Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json)
Hash identifier: phHv5sJzROKB2rTi3Ia2snFI0rqOo1TTgnwIQR4IKuA=
Subject key identifier: 6B:64:EA:55:D8:C5:3D:E4:B7:C7:8F:1A:85:51:08:36:D3:D9:59:73
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 0199FDD8CD203E62E40DD6505589047855BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
Manifest number: 0C47
Signing time: Sun 19 Oct 2025 19:01:07 +0000
Manifest this update: Sun 19 Oct 2025 19:01:07 +0000
Manifest next update: Mon 20 Oct 2025 19:01:07 +0000
Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: NSjibnsZNJffRlBM6/93FfPU2krBpXXmp/1KbqTBA50=)
2: b23Ppzc40t1gh2jcC0tEEtTjq-Y.roa (hash: PLO31FJDvhLM1rCGRuVKcX7pZ7U9Xsy2KrFDiy0XrKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:cd:20:3e:62:e4:0d:d6:50:55:89:04:78:55:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Oct 19 19:01:07 2025 GMT
Not After : Oct 20 19:01:07 2025 GMT
Subject: CN=6b64ea55d8c53de4b7c78f1a85510836d3d95973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3b:16:66:be:fb:18:9f:ba:c6:a0:2f:f2:94:
d5:8b:04:01:66:1f:b8:7e:08:19:73:69:58:65:ea:
64:58:81:2f:16:9e:02:49:9a:ba:19:ad:db:f5:27:
3d:de:a3:06:57:28:1c:2c:21:c7:26:9c:e1:a7:e6:
59:d9:c4:e9:8b:95:ac:d0:d0:16:6b:67:89:96:bf:
4f:6b:74:b0:67:14:2a:99:7e:af:b6:d1:fe:d6:b8:
fb:85:f8:0f:39:ed:31:81:db:7c:8d:90:6c:f1:d8:
8d:85:22:18:b1:1a:33:cd:35:24:da:d4:e0:9d:8d:
f8:3f:56:12:1b:95:46:b1:b3:51:c4:e5:4f:50:fb:
b4:ef:f6:e6:7b:86:8e:63:ca:46:99:39:68:e0:7e:
04:78:70:73:e7:e5:da:6b:44:d1:bc:33:ac:68:44:
13:df:d1:7e:b0:db:be:98:b5:16:bc:22:a9:08:69:
a2:d2:52:87:11:28:8c:61:5d:57:e6:b4:3a:7f:40:
91:41:f7:f6:85:0a:45:c4:4c:fe:da:12:88:2d:eb:
71:ae:df:69:61:e0:96:54:32:71:20:d1:fe:8d:3f:
0b:34:12:1f:5d:4e:0a:3e:6c:8e:1a:cb:da:63:08:
03:7b:86:90:b1:c0:e9:c3:d3:73:33:25:df:84:75:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:EA:55:D8:C5:3D:E4:B7:C7:8F:1A:85:51:08:36:D3:D9:59:73
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d4:dc:20:e8:5c:30:6c:3b:8c:ca:62:64:34:78:58:ea:c1:
06:fe:bf:47:ef:ef:b9:2d:dd:12:68:02:0c:26:3a:0f:35:a2:
cc:69:a3:5a:ed:46:97:ef:7b:04:c3:2b:80:3b:6d:61:41:59:
3c:00:4d:0f:0c:e4:2b:62:15:57:e1:d0:e5:39:0e:0e:a0:3b:
f3:5b:c7:7f:68:01:29:bb:3b:cd:fc:bc:04:5f:b7:02:58:e1:
e6:f4:38:b9:7a:15:87:40:87:44:9a:fd:9e:2f:57:5a:66:15:
2e:62:82:b5:e2:69:21:0f:59:ff:f5:1c:65:39:cd:51:f4:3a:
f5:76:61:30:45:29:71:91:85:ea:a4:54:49:23:c8:78:8c:c7:
f9:21:b4:18:30:7b:5c:e5:d4:7b:5a:e9:9e:89:a0:13:ad:a3:
26:91:c9:23:6d:f4:3d:45:d7:32:ac:6b:c7:6b:98:11:bc:4d:
00:eb:a9:fd:89:12:03:7a:ac:48:8a:2e:12:a6:7c:6b:a2:f2:
19:ae:64:12:48:29:2c:5b:9f:d4:8c:28:a7:76:d4:b9:20:e9:
b0:26:62:62:74:d2:ee:07:7f:1c:42:b6:6f:c8:ad:6d:4f:80:
0f:c5:1c:d2:0e:a6:7c:77:ff:23:cc:76:8a:4c:f5:73:95:af:
3b:6e:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:53 2025 by rpki-client