Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
File: 81296PvNv0KF6HvkkO1vzbRqBfs.mft (raw, json)
Hash identifier: FQRHUzbv1HhEp64xNROixk3Qp6ekmPPet+f9BIcNlSI=
Subject key identifier: 59:BE:8F:F2:91:36:A2:2A:70:56:D2:F2:3E:99:E8:4F:AF:FF:ED:01
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Certificate issuer: /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial: 019A00DA57E6E50CE09C0C81318F700C8FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
Manifest number: 0768
Signing time: Mon 20 Oct 2025 09:01:40 +0000
Manifest this update: Mon 20 Oct 2025 09:01:40 +0000
Manifest next update: Tue 21 Oct 2025 09:01:40 +0000
Files and hashes: 1: 81296PvNv0KF6HvkkO1vzbRqBfs.crl (hash: 3RN/xkUsKtDYy0F8eEq9dz9Lr1AT4B3DdTrCQy5N1pA=)
2: XwCCzqbTFIbNt4tDIiPwvE7s53o.roa (hash: tvLAuw3pgR4MhRPh7vqk9g2rkTx+zeY+ExS4WrgC8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:57:e6:e5:0c:e0:9c:0c:81:31:8f:70:0c:8f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Validity
Not Before: Oct 20 09:01:40 2025 GMT
Not After : Oct 21 09:01:40 2025 GMT
Subject: CN=59be8ff29136a22a7056d2f23e99e84fafffed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:58:11:f1:b7:87:7e:5b:de:8b:03:b3:56:3f:
56:bc:51:7b:19:a6:e7:3c:71:e8:60:a4:48:82:9a:
91:83:54:dc:00:5a:1a:99:ff:a2:dd:16:af:e0:d1:
7d:7f:b5:a3:a2:80:07:45:9d:06:2b:fa:ed:56:3d:
7c:b8:54:c0:3a:59:77:70:f9:32:db:0a:28:c5:3a:
7d:22:35:67:b8:81:4a:7a:18:8d:9c:e8:5f:85:2c:
b2:7a:07:5c:3b:e5:0c:fb:18:27:61:db:b3:50:ff:
5a:b0:78:1a:85:a6:d7:a9:e4:2c:1e:44:2f:1e:31:
cc:b1:63:3c:11:91:30:d3:1f:07:54:5d:db:71:61:
a5:46:7b:58:59:d7:4f:26:05:6d:77:25:34:b8:41:
44:32:4a:10:1b:f4:a1:b2:46:f0:b4:83:24:b5:7f:
62:08:5e:3f:25:d2:14:27:5f:0d:35:18:7c:a9:27:
42:9d:d0:f4:59:4a:a3:ad:93:5a:2a:b6:6d:54:5a:
0d:ec:e8:86:72:eb:ea:96:fe:5c:2f:3f:f3:a9:d4:
d0:51:79:1c:99:19:7b:64:96:b4:e0:0d:f7:c3:c7:
33:03:87:54:f0:57:1a:d5:4e:47:e4:6e:3c:e8:86:
b0:f8:66:2b:e2:c1:46:a5:29:a9:61:41:fc:44:89:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BE:8F:F2:91:36:A2:2A:70:56:D2:F2:3E:99:E8:4F:AF:FF:ED:01
X509v3 Authority Key Identifier:
keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b7:5b:41:3c:fb:c9:d9:3d:db:dc:99:0c:d2:c6:aa:a3:50:
ca:8c:2f:29:46:c3:e7:8e:55:66:c0:bc:8a:fa:31:37:ab:2f:
30:75:a8:f8:26:bc:1c:d0:e0:d2:d6:14:e4:3c:c6:a7:72:f9:
c7:d0:27:de:d0:11:29:5d:82:e2:f1:51:98:78:6c:1c:25:6e:
fb:1c:5f:3f:87:8a:e4:d3:10:13:bd:77:2a:be:b3:d7:92:00:
3c:60:3d:9e:4d:aa:c4:27:52:30:cf:e2:8d:b0:cc:ed:d0:f6:
d7:3f:86:f4:0b:7c:07:5c:9b:51:49:6a:04:45:d6:65:90:2a:
5b:35:e5:30:9c:e0:cf:08:67:08:64:6a:f2:b0:f0:8e:81:47:
b4:75:16:9a:95:07:3f:c9:32:7a:e0:2c:69:66:c1:90:de:60:
87:c6:16:c8:5e:93:bd:5c:e5:ab:02:21:7f:03:cf:9c:37:5d:
09:53:f2:99:44:f1:69:98:66:b5:f4:df:3c:ea:4c:6b:fc:6f:
ed:5a:c7:c4:dd:9d:ec:a9:d6:1d:63:35:c2:7f:d2:e7:6c:10:
3d:7e:db:bf:1d:ad:13:3e:7f:a4:68:a3:6f:db:2e:2d:bb:ec:
c7:84:fe:ac:ba:fe:bd:f2:cd:0a:7a:36:ba:c1:75:74:12:5f:
f4:8c:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:48 2025 by rpki-client