Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json)
Hash identifier: Vhvy6P3Ji1rNkmFPaOHkqzynanv3g0EUDJOyzcGrqQM=
Subject key identifier: B7:B8:2D:5E:9F:BE:2F:DB:07:30:E0:BE:37:B0:22:44:19:53:49:40
Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738
Certificate serial: 0199FFFE44EE7341A724D5EB5B1D333FC62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 05:01:17 +0000
Manifest this update: Mon 20 Oct 2025 05:01:17 +0000
Manifest next update: Tue 21 Oct 2025 05:01:17 +0000
Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=)
2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: u20vfvqK/akqnQpOT0iX/2KBuR9c27o+xv2safhc8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:44:ee:73:41:a7:24:d5:eb:5b:1d:33:3f:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738
Validity
Not Before: Oct 20 05:01:17 2025 GMT
Not After : Oct 21 05:01:17 2025 GMT
Subject: CN=b7b82d5e9fbe2fdb0730e0be37b0224419534940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:4b:4f:10:97:5b:1e:1b:1e:25:64:86:42:
61:a0:ee:e2:f9:01:81:8f:a8:8d:31:da:80:2f:c8:
3d:1e:1c:1c:e8:28:26:1a:f8:89:9c:4f:81:8d:f1:
ed:4d:94:af:02:56:ae:b9:e7:aa:f0:94:30:48:89:
74:3a:8e:f3:9b:a3:2c:94:3b:55:dc:d4:7a:70:28:
a0:65:ac:09:8d:f9:4d:e1:77:e5:ec:8f:c5:1f:ff:
09:2d:78:cc:a2:9c:6c:ab:01:b1:b6:ed:83:59:2c:
f8:8b:ba:f3:8d:9f:bd:05:ce:30:93:11:39:f5:10:
0a:e6:fb:7c:f8:e3:40:d2:7e:4e:8a:99:d7:a8:c8:
78:12:c6:e6:8d:1a:fa:ef:ed:31:00:db:ed:6b:ae:
fe:42:ff:9c:c4:23:95:83:92:dd:ae:81:c0:4d:9e:
1b:88:12:a9:1a:bf:b7:23:94:38:1c:2e:bb:db:5e:
d1:46:f2:42:c4:63:c8:ad:84:61:d6:97:2d:37:e6:
8f:ad:c1:19:b2:6b:eb:d3:c8:59:a0:77:a4:14:5d:
04:24:e3:9a:94:5b:44:26:b0:91:f0:39:3c:2c:56:
4d:5c:e7:da:d1:fa:a5:34:3c:a8:35:96:88:d4:ab:
96:b1:b7:9c:63:ec:86:6b:a8:d9:71:7a:30:1b:4f:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B8:2D:5E:9F:BE:2F:DB:07:30:E0:BE:37:B0:22:44:19:53:49:40
X509v3 Authority Key Identifier:
keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:60:fa:33:ca:5c:48:21:06:d1:09:0d:cd:1e:19:1d:e8:5d:
7d:6b:5e:d6:fd:81:ba:10:05:74:9d:b8:72:43:5f:a5:2e:6f:
6c:30:46:a9:7f:e6:ec:6c:dc:81:13:e0:42:1e:21:77:c2:5f:
e7:aa:28:c8:dc:3c:2b:db:48:7a:67:ab:4e:65:75:32:43:92:
3f:54:de:b6:bd:a7:04:45:f7:c3:41:68:fc:29:e2:00:8a:a8:
07:fb:ef:58:a1:5c:e8:44:9e:8b:05:5f:07:21:d2:67:42:b3:
30:ff:b9:e8:56:43:95:d3:01:17:fc:98:29:fc:a6:a5:bb:26:
ef:e8:9a:f7:d8:4f:47:c2:e2:37:60:e3:17:6b:75:28:d7:97:
3f:03:26:3e:6b:b5:ae:e6:f0:8e:e5:f1:46:05:01:6d:41:e4:
63:65:aa:8d:f3:ac:e9:b1:66:4e:5b:be:65:f1:9d:5d:e3:86:
01:af:c8:ca:c8:0f:ca:f1:c7:de:c5:b7:0a:db:2d:2f:57:13:
f3:8f:ab:36:38:e9:7e:e0:1d:7f:00:99:06:50:6c:40:7d:9e:
7e:55:d9:09:d5:ac:33:7d:d9:f6:75:9d:72:99:a3:64:3c:fc:
9c:76:a3:ab:ea:de:4e:3c:a8:65:25:c0:09:f6:ac:63:fe:52:
8f:a8:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:02 2025 by rpki-client