Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: Thwbr4bCyAsnQXDIYgCGy9kBAZl6KmrWHltQOR6jxL4=
Subject key identifier: 32:19:B4:FD:1A:7F:FA:5B:0A:1B:E9:1B:62:0A:D6:2E:4D:AB:D0:A1
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 0199FC21A15EF176B95CDDA7E5993B8FDB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0D78
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: 2Czr1KIVt1ftSERfpdpBEZclkukmmRbaC785fXf3weA=)
2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a1:5e:f1:76:b9:5c:dd:a7:e5:99:3b:8f:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=3219b4fd1a7ffa5b0a1be91b620ad62e4dabd0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:a8:ad:cc:ad:5a:39:81:ca:a4:1b:98:11:
07:7a:6a:b5:51:23:bd:1e:88:85:72:11:3c:1c:90:
9d:93:53:eb:1c:ee:cc:0b:25:84:3c:40:5b:4b:17:
b4:5e:11:c9:d6:00:80:da:9d:28:46:16:84:32:98:
7a:3f:bf:cd:de:93:64:84:86:25:f7:a4:52:97:47:
20:f6:7a:9f:e9:a4:4f:ff:77:6d:09:98:f0:0a:39:
1b:1d:56:87:6a:8a:a3:90:4e:12:55:c4:da:63:fb:
f7:0a:ba:18:66:96:87:97:3f:7f:48:f7:e0:a9:9f:
14:45:38:31:ed:27:7d:ae:24:18:cf:1d:84:db:46:
c8:a1:0d:3f:74:3c:5d:b3:c2:c2:fd:8e:ed:fd:4c:
a4:0f:34:19:ef:93:34:39:36:4d:3d:16:ac:94:cf:
0c:07:01:b7:04:fb:bf:d0:95:42:41:8b:16:c8:13:
e3:81:53:f2:cc:24:89:67:98:d8:cd:70:c4:4d:2b:
d2:12:45:06:ad:86:7a:81:1e:43:93:ca:b3:2d:37:
b7:c7:84:0b:c9:e1:81:69:ce:a3:ba:20:ce:37:2a:
db:70:85:8f:3a:96:8b:8c:27:07:e2:9e:68:49:1b:
cc:f1:0d:20:25:92:05:95:cf:42:81:80:c9:01:9d:
ba:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:19:B4:FD:1A:7F:FA:5B:0A:1B:E9:1B:62:0A:D6:2E:4D:AB:D0:A1
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8f:80:ab:48:bd:2f:2e:02:a5:d8:09:27:33:94:83:3b:3c:
bc:72:ba:e4:f6:97:68:08:ed:ea:d2:b4:20:63:8a:5b:69:9e:
36:a4:b5:a1:84:8c:8e:e7:89:9f:61:cb:8b:55:5b:c0:9d:ca:
9f:f3:09:4a:bd:5d:6b:d6:7b:e3:9f:56:93:52:0b:dd:42:81:
f6:68:dc:39:ba:5b:af:72:0c:21:2d:80:bf:9f:a1:e7:5c:95:
14:15:ab:60:8a:2b:ec:04:64:6b:89:65:88:98:2d:29:1f:a5:
e8:a4:aa:c8:83:68:de:ca:5b:ad:1f:2a:26:c5:9b:72:28:f5:
bb:18:ce:cd:16:3c:4c:be:0e:59:4d:4f:00:d4:44:6b:8b:83:
c6:de:a3:00:72:61:2d:99:f5:be:97:e7:b3:4e:30:90:7c:52:
f2:19:81:d4:63:5c:2a:ac:55:0e:c9:36:49:66:a0:f8:7f:c0:
0b:1c:c8:73:28:b0:d3:85:c7:1c:e2:7e:10:63:53:55:e9:26:
19:9d:f4:b3:e1:96:1e:ed:7d:67:25:9c:f9:aa:a4:99:06:2c:
05:13:e7:ff:9e:dc:d9:cc:96:27:19:06:a3:93:40:92:aa:1b:
af:4f:67:37:36:8d:34:67:02:f1:ae:2e:04:af:f2:fa:19:a4:
a5:17:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:51 2025 by rpki-client