Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: IoK0uuMQ75k/C0oTN/cYNe4thpxWq4rxzbedh2Ilxoc=
Subject key identifier: 39:93:4A:EE:9A:91:B9:52:F0:9A:6C:A2:0C:39:A5:6C:60:98:C7:27
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 0199FAD7D0870B1ABFA8EB7308966B697A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 0468
Signing time: Sun 19 Oct 2025 05:01:11 +0000
Manifest this update: Sun 19 Oct 2025 05:01:11 +0000
Manifest next update: Mon 20 Oct 2025 05:01:11 +0000
Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: 8LaH1a5OA3F6BTSlj6Kl6Dz0uxmbXvpd/NAOT4y7l9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d0:87:0b:1a:bf:a8:eb:73:08:96:6b:69:7a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Oct 19 05:01:11 2025 GMT
Not After : Oct 20 05:01:11 2025 GMT
Subject: CN=39934aee9a91b952f09a6ca20c39a56c6098c727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a5:18:db:5e:7e:52:09:02:d4:cd:27:1e:35:
d2:73:a2:29:b7:43:89:c9:66:bf:d0:fb:0f:29:f4:
83:ca:ca:2d:66:24:10:e9:ed:f1:24:aa:cf:ae:88:
d3:78:bf:b0:e0:30:52:b6:a7:1b:14:3b:e0:a7:40:
bd:8c:b5:d8:95:5b:c2:6c:50:38:16:f7:08:b9:e2:
eb:50:65:90:b4:79:8c:5b:89:38:2f:92:0a:2e:90:
9d:fb:fd:39:79:dc:58:38:38:83:18:b8:ef:ae:b5:
e5:73:6d:6c:8e:7c:d9:ba:a9:dd:8d:9e:0a:37:7b:
d3:0e:75:a8:ec:92:2f:11:2e:73:a8:ee:65:74:2b:
02:e6:c7:31:9b:5c:f6:90:3d:93:cc:ac:ca:ed:82:
c2:ae:08:9b:f9:ff:0a:e8:aa:c6:a3:d5:b7:10:c7:
0b:4e:28:27:d8:c3:0a:6d:06:18:e0:09:7b:66:52:
d5:22:71:fd:fc:ea:51:ec:8e:c2:be:4e:0c:83:aa:
81:66:9d:3a:3a:7a:cd:5a:b1:8a:b2:e4:69:00:44:
73:6d:1d:34:17:73:97:9d:e1:b7:97:73:23:eb:d3:
d1:f9:c8:c1:d2:77:38:3c:82:bd:2e:34:f0:87:e1:
6c:0c:23:26:71:75:b3:6f:e1:ca:99:e1:ef:b1:bb:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:4A:EE:9A:91:B9:52:F0:9A:6C:A2:0C:39:A5:6C:60:98:C7:27
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:0a:ae:16:3d:0c:a9:72:9f:63:12:b5:da:a9:58:95:e1:
b9:d9:2d:47:09:8a:e2:c7:3b:5f:cd:41:f6:1b:b8:07:eb:5c:
c8:36:a5:93:0b:79:96:33:b6:7e:fc:9f:2e:9a:a9:83:12:48:
10:76:85:3c:4b:27:1a:20:4c:af:60:ce:ca:59:07:5e:fc:7f:
ae:60:89:eb:f2:69:88:d9:0b:75:ba:a6:6e:7a:7d:8a:8a:97:
e4:39:73:af:0b:0a:fd:a8:f4:de:b1:fe:12:0f:6a:f1:29:87:
06:6e:03:46:65:de:7f:a7:f3:1c:ea:f8:71:39:a7:6b:40:3b:
49:f9:13:39:51:70:ac:3e:65:7c:6a:9b:e6:c8:02:8e:cb:6e:
97:d4:90:89:e5:b3:a4:4a:41:44:26:4c:e9:c4:df:64:72:13:
a2:7a:4f:d8:f1:3b:96:e6:14:2c:a5:e0:2a:71:24:ad:3f:a5:
52:48:4f:a9:1e:b2:a3:2c:4b:63:d1:db:85:ec:03:8a:15:e7:
2f:56:d3:b6:7d:e9:6d:a6:47:80:bd:a7:74:c1:80:04:b3:a7:
41:81:b4:2e:ed:57:77:c1:3f:95:76:d6:4d:f7:71:e9:b3:c6:
cf:b8:18:25:67:ae:73:60:fa:89:2b:45:13:d9:2a:fe:ec:d5:
13:47:8f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:44 2025 by rpki-client