Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: /y/6ySzAkeAj13Wds5jjBqof9fnZNdZ+0T2N6ZkgTW0=
Subject key identifier: 9E:00:64:7D:4F:BF:82:C1:15:6A:E6:36:4B:2B:2C:A8:62:77:38:F9
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 0199FBEBB547E4CC8B9C6CC45CCF5FAA3A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0D9D
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: H+XH/tV0h3wqFzb2ojkhigSWrW7IMn7zOYecSPNc0Rs=)
2: KKoVkt36UzhB8KBbFPImmZW73vA.roa (hash: GhpkIl47GYlGJw2nWrVttpHKLmkRE0ZfoRg/RpNRI/I=)
3: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (hash: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b5:47:e4:cc:8b:9c:6c:c4:5c:cf:5f:aa:3a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=9e00647d4fbf82c1156ae6364b2b2ca8627738f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:61:dc:1a:48:e4:4f:35:18:69:a0:5a:e2:
a3:a4:02:f2:a4:64:3f:ad:81:cc:9f:52:36:70:07:
3e:38:92:11:27:7c:e4:62:8c:e4:76:07:b1:45:1e:
dc:0d:a0:54:c7:2d:8a:f6:09:02:5e:f5:ef:f0:e8:
7a:09:a5:d3:0c:e2:00:cb:27:eb:73:9a:75:1d:4e:
13:71:e3:18:e1:ac:18:e5:8a:bb:40:0f:d2:d8:07:
1b:dd:71:5f:17:2a:cb:e2:17:8f:78:00:d6:0e:a1:
6b:61:e7:4d:34:a5:d7:ac:44:fc:70:05:45:48:d5:
27:59:19:e4:1b:a6:f9:4c:5b:b5:b5:6f:4d:88:7c:
da:85:58:b8:41:c4:c4:0f:a3:8f:7e:51:c2:75:ae:
80:e1:9a:fe:5e:0d:93:58:c6:cc:8b:65:50:c2:55:
f1:24:4c:9a:ba:7f:92:2c:b6:63:5b:b0:4e:55:e2:
38:eb:fb:7d:53:29:da:ce:9b:ab:66:5b:c9:0f:35:
03:33:cb:17:8f:06:8b:79:11:fa:ab:39:6c:e1:8d:
4c:5d:08:76:0d:8a:f5:3e:0b:16:cb:d3:23:d3:3e:
3f:33:4d:1c:7e:d0:13:b9:9a:1b:03:92:17:09:5b:
c4:21:b9:d1:51:1f:a8:eb:65:42:6b:36:fe:18:5c:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:00:64:7D:4F:BF:82:C1:15:6A:E6:36:4B:2B:2C:A8:62:77:38:F9
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ea:f5:2f:12:da:ea:63:52:bf:7d:39:30:97:8b:cd:21:a9:
f8:39:7b:7b:a3:86:40:dd:74:f4:f8:e8:11:b2:c9:04:f1:c6:
5c:01:45:60:4f:fe:8a:ff:d4:83:26:a1:1e:e1:aa:d1:7c:5d:
c3:b3:b5:12:c9:2c:da:9e:25:49:27:ae:97:39:69:a7:35:7c:
03:13:a4:31:3a:f7:ba:ce:2c:99:6f:d0:24:e0:b1:e2:d2:f2:
8c:37:f0:3f:fd:b3:5b:62:63:e9:d2:4a:5e:87:d2:9c:c3:8e:
8e:a0:07:b4:a3:61:ae:15:38:0a:45:ab:74:63:c5:48:81:84:
67:43:68:9e:72:a5:01:65:4e:43:04:9f:a6:3f:47:dd:66:18:
c2:75:40:cd:74:b7:5c:27:95:52:70:d7:35:da:4c:ed:ba:f6:
d6:7b:af:8f:66:2a:a6:28:24:e1:8a:44:54:c0:b5:f7:96:f7:
ea:17:fc:ad:e1:93:1e:49:6e:45:b6:38:1a:f8:ca:58:a1:68:
4b:4c:3b:46:18:80:3c:c6:df:a1:37:ba:a6:a6:a4:78:28:84:
10:eb:e6:7b:c1:eb:d7:53:59:bd:77:1a:38:23:2a:01:22:55:
e9:0c:f2:ef:56:ed:ee:a0:8b:2f:44:27:ef:9f:e6:bf:2b:28:
f0:7e:b3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:48 2025 by rpki-client