Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
File: DeJyDFfbAnYQyCHIQEexELw23cM.mft (raw, json)
Hash identifier: GbrRRRIZbOs8TuLdFagGOFr96wOUUp+jdNShLgU/CiA=
Subject key identifier: A8:54:38:A5:C4:B4:73:99:C9:4E:C1:E6:20:7E:20:68:34:87:C0:11
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 0199FC8F4F9D3D2081773E3F3CB8692F242D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
Manifest number: 1640
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: DeJyDFfbAnYQyCHIQEexELw23cM.crl (hash: zWskUn6tDPgbpS1f2XgLZzMEExMgY6s9avw+LWKPnTI=)
2: UgQOVXjSfDZ0oMmnpF9LnBZc5Iw.roa (hash: EuORew0X+P8iEghXgdkM03dJatTHGRU6W9xGTUJPJEY=)
3: WnLaCz0whNUAj7xt1GXCRyC0ff4.roa (hash: 1NkpD3wTqpaneQCvPoyVPVIPTREHfmPMSbzyzikhuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4f:9d:3d:20:81:77:3e:3f:3c:b8:69:2f:24:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=a85438a5c4b47399c94ec1e6207e20683487c011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:df:5b:7d:3d:19:56:9d:11:7c:a9:99:4d:e6:
22:38:86:28:8c:ac:bd:d7:b7:ce:bc:9a:4f:36:a2:
e0:00:fa:09:d9:a0:9b:b6:a2:f2:f2:66:d6:e8:64:
37:d2:4f:13:44:c3:81:d8:9b:58:c8:03:40:ad:ab:
1d:77:84:f1:de:50:6a:67:2a:74:6b:45:99:b4:88:
0e:22:02:2f:f9:04:d9:68:45:55:02:74:49:af:98:
6b:c1:31:17:4b:b1:e8:96:cb:bf:df:41:6e:de:c6:
25:98:16:7a:0d:bc:08:50:e6:7e:04:63:d9:9e:ca:
33:ff:80:09:d5:1e:22:47:3a:c0:6f:9c:4b:fe:95:
b7:87:6e:38:5c:c8:b7:6c:68:03:9e:60:32:ae:7b:
6d:e4:84:f3:e9:b9:95:6e:5f:e8:09:90:5a:50:80:
cb:12:16:72:7b:aa:c1:9e:22:6c:7c:46:67:19:19:
60:53:ac:bc:25:84:21:56:2b:ba:17:87:6d:e6:2f:
8c:39:79:a4:c6:77:6b:a5:f6:f9:e1:70:8e:62:3c:
05:bd:f2:d0:b5:6b:83:eb:9c:8b:d8:96:b8:ed:97:
e3:3c:9e:e6:0b:cd:09:81:62:7b:b4:ba:64:18:30:
3a:03:c0:2c:a9:2e:77:01:73:42:04:65:8a:17:eb:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:54:38:A5:C4:B4:73:99:C9:4E:C1:E6:20:7E:20:68:34:87:C0:11
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2d:a5:6b:8c:8d:da:ec:39:c1:cf:bb:65:25:79:8d:4c:36:
03:3a:1d:6e:0f:f3:49:8d:43:1e:36:94:7d:26:20:bc:69:ce:
9c:ec:eb:7a:f1:86:eb:39:fb:ce:02:d7:4d:eb:8b:d9:ad:e4:
1d:df:9a:8d:18:0e:db:48:dd:7f:0f:8e:19:d3:ac:37:99:98:
66:ab:9e:17:60:86:1d:ea:5b:c6:1c:f4:66:3f:48:71:19:04:
4a:a1:29:29:bf:df:1b:2f:51:ee:d4:79:52:ee:26:f9:32:cb:
08:aa:35:d8:c2:9f:7b:35:bc:4e:af:88:13:5c:38:ab:57:a3:
44:41:49:58:32:ff:68:80:2b:d5:19:04:fc:c9:66:42:f4:df:
16:7f:1b:d8:ec:66:f5:f2:ac:c8:19:c9:ec:a8:58:68:12:b1:
0a:a9:b2:ca:b7:de:9a:52:1d:1b:96:18:7f:82:bc:db:09:d0:
87:b0:7f:a6:f4:44:cc:1a:d0:64:3a:92:11:5d:93:6b:5e:f6:
58:a1:00:63:67:4f:b6:6b:fd:77:c5:05:8c:da:82:ed:9d:e7:
56:1d:7d:49:72:d1:e7:83:6e:48:9e:ce:50:8e:4d:d5:d7:74:
b2:ed:18:1a:79:e7:f9:1e:bd:da:3e:c9:7d:a3:14:30:82:18:
61:12:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:42 2025 by rpki-client