Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File: DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier: vVyuTXe8xEUPL3B8e9um1VthGA8Lg1hb2qMJDG0JN+c=
Subject key identifier: 6E:CE:E9:4B:1C:15:6B:21:A1:16:B2:B9:B3:FC:CC:82:27:2B:B4:49
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial: 0199FCFD800FC862A63C0BF3416FFB17A08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number: 0909
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: ByGHodkRngTWyaxrywBx9HU_pgo.roa (hash: +PGhvckml5x5MT6xt2SMtvcfa7zw9W0WZ25LYIkA+NY=)
2: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: YjbjIHigGs4nexZ2Zt0bTEGrfc+uJ+olREspfe3DxTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:80:0f:c8:62:a6:3c:0b:f3:41:6f:fb:17:a0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=6ecee94b1c156b21a116b2b9b3fccc82272bb449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:6c:72:f9:84:21:a0:98:98:fd:af:8e:bc:
d1:31:23:87:b6:8e:19:0d:74:b2:2a:29:5f:2f:b9:
dc:34:37:a7:7c:eb:c1:94:65:c6:b8:80:18:63:c7:
99:04:2d:b8:15:e3:70:fa:c6:15:7f:08:4e:2c:f5:
46:30:3a:be:54:a3:c9:9a:0e:00:90:d9:0f:79:21:
83:17:92:58:2c:b3:e9:b3:0b:1f:5d:d6:36:fd:82:
c8:8a:2b:8f:d7:60:af:33:81:3f:1f:25:f4:67:af:
bf:41:13:e8:ee:50:22:47:9f:df:14:21:99:35:a6:
a7:6f:4b:05:14:a7:22:f1:6a:06:bf:e7:a6:19:19:
70:27:31:0b:e0:36:96:6c:7a:03:71:6b:d9:b8:f4:
83:28:fe:22:17:9c:83:26:51:a9:df:d0:23:68:12:
33:d3:c0:61:be:ac:ba:d5:74:e6:52:37:71:08:c0:
10:5e:59:75:0f:72:0b:de:14:e4:5e:9c:3d:bc:0b:
ca:a0:db:0b:9a:f1:43:3f:81:22:15:1d:da:2d:d8:
46:61:44:00:a6:3b:5a:9d:e0:6d:18:c1:76:fe:16:
ad:55:06:d5:2d:1e:ad:97:62:98:8d:17:88:49:a4:
e0:d6:d3:96:16:4c:d1:31:36:b2:ed:f8:ff:fd:da:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CE:E9:4B:1C:15:6B:21:A1:16:B2:B9:B3:FC:CC:82:27:2B:B4:49
X509v3 Authority Key Identifier:
keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:11:0c:0d:bb:a1:cb:32:d5:c2:ed:71:34:7c:15:28:ae:6d:
f6:05:a7:54:9c:21:dc:01:d7:1e:0e:9f:ef:e5:4d:1a:fc:8a:
7e:05:3d:1e:56:46:67:7f:55:d8:84:fd:70:a0:09:4f:e7:2c:
9c:60:34:95:7f:5c:56:ee:7d:7f:38:be:fb:2e:17:c7:10:cf:
aa:f8:8c:f7:43:96:39:89:1e:09:b8:fc:c3:2d:89:24:d5:42:
04:eb:2d:58:cb:30:d9:87:02:d4:1e:23:12:ca:05:24:8e:c7:
45:d4:f6:69:54:1e:5a:60:76:76:e0:9f:40:80:72:3c:50:e0:
99:0d:3e:7d:2b:b5:90:8f:f0:6d:7f:c6:b3:67:a5:a4:3e:f9:
d8:1f:37:6e:a6:c2:71:64:c0:25:98:51:0e:08:a1:97:63:5f:
a8:d0:a1:71:f4:5e:2c:13:6c:a4:37:f0:c5:a0:58:0e:e1:04:
28:bf:54:d3:1d:c1:fa:52:22:fe:f7:68:5f:5d:50:5f:08:09:
4c:e4:26:88:70:de:40:f7:56:60:e8:45:19:03:bb:49:7a:c2:
ee:8c:49:32:e2:a9:aa:8b:ca:62:71:b3:46:81:14:9f:5b:63:
8a:bd:25:27:32:6c:34:37:59:53:7d:ce:e3:db:2f:9c:08:24:
15:ed:64:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:11 2025 by rpki-client