Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: xCFhtvmF+U4NGw2Qk8ouwW+OL5MRc6ZuRzu/iF/aIao=
Subject key identifier: 1C:23:C2:09:CE:39:2B:F0:9B:90:81:D9:BD:4C:25:A3:3D:D1:A6:95
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 0199FC58A9FD770C2BBE898A37D8023747C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 0693
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: 9ieDsDLImvJ/ZHYHdy+1Z0QkPTdXzb9PxBukWvubGAo=)
2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a9:fd:77:0c:2b:be:89:8a:37:d8:02:37:47:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=1c23c209ce392bf09b9081d9bd4c25a33dd1a695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:b6:bf:ca:c4:b0:da:6d:5b:cd:22:fd:e6:
cf:24:7a:42:ea:7f:d0:12:4e:d3:e6:40:10:94:a5:
a8:21:ee:59:16:37:99:3c:5d:ec:31:6f:0c:14:88:
41:7b:b7:ed:3a:e2:fc:e7:51:24:26:0e:5f:70:ce:
2b:3e:67:78:12:20:b5:1b:ea:1f:eb:25:13:61:ca:
33:65:6f:13:6d:fb:e8:ad:5a:38:0c:47:ce:3f:2d:
dd:05:19:d9:1f:72:44:f0:82:cf:e6:ca:cd:22:66:
b4:84:51:40:31:11:90:f9:ce:20:e7:43:02:2a:fd:
05:e4:63:9f:53:89:6f:91:cf:31:92:c6:de:07:0f:
28:a3:c6:81:77:6f:5a:6c:3c:5a:fe:8c:b1:c3:08:
84:9a:33:b7:83:9d:b7:5e:70:2f:e3:85:6c:4f:ad:
16:92:33:a7:c0:5c:3c:e0:ae:9b:dd:f0:94:f6:67:
83:bf:a2:bb:ab:06:79:92:20:c8:e2:b8:18:c2:5c:
e4:e0:4c:c8:75:e5:65:cc:82:c9:21:83:23:dd:1b:
df:ed:3f:cb:fd:93:36:c2:3a:ed:45:8c:04:69:20:
10:3f:53:0a:a6:57:a4:13:91:88:89:c2:b5:13:63:
45:43:ff:38:ce:b1:a2:d6:f9:07:8d:19:fa:71:e8:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:C2:09:CE:39:2B:F0:9B:90:81:D9:BD:4C:25:A3:3D:D1:A6:95
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c5:a6:3a:3e:96:32:a8:b9:70:a6:d1:99:f5:8f:19:7a:d1:
61:f4:de:b7:52:7c:04:97:eb:3e:41:a5:d1:d9:d9:e8:ba:52:
f9:9b:1f:06:8d:07:79:04:21:7f:ef:af:1f:3b:c0:5f:fb:2c:
f1:9c:0e:59:e7:c0:7d:d1:a1:98:39:31:76:74:95:53:fe:be:
f9:d3:fa:4c:ae:f7:16:6f:1e:e8:80:9e:d4:6a:0d:97:2e:47:
6e:52:44:51:62:ba:10:86:a0:ef:10:10:39:08:00:91:6a:6f:
fb:af:d9:8f:1e:6d:6b:a5:81:fe:8f:3d:20:01:84:59:1f:97:
d3:ea:88:85:4e:f7:9c:1d:85:30:e4:ca:ca:53:0e:84:94:90:
10:17:bf:f4:0b:8b:4c:82:7f:c5:ff:ae:23:05:96:34:11:65:
dc:13:f3:2c:a3:dd:af:37:1c:b0:ac:23:da:04:8f:9a:57:c9:
86:8b:09:83:94:55:9b:2e:0e:9b:06:80:10:a6:dd:25:ec:c1:
24:05:5b:11:f6:08:ab:32:ee:99:2b:6c:a2:f8:34:ad:1d:05:
4d:e1:4a:93:45:fe:17:2c:5f:59:97:df:bf:f9:90:dd:e3:be:
2d:df:0e:f9:c2:c0:ec:f3:6a:3b:68:3e:f7:92:7d:10:81:38:
58:bb:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:14 2025 by rpki-client