Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: CZi/kRqKHQaZ7E6e2qGn24uLnqHLITMPIwxw3hhs+eM=
Subject key identifier: 97:D6:6E:13:D5:0D:2C:B6:E2:56:67:8D:40:94:45:C9:D7:AA:93:51
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 0199FBEB664968EA23ABA9CC4A122D9A49D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 0594
Signing time: Sun 19 Oct 2025 10:02:12 +0000
Manifest this update: Sun 19 Oct 2025 10:02:12 +0000
Manifest next update: Mon 20 Oct 2025 10:02:12 +0000
Files and hashes: 1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: qy1Zxl7pH/BeFihlpE5f4nme8aaL8zvV1dTsmZzOPmk=)
3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:66:49:68:ea:23:ab:a9:cc:4a:12:2d:9a:49:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Oct 19 10:02:12 2025 GMT
Not After : Oct 20 10:02:12 2025 GMT
Subject: CN=97d66e13d50d2cb6e256678d409445c9d7aa9351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:48:a1:03:0c:7a:56:49:b3:cb:19:4e:96:
da:33:8c:22:7d:3b:0c:a9:d2:75:83:02:d7:1a:68:
56:31:35:29:94:83:b4:d3:46:54:f8:5c:df:b9:3d:
7a:1f:5e:05:c8:1b:78:9b:fa:ad:65:9e:f8:ce:f2:
6d:7c:b4:1b:10:91:c7:10:de:40:9a:a4:6b:44:f3:
a4:35:c8:9e:8b:ed:f9:5a:7f:80:70:4f:93:2b:b3:
60:dc:a3:97:b8:8f:4d:16:e1:2b:1f:83:fb:f4:39:
49:ce:11:ca:a9:11:b9:7e:6b:23:15:77:de:29:3a:
30:58:0b:e6:37:8a:02:64:dd:98:4d:30:7c:e0:1c:
62:aa:0e:2b:9a:d0:e0:26:b0:ee:b7:8d:27:98:03:
2c:2a:6c:30:fe:4d:11:1a:76:55:cc:77:71:d6:7b:
f6:b5:18:66:a2:51:c0:59:f0:71:23:ad:dd:9e:cd:
12:6b:b3:d0:84:4b:8e:09:c9:31:a4:61:60:22:92:
6f:28:7a:8b:1f:c6:df:29:d3:97:d7:a8:11:a1:65:
df:73:be:13:70:2b:8a:9e:cf:36:8b:fa:5b:8b:fb:
4f:85:bc:72:38:16:c0:81:d3:d5:cc:db:85:e8:2c:
9c:ca:5e:22:49:01:af:a2:5f:98:99:73:af:77:48:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:6E:13:D5:0D:2C:B6:E2:56:67:8D:40:94:45:C9:D7:AA:93:51
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:32:34:02:e5:9e:5a:2e:4b:f4:73:9b:27:36:f8:00:90:
61:f7:21:e7:df:15:cc:95:88:c8:ef:52:9f:dd:e8:d1:49:83:
20:e0:dd:84:0d:c8:ca:c6:dc:13:6a:cb:83:c5:1a:be:14:da:
ac:e2:3a:57:ff:1f:5e:0a:d0:ab:49:6d:36:66:f7:0f:02:b0:
29:02:fe:06:2f:04:c0:d7:c9:e2:a4:ea:b3:d5:bf:06:dd:7a:
81:7b:68:ed:83:61:71:36:2b:b5:f8:51:90:f2:4b:db:47:59:
3b:e1:1e:17:86:d0:10:fd:eb:d2:dc:89:08:37:c8:24:cc:72:
0c:3a:50:50:98:05:1e:5e:d1:6b:54:f0:b3:04:f2:5f:c5:24:
4d:ea:b7:04:89:c7:81:f1:ed:55:4a:44:23:6a:c6:54:f9:fe:
e4:65:a1:08:46:49:53:00:fc:ee:74:70:56:fd:8c:9f:ed:75:
ef:a3:ac:78:01:0d:09:d0:f3:00:6f:85:62:5d:e8:49:fc:a8:
68:0f:2f:20:4a:97:e0:92:f8:5c:e9:64:b8:58:42:6d:c7:cc:
cd:6a:e8:05:29:0d:16:f9:0d:eb:f9:1b:ce:4b:09:d8:9a:4a:
83:6c:3a:f5:c2:c3:54:3c:52:a3:8a:54:a4:b4:58:b9:90:7a:
c1:8a:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:06 2025 by rpki-client