Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: qoAxCKUF+qRedSokVafTFZhS2Uh3FVchGTps1I2wcp8=
Subject key identifier: 99:38:AB:FE:3D:F6:E7:3B:8D:A8:E0:75:D1:88:DF:88:3F:B5:40:54
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 0199FB0F4354DEDC452E3AC27719BF2C09B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:45 +0000
Manifest this update: Sun 19 Oct 2025 06:01:45 +0000
Manifest next update: Mon 20 Oct 2025 06:01:45 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: M+q2OJyDf0jcbCP5xFRaE25i7ejsZPpyVAf6kwrLxIQ=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:43:54:de:dc:45:2e:3a:c2:77:19:bf:2c:09:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Oct 19 06:01:45 2025 GMT
Not After : Oct 20 06:01:45 2025 GMT
Subject: CN=9938abfe3df6e73b8da8e075d188df883fb54054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:35:f2:d1:23:0a:17:88:9e:fb:6b:27:14:
c5:6f:53:18:fe:8f:83:b2:c5:83:8b:64:2f:16:ec:
4a:f8:e7:db:8a:8d:bb:ca:c0:cf:3c:6e:5d:e4:18:
99:fe:d2:0e:4c:5f:9a:ec:5e:44:69:e3:8d:2f:8b:
22:2c:df:13:15:61:9e:74:af:e6:8c:2c:0f:72:d8:
8c:fc:13:d2:49:00:5d:89:1d:b7:46:fb:da:5f:15:
c5:03:f7:8c:0d:11:d7:c9:9a:98:fe:67:52:ab:e6:
05:6d:aa:64:76:6d:1c:74:e1:a7:f0:3b:ed:e7:aa:
f0:15:04:56:ef:22:18:3f:2b:a3:31:12:1d:3b:c1:
ff:56:a4:1e:5d:cc:84:2f:07:41:f3:7f:eb:03:c1:
69:ac:de:c0:95:61:74:3e:dc:ad:2c:7f:3a:a2:ff:
d2:d1:51:af:34:e0:c8:db:02:17:4b:95:03:73:89:
45:3d:cc:6d:ab:87:a2:09:4e:ad:43:5e:8c:c4:4d:
96:1c:87:49:cb:eb:10:7b:a1:38:e8:e5:09:1e:58:
ed:de:77:7f:e0:49:91:a4:0b:d7:df:36:b8:f1:d1:
b9:c6:8d:5b:63:0a:17:2e:c8:f0:5d:5d:20:db:cf:
7a:3f:78:5e:3e:9f:3b:66:83:4d:9c:fd:73:84:ca:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:38:AB:FE:3D:F6:E7:3B:8D:A8:E0:75:D1:88:DF:88:3F:B5:40:54
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:41:9a:06:07:0e:58:fe:d4:7b:51:89:ec:70:4d:60:62:d4:
06:b2:8d:df:9b:a1:5d:a5:7d:3b:0d:f9:39:ef:30:d1:40:24:
2e:12:73:48:ad:5c:a4:ed:a3:1f:d6:9f:a8:1f:4d:55:16:63:
a1:c9:21:62:36:bc:90:cb:3c:f9:e6:77:7c:df:ce:92:63:06:
a0:61:81:fa:c3:26:af:00:7a:2c:da:29:6d:00:42:fe:9e:f3:
6c:1d:8b:a7:fb:f2:82:e7:2a:d0:ad:3c:97:cd:c4:5a:e4:e3:
e4:58:de:a7:e9:cd:41:ac:55:39:51:09:62:1f:7a:75:1c:78:
3d:07:96:35:5d:ec:51:02:92:e9:48:2e:85:57:33:66:98:4a:
9a:21:a5:f4:ce:64:87:5d:0b:bc:f1:96:7c:3b:05:71:4b:72:
07:a6:03:43:c3:93:d8:c7:f1:3e:58:25:41:0d:af:c4:13:ba:
fc:f1:77:6b:c4:0a:60:d7:f5:e9:e2:ae:32:86:e6:49:d1:ef:
e7:27:95:38:5f:1c:27:f1:3a:54:f5:cc:20:aa:00:dc:8c:ce:
a2:87:05:54:26:b4:c2:4a:e7:b3:28:83:bd:1a:c6:de:29:08:
99:4d:15:48:da:0d:62:f2:bf:c1:f0:60:29:c1:b8:8a:77:94:
92:12:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:37 2025 by rpki-client