Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: lWCbg3CNWIFUtmNNWs7uI2F68O2mvjRB//16MYRzdII=
Subject key identifier: C6:35:9C:0E:F6:CE:03:F2:37:15:5E:82:38:97:E6:2E:FD:E4:15:98
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 0199FAA119A76DD038412B5383E3DB2A50E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0CE5
Signing time: Sun 19 Oct 2025 04:01:25 +0000
Manifest this update: Sun 19 Oct 2025 04:01:25 +0000
Manifest next update: Mon 20 Oct 2025 04:01:25 +0000
Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: 1O0BS7KrcRPmDyuY7H7mI0hLdKMrWG+80BPoWFZfKmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:19:a7:6d:d0:38:41:2b:53:83:e3:db:2a:50:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Oct 19 04:01:25 2025 GMT
Not After : Oct 20 04:01:25 2025 GMT
Subject: CN=c6359c0ef6ce03f237155e823897e62efde41598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:f2:f4:44:df:5b:0a:7b:65:d8:81:75:cd:
0c:72:17:33:99:ea:8b:58:a0:de:e5:a8:3a:9f:e3:
75:f9:75:5f:a5:eb:84:0f:a1:7c:45:fa:e8:80:47:
ff:a5:3c:38:15:e4:87:47:29:da:20:07:b5:e5:8d:
a1:87:28:e5:9b:54:4b:25:10:40:cf:3d:f5:2e:1a:
ad:6e:b6:3d:d8:4e:d0:ec:35:1e:24:27:e3:19:12:
c0:11:34:4e:db:9e:5d:ba:90:01:3c:4e:93:35:b2:
46:06:a2:95:be:de:1f:9e:5a:75:ea:24:58:b2:aa:
28:66:c4:fe:d8:ab:6b:f8:4f:be:21:a1:14:5c:2f:
96:39:b7:e9:23:e1:35:5c:b1:02:8a:48:80:2d:ec:
33:97:7d:82:d0:23:e5:4b:7f:b1:fe:12:0e:7b:17:
09:a1:82:50:37:4a:f1:6e:36:0a:41:b4:9a:a9:5c:
61:cf:36:bd:b3:5d:23:6f:e7:d7:b1:1b:be:6d:79:
21:32:ea:33:4f:03:15:57:19:95:58:cf:48:02:30:
87:f3:3e:c8:25:35:40:9f:d9:c6:fe:e8:af:15:24:
9c:ca:2f:ba:86:ec:86:ce:7b:e3:8b:3d:b3:42:9f:
bd:5b:bd:7f:f1:e9:ec:08:cb:04:48:6b:6b:28:72:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:35:9C:0E:F6:CE:03:F2:37:15:5E:82:38:97:E6:2E:FD:E4:15:98
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e5:9f:1a:22:2c:47:e9:ef:6e:87:13:10:28:8d:8c:d7:6a:
e7:87:1c:b2:4d:54:cd:5c:50:6a:4c:fa:25:27:26:bf:98:68:
78:42:d6:a5:99:19:6d:02:da:da:ae:4a:8c:db:e2:3a:40:99:
70:c3:b0:16:26:74:1e:25:55:45:28:5e:16:61:45:09:48:f3:
41:ca:e2:dc:76:74:60:62:a5:d8:4b:75:07:b0:7e:0c:c8:7c:
37:d9:85:14:95:62:e8:d6:e3:42:d9:14:d2:ff:d6:44:d6:fc:
65:07:85:d1:35:59:d2:89:fa:d5:e1:70:76:62:4d:2e:14:0d:
32:7a:70:92:a8:66:50:a1:b5:5b:a0:24:eb:34:88:6d:5f:a6:
7a:ad:29:73:96:ce:b6:ab:80:c1:80:f2:1e:b9:21:b8:4e:64:
9d:35:4b:9f:a0:6f:28:17:23:43:0c:17:f4:5a:f6:37:0d:83:
ff:4a:14:54:cb:78:10:e4:52:a9:31:ea:3d:00:49:63:ac:d9:
78:9c:e3:62:b8:9e:78:f6:df:0d:6c:1b:83:bf:74:f8:01:ec:
a4:db:8d:e8:2b:20:7c:da:0a:47:95:74:5b:91:1d:bb:cc:a5:
1e:ef:ca:b7:5b:13:88:b7:8e:0f:a5:cf:6d:a4:48:3d:6d:d4:
2f:1e:84:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:11 2025 by rpki-client