Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: q1bErsGyZQTdB/pPalsNE6trJRjtzjeWcy1ycgt+4ho=
Subject key identifier: CD:74:C1:90:65:8D:68:0F:3A:BC:02:F7:5D:D8:9F:35:42:40:2E:56
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 0199FB0EC4FC49C45CDB48C158467FA9330C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 07F9
Signing time: Sun 19 Oct 2025 06:01:13 +0000
Manifest this update: Sun 19 Oct 2025 06:01:13 +0000
Manifest next update: Mon 20 Oct 2025 06:01:13 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: WfyTpSbLfVoleT1kX5aGJuyP6l5oOxiLkZ6JRFToGYA=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c4:fc:49:c4:5c:db:48:c1:58:46:7f:a9:33:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Oct 19 06:01:13 2025 GMT
Not After : Oct 20 06:01:13 2025 GMT
Subject: CN=cd74c190658d680f3abc02f75dd89f3542402e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:77:b4:1d:8d:fc:e9:2f:c5:1f:97:0d:34:
70:ef:89:5a:fd:ad:db:d8:68:ad:23:51:b4:fd:c6:
34:8e:96:d4:67:a2:a8:2a:d1:37:19:11:c2:a6:15:
ee:88:55:b5:15:1f:6d:7c:0b:0d:8b:30:bf:de:fd:
72:dc:dd:c0:f2:b6:dd:bd:68:72:d1:b2:61:9c:fc:
f7:5c:52:0f:93:b9:39:61:cf:76:b6:94:b4:f8:1d:
a5:3c:39:be:c9:32:8f:6c:ce:d4:8a:a7:e7:31:f5:
a5:6e:d3:06:b6:95:9e:b3:cb:eb:0f:a9:0e:c1:ac:
bb:63:d1:3e:0e:02:9b:17:f2:d6:e9:47:c6:f6:86:
47:8e:0b:90:c5:91:20:e3:22:0e:b2:42:07:87:28:
ea:f7:eb:73:e0:ae:05:c6:75:24:15:51:b4:74:4a:
40:74:ea:5b:67:ee:77:76:0e:e9:fc:7b:09:2d:5f:
c8:46:75:4c:9c:d7:24:47:c9:30:85:8f:34:bd:24:
7d:25:14:95:88:f9:21:23:54:7b:30:2d:2a:9b:6a:
58:70:db:7a:15:98:db:d6:08:ed:18:5f:40:e5:02:
e9:28:d7:19:2e:41:08:1a:66:ad:2f:0a:23:f4:c3:
c2:d2:04:a4:0e:24:9c:57:0b:13:fc:01:fd:36:34:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:74:C1:90:65:8D:68:0F:3A:BC:02:F7:5D:D8:9F:35:42:40:2E:56
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:10:4c:9c:a5:e2:79:85:55:47:12:fe:70:6a:65:2c:96:19:
51:5a:4d:c4:fb:d9:b9:b8:af:d9:98:c6:ec:e8:d9:81:13:8d:
ba:8e:c6:f1:d2:aa:a6:5d:50:23:9b:95:bd:77:6f:03:2c:9b:
d9:0c:97:f4:80:31:e5:fa:4a:87:11:76:41:c7:62:17:15:29:
0c:e4:62:8e:0c:73:15:3b:3c:f9:46:b8:35:9b:03:53:6c:e7:
15:5e:a3:a7:b5:f5:68:35:fa:3a:d5:0f:09:0f:53:e6:bf:b7:
3f:83:f4:1a:1c:f1:ef:23:05:5e:c2:ce:d7:9f:78:00:35:68:
53:8e:04:8d:bf:ab:da:28:eb:bc:84:73:cf:33:7e:7d:ad:d9:
c0:20:46:92:5b:45:d3:64:65:f2:9c:f4:e2:85:56:dc:8f:a4:
36:a3:a2:a8:b0:17:ba:e4:3b:d6:46:6c:4a:da:38:49:de:02:
e2:03:49:f3:67:42:ec:61:22:c8:2f:b2:c7:f2:2a:72:b5:96:
03:ef:c6:51:45:ed:6e:25:17:d1:53:90:8f:33:49:e4:b2:cf:
df:81:62:81:55:d7:8f:7f:de:16:a0:b7:5d:7b:78:3b:10:f2:
40:d8:69:66:14:c4:3f:04:d1:5c:73:5d:9d:3e:dc:78:f7:5c:
5a:6b:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:39 2025 by rpki-client