Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: XserDTmheTnkhCBVh0rbltDleGCFxAnt0glQLaO1Xv0=
Subject key identifier: E8:85:30:E3:6C:C4:62:6A:EA:7B:0E:89:EF:AA:1D:A1:9E:32:EE:9B
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 0199FB7CF46133C6EF4A64416DDD875BF26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 0D65
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: /Mj68Tt76cUom+tXjMbr/4SdsZ/1+KYu3zr6PIkqEFM=)
2: cmLjyeJCay-rIpV13cL4nS3umqA.roa (hash: zv80BsoFgYMaUhk2eqxE9kG1WrpCEraiiqsDzPaa4r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f4:61:33:c6:ef:4a:64:41:6d:dd:87:5b:f2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=e88530e36cc4626aea7b0e89efaa1da19e32ee9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:c9:b1:6b:27:a8:51:64:1f:ce:c6:6e:72:
3c:d2:4a:91:33:1f:53:59:37:2d:00:62:6b:aa:04:
18:bc:57:12:94:c6:0a:a8:20:c5:eb:9a:6d:94:50:
ee:2f:0b:b4:b6:1a:79:a6:23:3b:cf:00:c9:1e:a7:
70:f7:8e:48:a3:5a:de:a6:19:41:b9:4b:95:7c:5d:
40:c8:f7:bd:25:51:21:1f:02:b9:80:97:2b:2d:fd:
b8:d1:c5:48:96:85:61:0c:40:02:6f:84:84:ab:9d:
72:b8:69:bb:87:df:c8:73:ae:96:07:c1:fd:5c:6d:
08:07:cd:b3:97:b7:ff:32:9d:8d:a5:71:e3:83:c1:
0b:ef:94:5e:54:a4:d7:51:99:6c:03:34:00:6d:76:
04:7c:39:47:a4:63:1d:de:31:76:5f:c0:98:91:b1:
c1:0e:85:14:ff:21:eb:e4:04:05:ec:0f:e1:bb:d0:
4e:ea:45:33:c0:8a:84:35:dc:fc:ff:80:5f:a1:f7:
6e:ce:31:2c:10:8a:6b:4f:8a:d2:f7:3a:42:bf:c3:
5c:98:f3:1b:12:a1:6d:f2:54:44:5b:a0:92:dc:b8:
56:b4:45:bc:a1:76:7b:a2:b2:95:72:bc:26:2b:6b:
5a:57:f7:93:10:6d:0d:2c:a1:bb:c8:e1:88:57:f2:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:85:30:E3:6C:C4:62:6A:EA:7B:0E:89:EF:AA:1D:A1:9E:32:EE:9B
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:af:45:ea:1e:26:99:4e:79:b9:ed:6d:fe:bb:0f:c5:17:a7:
35:d2:bc:98:60:e9:8a:91:88:82:50:67:4b:c8:6d:76:64:d3:
13:94:d4:c5:47:39:00:06:20:cc:64:d4:eb:b7:f6:66:b9:33:
cd:78:ca:c3:b1:52:9a:c6:4d:cd:ee:7e:32:49:55:3f:a9:39:
59:86:de:23:93:30:57:29:04:56:08:6f:a1:50:d4:d3:43:2a:
99:93:4b:0e:06:85:16:d0:35:55:7c:74:e4:97:b9:bb:0a:15:
d1:27:61:5e:f1:c9:aa:21:a1:d2:78:3f:2c:60:db:01:ce:c0:
82:ea:ce:76:a9:6c:53:1c:57:94:24:fa:62:50:72:9a:53:54:
5c:a9:4a:ee:86:43:cd:a0:00:47:9f:e4:4c:53:e8:88:3b:7d:
e6:3d:e1:a1:35:d6:e6:9c:e3:ae:46:fa:cd:32:83:7e:08:13:
c2:82:4c:52:57:73:f4:36:ad:12:0b:64:89:88:8f:5f:17:10:
8b:18:cb:c5:5a:98:f4:99:a9:1c:9d:d3:f5:6a:ce:3e:ca:ce:
71:15:4e:a5:09:15:f5:a8:5c:43:8f:18:8e:00:bb:f6:05:1a:
ba:7f:27:5d:a1:9a:f8:22:26:15:72:04:51:ab:92:b4:30:2f:
21:9e:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:54 2025 by rpki-client