8f:
d2:c9:1b:a6:34:c3:5a:64:db:be:8d:1a:11:76:95:aa:39:7c:
a2:66:f8:3c:ce:69:b1:30:34:cb:4d:85:f5:99:30:98:79:35:
39:14:55:50:b5:ad:49:aa:12:86:b9:ef:5c:02:84:e8:f6:cb:
a2:92:e8:cb:1e:d4:99:a7:1e:4b:8f:5c:48:91:a1:9e:13:9c:
39:8a:7d:a7:b5:6a:0c:be:e9:64:d5:b5:80:0d:26:60:06:d3:
a7:4b:54:1f:a5:25:c4:6e:24:17:0d:3b:40:b6:28:88:a4:18:
5d:d1:24:ec:a1:2d:b4:ba:0c:f4:a7:09:dd:3c:5f:a4:1f:77:
8a:8b:16:29:b4:96:06:5a:8c:9b:62:d2:1f:b5:2c:b9:3f:47:
be:c1:f7:02:9c:a5:93:6e:e0:61:21:25:25:cd:53:9c:0f:04:
5b:db:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:41 2025 by rpki-client