Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: vBHYn5UaVI820c1SN9sy/pM2F25G3aOMMzOD2SZ4GOI=
Subject key identifier: CC:80:CC:9D:98:96:CA:66:68:F0:AD:98:10:54:0E:36:91:83:EE:0F
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 0199FE1017FCC0D96E854ECD2FC83F779D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 10F2
Signing time: Sun 19 Oct 2025 20:01:31 +0000
Manifest this update: Sun 19 Oct 2025 20:01:31 +0000
Manifest next update: Mon 20 Oct 2025 20:01:31 +0000
Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: weeZCudfLC3ilzWLwHX2SakIlip8ePPQY8BW93oQYFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:17:fc:c0:d9:6e:85:4e:cd:2f:c8:3f:77:9d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Oct 19 20:01:31 2025 GMT
Not After : Oct 20 20:01:31 2025 GMT
Subject: CN=cc80cc9d9896ca6668f0ad9810540e369183ee0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:6a:bc:ba:f3:43:48:71:d7:1c:d7:99:92:
ee:7f:ed:bb:49:39:6a:2c:4e:1f:8b:c2:4d:3c:7d:
eb:e9:6e:a1:11:83:4a:74:69:ed:35:b2:8a:ae:8a:
61:84:f6:bf:87:34:48:0a:bb:bc:ce:3a:dc:25:1d:
6c:8c:f7:c1:32:e5:3e:d2:aa:8e:08:96:fe:1a:82:
ba:60:5c:4c:14:9d:d3:60:72:d8:69:be:ad:1d:49:
94:f0:9f:5a:47:6c:e7:38:ed:25:13:67:47:9e:cd:
93:0a:d1:fd:18:a6:4a:81:cc:0b:0f:06:7c:fe:10:
83:73:2f:62:73:99:8f:8d:01:7f:66:93:e9:5b:d0:
43:83:01:e9:a1:fe:9b:d3:b6:5f:e3:42:15:c0:ee:
02:c6:5d:c6:53:f9:ae:72:8d:15:68:6a:df:5c:85:
7c:25:59:c1:3e:5a:30:4b:3c:fb:6f:0b:7a:b7:bf:
64:7c:0f:c0:9d:e8:40:97:d4:21:4d:cc:f9:cf:ba:
c6:50:01:73:38:22:b5:30:a6:2d:59:b6:35:45:40:
c9:41:8a:31:31:fa:1b:43:ac:53:dd:2b:1e:29:f4:
5e:53:9c:41:0f:95:bd:c3:3b:1a:8c:2b:81:32:5a:
0f:ab:05:1a:1c:51:d7:78:42:32:c7:95:9e:d4:df:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:80:CC:9D:98:96:CA:66:68:F0:AD:98:10:54:0E:36:91:83:EE:0F
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:26:56:db:85:a3:18:21:b8:82:05:8e:a7:da:29:1f:6b:ec:
6b:61:80:d6:b9:75:a7:98:42:16:d1:51:15:18:a9:61:7d:e3:
1f:ae:57:7d:f8:e3:be:ae:5e:b6:0b:39:ef:e4:9d:c9:39:48:
8e:7e:cf:1f:ae:38:d5:9b:a7:a6:bb:cf:65:c5:49:53:0f:9a:
6c:57:e1:25:0c:a1:a7:c2:6a:ae:68:74:63:9e:d7:1d:95:58:
5f:dd:16:16:05:f0:bb:f5:53:9b:34:93:61:65:c4:79:7c:f5:
10:88:31:2d:12:1c:4d:bd:98:1d:d2:9b:90:4b:50:7d:75:6c:
d7:e5:1f:96:bd:88:f0:2c:2e:78:81:51:76:a4:65:4d:ca:a7:
d7:42:3f:2d:25:4d:a9:5b:01:ae:1d:8c:49:70:02:bf:c0:20:
c8:be:50:8d:a7:53:70:10:00:77:f3:a7:a6:54:4a:97:35:bd:
83:15:15:38:f3:7e:6e:bd:74:7d:01:d6:1e:6e:99:fe:cb:be:
5a:9f:da:81:b8:18:b4:ee:e2:1d:be:59:f7:9c:b7:48:34:79:
fd:9f:52:75:7c:ed:d2:d5:d9:1c:bc:c6:f9:92:f8:5a:e9:8d:
8c:dd:e1:6f:9f:1d:02:fa:92:82:b3:16:0d:7d:97:2b:9b:27:
e9:bb:cf:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EBf8wNluhU7NL8g/d51/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmI5NjgzOTUxNmY2ZmIzNTA2YzYyMDY0ZDYzZDYyODc5
YTUyNzcwHhcNMjUxMDE5MjAwMTMxWhcNMjUxMDIwMjAwMTMxWjAzMTEwLwYDVQQD
EyhjYzgwY2M5ZDk4OTZjYTY2NjhmMGFkOTgxMDU0MGUzNjkxODNlZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmudqvLrzQ0hx1xzXmZLuf+27STlq
LE4fi8JNPH3r6W6hEYNKdGntNbKKrophhPa/hzRICru8zjrcJR1sjPfBMuU+0qqO
CJb+GoK6YFxMFJ3TYHLYab6tHUmU8J9aR2znOO0lE2dHns2TCtH9GKZKgcwLDwZ8
/hCDcy9ic5mPjQF/ZpPpW9BDgwHpof6b07Zf40IVwO4Cxl3GU/muco0VaGrfXIV8
JVnBPlowSzz7bwt6t79kfA/AnehAl9QhTcz5z7rGUAFzOCK1MKYtWbY1RUDJQYox
MfobQ6xT3SseKfReU5xBD5W9wzsajCuBMloPqwUaHFHXeEIyx5We1N9pDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyAzJ2YlspmaPCtmBBUDjaRg+4PMB8GA1UdIwQY
MBaAFHa7loOVFvb7NQbGIGTWPWKHmlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2Et
MThlOGI5ODE0Njk1LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2EtMThlOGI5ODE0Njk1
LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByZW24Wj
GCG4ggWOp9opH2vsa2GA1rl1p5hCFtFRFRipYX3jH65Xffjjvq5etgs57+SdyTlI
jn7PH6441ZunprvPZcVJUw+abFfhJQyhp8Jqrmh0Y57XHZVYX90WFgXwu/VTmzST
YWXEeXz1EIgxLRIcTb2YHdKbkEtQfXVs1+Uflr2I8CwueIFRdqRlTcqn10I/LSVN
qVsBrh2MSXACv8AgyL5QjadTcBAAd/OnplRKlzW9gxUVOPN+br10fQHWHm6Z/su+
Wp/agbgYtO7iHb5Z95y3SDR5/Z9SdXzt0tXZHLzG+ZL4WumNjN3hb58dAvqSgrMW
DX2XK5sn6bvP3A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:02:05 2025 by rpki-client