Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File: D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier: qy4v1Oeqv2/x0GYeWFny5wJRK+NxrBTyikTG9EvN3rM=
Subject key identifier: 63:F8:11:40:85:34:5F:A8:49:F9:5A:95:47:35:81:93:DF:F3:23:D5
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer: /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial: 0199FBEB7E9AB0E0AA12DDFF8285A2F3CF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number: 0712
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: pwxg7UFJj85wv++llvRpvB5meoNhpkWsqX1pHQ2QpzY=)
2: dJjjOIsvcmwG1yw0BY5P71sFVUw.roa (hash: 71ssAltTmbpploHF43pU09n+JXavvKYPHb8mMd4Firs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7e:9a:b0:e0:aa:12:dd:ff:82:85:a2:f3:cf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=63f8114085345fa849f95a9547358193dff323d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:4a:e6:83:d1:bd:e4:32:03:7a:46:32:88:
b5:30:80:87:07:62:95:bf:c4:e6:63:9f:8f:86:b4:
ae:ea:55:55:51:ab:ab:a7:7c:1e:3c:a4:91:9a:7f:
28:f9:1c:52:4d:44:04:2a:56:07:40:77:60:4b:0b:
c0:f9:fe:93:f7:0b:ec:d3:0c:b0:72:c7:73:41:ec:
03:f7:85:72:a0:50:84:00:97:af:37:71:27:58:ee:
38:89:c4:e3:2e:82:ab:db:73:76:4c:a8:29:a0:68:
5b:3f:33:05:0d:af:0e:8b:2d:fa:96:8e:cd:43:0b:
f7:3a:da:4d:ad:bc:ce:93:95:63:62:da:73:52:92:
50:19:ed:cb:0d:de:d8:39:8e:16:30:6d:97:24:ca:
eb:dd:20:c2:cf:94:36:bc:5e:14:81:a2:4e:eb:d5:
ec:59:e1:ac:9d:c5:e6:98:ba:20:be:02:59:51:d6:
b5:b6:a0:ea:3f:db:a8:2a:85:53:b5:27:5d:8b:ff:
90:85:23:54:80:2d:f3:5a:61:85:4f:0c:8d:1e:dd:
58:66:a1:fb:db:46:df:ad:03:47:e7:ef:eb:97:2d:
8d:26:f1:87:03:27:8d:0d:65:91:23:3b:f7:d8:f7:
96:53:97:10:ea:8a:ac:ea:ac:ae:0c:89:b3:5a:6b:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F8:11:40:85:34:5F:A8:49:F9:5A:95:47:35:81:93:DF:F3:23:D5
X509v3 Authority Key Identifier:
keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f9:82:57:08:1f:1e:2a:4c:32:43:60:25:9b:0a:9e:14:07:
c7:86:1f:f0:4c:66:2c:27:a6:7a:05:7c:73:87:7f:2f:e9:e2:
ee:f9:1d:dc:a1:dc:0d:0d:ef:7e:53:5a:4a:5f:a4:30:44:b5:
14:5d:82:6a:95:65:d1:8b:b6:d4:9f:b5:4f:a8:02:37:0e:33:
f9:61:85:6c:20:c9:b2:e2:ea:b1:31:cb:59:47:17:39:3a:3d:
92:51:32:61:14:38:7f:1c:be:03:81:be:63:63:c2:56:cc:69:
ba:86:51:71:1e:63:4b:a8:9b:e4:bc:a3:6b:d0:f8:d8:d4:27:
c6:6c:3e:df:0f:bf:80:78:e4:cf:b3:8d:c9:00:d7:02:95:ae:
2e:71:bc:b4:58:b6:e8:02:7c:0f:59:03:9f:0e:f0:69:9b:fe:
e6:5f:ca:fc:28:b6:88:65:55:72:55:90:87:a4:5e:fc:b7:5c:
be:bf:a2:6c:82:69:3a:84:20:7a:b2:e9:b5:ca:7f:0f:e7:5c:
22:b5:92:1d:e5:b1:5e:12:af:41:41:eb:33:be:fe:88:a1:4c:
e5:b1:11:0e:d9:7c:f4:18:81:8d:e6:c4:77:0a:ff:42:75:de:
c1:d7:5a:47:32:e7:68:f0:0d:0f:71:d9:5f:78:27:cf:1b:14:
f1:04:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:15 2025 by rpki-client