
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: tFJkjGNHNA0/oFlAlim9TDPM7dpSXWqYtnEcl9Rd9LQ=
Subject key identifier: F5:A3:29:E5:33:F7:81:74:1B:71:88:74:59:EC:41:41:16:4C:2B:42
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 0199FBEBD9669DE9888F8864621F66650C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 0CE2
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=)
2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: F4czhBwywt0W8N7XAgRS50CPYTWp/1MK593feVubvm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d9:66:9d:e9:88:8f:88:64:62:1f:66:65:0c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=f5a329e533f781741b71887459ec4141164c2b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:9c:48:3c:21:74:7f:ef:d5:04:32:38:4a:
e2:48:7e:f0:00:f5:a2:49:25:21:0d:17:7e:87:95:
56:92:72:8c:af:f7:b0:d3:23:bd:61:33:c9:0e:a3:
9f:92:dd:d8:a8:a5:b4:b8:08:38:9f:2e:75:85:21:
ef:10:27:5d:63:3b:1d:bf:66:9e:c7:5f:32:90:72:
a2:cf:b4:7f:d3:91:b9:d0:ab:03:4a:8a:c3:01:18:
68:e0:e5:a4:c6:fa:d7:70:7b:6d:b1:99:cb:de:f1:
ed:16:08:e1:e3:80:0b:3f:31:12:b1:aa:a7:1b:9c:
45:fb:36:10:16:54:6c:6f:8b:3d:7a:2c:b3:32:6b:
fb:12:10:b2:f3:79:3c:fd:c1:c5:83:1b:c5:f0:08:
0a:58:16:68:c3:b9:32:6f:29:cc:9f:0f:62:4d:af:
17:ee:e3:7b:f7:a2:59:ae:9d:62:53:74:4f:0d:2b:
ae:57:eb:e9:84:e7:0f:cc:af:c6:48:9f:7e:3e:4a:
7f:aa:42:5e:b3:fc:f2:9d:8d:1d:3f:17:44:e6:32:
b9:52:d4:d9:e7:9d:b9:e2:44:4f:63:41:85:34:1c:
76:cd:26:71:e6:59:16:70:b3:5d:40:15:c4:20:4c:
be:83:cc:3c:b2:87:9d:2c:c6:0c:db:69:b8:34:93:
34:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:29:E5:33:F7:81:74:1B:71:88:74:59:EC:41:41:16:4C:2B:42
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:87:5a:31:29:e9:c7:28:0e:66:5e:a4:ff:82:71:bf:d1:
79:8e:75:0f:3f:34:f0:a7:61:e6:59:e2:70:fc:e3:87:99:5f:
cb:53:15:04:d8:2d:d3:e5:cd:01:fe:ac:dc:16:14:22:4a:1d:
78:25:7d:a9:1a:26:13:d8:a1:76:4c:7e:c4:6d:da:ce:6c:ab:
56:59:7a:e1:57:16:da:dc:f7:f3:87:55:ef:c7:85:18:18:da:
03:99:f6:8a:5f:ef:d5:ff:fa:90:64:81:83:02:d8:9b:79:4e:
9c:76:5d:49:97:3c:2d:e0:ae:9a:2e:bd:6e:1f:da:3c:25:06:
09:bd:2b:20:7d:a8:e2:4b:c7:82:a2:01:c2:fd:6c:64:dd:0f:
65:0c:0f:6b:7d:e2:b9:c8:8e:cb:bf:8e:62:9c:a9:76:d7:86:
5c:b0:51:d2:8a:82:6b:eb:bc:49:b3:c9:60:41:7c:a6:27:c2:
47:0f:b9:bc:84:01:f9:ff:65:ea:ad:a5:74:b2:57:0a:41:ba:
71:4c:61:84:b6:bb:17:32:15:14:f5:13:43:3b:7a:aa:ec:36:
ad:8b:f0:77:e2:18:44:2c:df:41:f6:57:c9:c5:a5:d4:2b:36:
3d:5e:0b:4d:2e:58:71:30:f3:e1:3a:8e:2b:87:c7:c9:48:d2:
80:43:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:43 2025 by rpki-client