Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: 59EvWw2Ko68KA0lTJM1gWY0TKxosHY2qFuIh/th5EFg=
Subject key identifier: AA:85:A3:37:08:E2:3B:FB:C4:DB:3A:33:A2:B5:39:85:84:8F:20:34
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 0199FC58781C4A1690A16586E21AD7531F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 0285
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: 79VsR-5nub7DUrhryJn99r0sSJE.roa (hash: PKoaa5fww3RYvMlarfjIhYGHHPB9uxMDQ5a1vOFmd9k=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: kEqmGPWw8s8FnXG2rsvE/1tU+cL5CxjkYyoG6kZKHgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:78:1c:4a:16:90:a1:65:86:e2:1a:d7:53:1f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=aa85a33708e23bfbc4db3a33a2b53985848f2034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:cf:e1:30:f0:bd:ca:c6:9c:df:66:4b:6f:
7d:ff:8f:c9:ce:c9:ed:9b:99:ed:d2:1c:c3:56:7e:
46:88:4a:d1:12:30:f0:1e:17:10:9e:81:d1:8f:e2:
7c:55:7c:39:20:29:13:07:07:a3:16:55:33:fa:cf:
bc:42:0b:4f:e1:6d:34:32:e9:cb:f7:34:61:82:95:
ae:03:f8:44:2d:32:56:cf:30:16:aa:0f:b5:63:50:
df:46:4d:a9:c2:82:e1:6c:a9:cf:fd:e3:3c:7f:66:
fb:04:28:d3:7e:f3:68:48:9f:55:89:44:5a:2a:62:
0a:82:2c:68:fb:d4:69:11:b4:cc:5f:da:7c:8f:57:
bd:bb:56:06:d7:35:37:2e:64:5e:58:8b:0a:28:10:
4f:1c:3a:72:a4:d3:31:db:3a:1e:9d:05:10:53:5f:
a4:9f:47:b7:94:33:57:25:6b:04:d7:f2:9d:23:58:
1d:d8:1d:03:f7:31:70:bc:af:25:83:6b:e8:98:d3:
4b:eb:38:74:05:e4:10:42:3c:f5:17:4d:e1:86:f5:
eb:98:be:7b:67:7d:99:08:c2:dd:99:df:4c:e6:4f:
d2:a8:5f:e8:54:40:81:75:67:f1:0d:a1:a8:99:b5:
9b:a1:5c:6e:c4:7f:47:21:85:11:c7:62:73:84:20:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:A3:37:08:E2:3B:FB:C4:DB:3A:33:A2:B5:39:85:84:8F:20:34
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:37:51:e4:a5:aa:f9:04:17:1d:5f:a7:f3:de:05:c3:71:6c:
b6:55:a9:da:97:ae:a6:16:f7:20:2a:97:94:0c:72:bb:6d:0b:
94:d7:cc:4c:b5:74:83:d6:b8:57:e6:5e:1a:83:d5:fb:0b:0d:
72:59:6e:d5:fd:0a:3b:0b:d1:c0:d1:b3:36:14:fb:d8:15:dc:
77:43:7e:fc:40:c2:95:8c:d1:93:06:59:ce:b9:0c:11:65:30:
aa:4d:27:f4:4b:08:20:65:fe:39:a6:39:2f:a0:21:ea:01:22:
c6:3f:36:d6:ee:b9:cb:54:f3:ba:2a:d9:78:9e:39:32:8a:48:
4d:11:e1:56:35:aa:2e:e9:8d:59:51:e4:b4:76:d3:1b:d9:bb:
5b:22:92:81:06:50:d3:ec:32:41:44:24:7c:3d:22:df:8c:8f:
d2:fe:0c:03:69:80:cd:06:15:ff:de:e9:6c:14:79:c3:79:c7:
b2:a6:29:2e:86:34:8f:49:45:9d:e7:f4:46:27:5b:51:46:2f:
5a:4c:b8:d0:95:52:81:5e:73:d8:67:10:f0:b9:31:9a:12:aa:
8b:4f:f0:7f:94:a5:b2:74:85:eb:38:aa:64:ad:25:d3:d7:c9:
0a:8a:67:f5:1f:70:b4:4c:96:7a:9c:fa:2b:90:9f:3b:a3:2a:
47:06:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:19 2025 by rpki-client