Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: it0fz1Q69IGZLVYOdOJ6VVAMZmwNz+wOwVgadXBReEA=
Subject key identifier: FC:99:65:FC:1B:A6:20:53:81:9E:AA:AD:E3:72:F0:B7:D3:70:C8:FE
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 0199FC58446BAF06C1714D8777417ED88607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 135A
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: 2UhUJqxPIWzcnRid8PindCk1GOsvkzlGnYw3G5/8gEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:44:6b:af:06:c1:71:4d:87:77:41:7e:d8:86:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=fc9965fc1ba62053819eaaade372f0b7d370c8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:01:2c:8a:78:1e:5d:be:59:f4:3a:8a:59:
38:a8:15:29:71:81:6f:77:04:14:f4:9b:23:c1:85:
c2:cf:3c:66:a6:08:67:6b:8a:27:19:9d:38:91:3f:
7e:bc:55:6e:3c:ef:b9:4f:c5:24:ee:43:ef:7f:21:
da:8f:30:91:6e:4c:0a:37:46:8d:90:08:99:99:2b:
6c:93:f2:0f:aa:13:2e:78:e7:1a:d4:1d:b9:a4:35:
78:78:3b:09:c2:15:ce:c6:8d:00:5d:5a:bf:15:b6:
d8:a9:a9:67:ee:48:bf:c5:de:55:ab:ea:16:95:0f:
b6:74:63:4c:0e:8c:b9:5a:bc:b5:41:89:72:35:a9:
aa:91:fe:ee:e2:6a:fb:ac:4c:1a:c7:24:25:43:9e:
99:66:a0:72:af:df:6c:a6:ba:94:5c:1e:3b:4d:49:
4b:67:b8:3f:7b:5a:1a:f2:2d:9a:f5:2c:79:00:db:
b5:f1:74:6e:4f:78:90:60:63:ae:bb:01:a1:6f:a5:
46:72:43:47:dc:82:d5:95:cd:d7:5f:38:61:6a:e4:
c1:a0:bc:e1:71:6c:ae:bc:0e:da:9e:51:5a:29:25:
7f:47:46:ca:e5:c6:54:92:62:ae:4f:95:91:7b:a2:
2e:b5:b5:9a:5c:31:81:e3:ba:66:16:c7:55:86:19:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:65:FC:1B:A6:20:53:81:9E:AA:AD:E3:72:F0:B7:D3:70:C8:FE
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:75:f0:96:77:0c:01:1a:8f:1d:7e:0a:4a:e3:94:3a:45:4f:
8a:ca:3c:01:6a:0b:9d:b2:e0:20:4c:d8:9f:61:b0:8f:8b:75:
80:9a:b7:42:ab:47:e3:7a:b1:97:47:d6:5b:cd:a2:68:db:c6:
43:77:96:fb:44:d4:18:ff:7b:ee:62:9b:02:60:a9:9f:2b:68:
62:c7:39:ee:fd:fc:b3:f3:2e:95:5d:10:80:47:b4:55:02:32:
50:c2:eb:3d:bc:e3:76:b2:94:fc:a5:d7:14:6e:16:0c:98:36:
d9:3d:be:6a:6f:5e:91:32:84:e8:b6:62:f6:99:f1:7a:73:a1:
38:4b:71:45:4c:80:6d:b5:ad:c4:00:60:1f:34:a9:04:be:d5:
93:96:e0:8f:d1:7b:f7:7f:09:7d:37:8f:4f:b8:64:e4:3a:98:
cb:c0:95:32:1e:d1:e0:2d:db:4c:33:a3:0f:da:8e:81:8e:0c:
7e:56:35:39:32:3d:03:35:6f:21:e3:d9:e5:12:00:35:2b:62:
83:fc:1b:f6:b7:12:61:94:89:e8:ba:2e:1d:50:11:0b:a3:86:
5a:7e:2e:3b:28:df:24:9c:2e:59:72:ec:fe:02:a7:ef:94:7f:
c3:ad:9d:a2:10:7f:e6:2f:18:9b:89:cc:14:98:77:1a:aa:8b:
3c:a4:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:53 2025 by rpki-client