Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
File: 97nZe5f9TLrO2oHEQG50rW1TkyY.mft (raw, json)
Hash identifier: g182EGorI8rc5kUBug7pibBH1JZcpy7NZ4dmGW1Zg7A=
Subject key identifier: 5D:03:4A:D4:F0:19:86:20:EB:43:12:05:05:44:4A:14:B8:86:E5:D2
Authority key identifier: F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
Certificate issuer: /CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Certificate serial: 0199FE0FE0B149BD0D7ACD4DCDFD6B863703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
Manifest number: 0429
Signing time: Sun 19 Oct 2025 20:01:17 +0000
Manifest this update: Sun 19 Oct 2025 20:01:17 +0000
Manifest next update: Mon 20 Oct 2025 20:01:17 +0000
Files and hashes: 1: 97nZe5f9TLrO2oHEQG50rW1TkyY.crl (hash: tsDilma3LdfPt2yYoh6/+pJmyOCru7omSbY5e/69koE=)
2: OuthJUym19FjT8ci0BD8M70ff0w.roa (hash: OdA/QajBBq0uQv/tL0mF6x6XX7aLbHqwxy8dOWgiW0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e0:b1:49:bd:0d:7a:cd:4d:cd:fd:6b:86:37:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b9d97b97fd4cbaceda81c4406e74ad6d539326
Validity
Not Before: Oct 19 20:01:17 2025 GMT
Not After : Oct 20 20:01:17 2025 GMT
Subject: CN=5d034ad4f0198620eb43120505444a14b886e5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:57:53:23:4d:33:61:b3:7a:52:88:e6:78:
83:41:f9:d6:df:32:29:08:07:c3:de:4f:06:b6:9b:
e0:6d:0c:27:c4:03:5f:86:67:4d:71:af:44:9e:53:
94:a8:90:69:45:bd:c1:20:02:ac:ef:84:4c:2a:b3:
5e:67:dd:17:f0:0f:af:39:96:e4:0f:7b:0a:fd:9c:
7a:b2:79:35:ca:69:44:4e:02:4d:27:24:13:9e:2a:
b0:92:ea:0b:e0:e6:c6:0b:97:19:1b:77:49:29:ae:
4b:6a:1d:73:25:da:c4:a7:34:be:eb:3f:01:90:69:
52:b6:26:2f:ec:4a:8a:9a:46:a8:50:e4:21:66:28:
cd:17:cf:f7:42:5c:19:a3:87:4f:51:1f:80:da:f8:
ba:84:e7:3f:92:b2:a4:84:80:8a:1f:7c:03:55:97:
66:84:bb:78:c0:08:a8:4e:01:4d:e4:09:91:d4:42:
aa:eb:4d:bf:22:ed:25:a2:a6:eb:5c:28:85:ce:af:
0a:54:68:ad:12:12:b4:6b:0b:2a:9b:73:95:a5:38:
47:b6:ef:9a:16:b9:9e:44:ce:a4:ba:8f:5b:5a:0b:
a0:57:1c:f3:9d:00:f4:9c:bd:49:74:de:d9:e7:60:
63:45:ad:3e:f2:56:a5:8a:22:6e:3c:8e:b7:cc:94:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:03:4A:D4:F0:19:86:20:EB:43:12:05:05:44:4A:14:B8:86:E5:D2
X509v3 Authority Key Identifier:
keyid:F7:B9:D9:7B:97:FD:4C:BA:CE:DA:81:C4:40:6E:74:AD:6D:53:93:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97nZe5f9TLrO2oHEQG50rW1TkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/469d47-01e2-4fcb-a68c-a30d82bd6219/1/97nZe5f9TLrO2oHEQG50rW1TkyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:e5:c9:35:98:8f:5c:9e:21:11:52:ce:b6:e6:e5:01:e3:
4b:9f:60:52:d6:ce:2b:19:8a:be:7f:bb:63:7b:d3:f7:93:a8:
7d:88:af:d5:bf:15:3b:55:fe:29:fb:fe:c3:a6:95:6e:37:17:
a3:1d:72:e8:fa:91:60:bb:af:19:b5:0e:09:c5:a7:9d:2d:1f:
c3:b4:f7:c4:43:fc:c0:5d:1f:eb:e2:e0:f1:96:53:d4:f3:f0:
2c:72:d7:56:e8:08:ab:7b:4b:77:b4:53:c6:4c:24:21:79:b3:
ee:c0:dd:c2:c8:81:86:a4:0a:49:d8:39:2e:b4:99:d3:3f:96:
01:0d:7d:ac:19:c4:ba:c7:dd:27:21:c9:fe:83:5c:fe:d9:29:
2e:ea:0b:4e:00:8a:f9:82:71:e5:d7:03:91:f3:ad:2e:89:83:
d2:11:d0:02:32:2a:d4:83:d1:a6:0a:cd:7b:b5:d4:b8:e0:72:
bc:ae:c0:3c:14:16:0d:51:8d:c4:bf:d2:c9:55:b4:dc:fd:a5:
fd:b9:b7:d5:44:ef:27:59:31:05:8e:a4:34:f0:60:f8:80:1c:
7a:4c:dc:1b:cb:60:45:8e:6c:11:43:88:8a:32:30:9f:26:c0:
74:9e:06:8f:08:56:eb:f3:9b:03:45:36:e1:1a:a6:56:a4:0e:
d0:8a:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:25 2025 by rpki-client