Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: bbYA3Je4HHn8oFBpQXn5vLrep0h3na8g4cwnoSjs2TE=
Subject key identifier: EC:D9:2C:37:85:7F:CA:CB:4F:47:96:0D:4A:74:62:3C:C4:F7:6B:27
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 0199FF597E73DB2D9EA4FB1F3F0BAA5A0EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 15E3
Signing time: Mon 20 Oct 2025 02:01:19 +0000
Manifest this update: Mon 20 Oct 2025 02:01:19 +0000
Manifest next update: Tue 21 Oct 2025 02:01:19 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: JG6a4foZKmyEEsHOzxOKK2+LyX1WvE6KwnKBtNSwnS4=)
2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7e:73:db:2d:9e:a4:fb:1f:3f:0b:aa:5a:0e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Oct 20 02:01:19 2025 GMT
Not After : Oct 21 02:01:19 2025 GMT
Subject: CN=ecd92c37857fcacb4f47960d4a74623cc4f76b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:f0:26:41:6f:11:6c:be:d7:9e:92:ac:61:
1e:55:b0:ae:aa:0e:e1:e1:c7:e9:f2:5b:c9:b7:ad:
05:a9:68:6c:d8:1f:fb:1f:1c:24:fe:88:5e:16:c7:
f9:de:de:fc:21:e3:8e:c2:e2:54:cd:e8:81:5a:6f:
53:5a:21:b7:46:d9:81:d2:fd:c6:27:5c:02:4e:80:
52:c6:b1:c8:44:d8:df:5f:58:00:a8:b0:9b:2a:1c:
01:9f:85:c3:69:39:d1:1f:99:c3:30:d3:21:97:46:
b8:22:c2:b8:bd:18:4e:0f:9e:11:7a:40:a3:08:54:
8a:76:dc:52:03:d4:a2:f9:b4:22:de:a8:58:32:df:
3b:28:19:4f:61:30:e8:94:36:86:9f:a3:0d:98:e1:
09:cf:46:1a:92:da:1a:84:01:51:0e:37:04:1b:ee:
09:56:b5:2a:dc:2e:30:69:be:19:39:88:fd:4c:f4:
1b:02:16:b1:5b:08:41:4a:4c:23:dc:35:59:79:4b:
89:87:7d:b4:70:f7:bf:1f:0a:1a:00:96:48:ff:92:
28:16:d7:f1:36:1f:c8:4f:6f:58:52:3d:58:84:41:
08:99:1e:58:d0:dc:1f:02:16:63:ad:a3:4c:5c:11:
36:aa:b6:8d:57:a3:31:b3:b7:45:c6:91:4d:2f:69:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D9:2C:37:85:7F:CA:CB:4F:47:96:0D:4A:74:62:3C:C4:F7:6B:27
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b8:2b:24:0d:3a:1e:c4:44:ca:eb:67:c6:5d:76:0b:b5:c1:
cc:cb:41:79:0c:b7:c5:8a:fc:07:45:e3:ce:ad:d0:5f:ad:34:
3a:fc:b1:c5:b2:b8:c7:bd:89:6b:de:5d:bd:a1:4d:4b:23:a8:
3b:82:24:77:84:c1:ee:10:91:ee:77:f4:e2:2f:15:24:87:d3:
19:cf:47:63:64:c7:e1:5e:74:53:46:e8:d8:72:33:c8:13:22:
0c:0e:36:aa:03:bf:fc:c9:fc:8d:55:e6:c2:67:18:a2:e8:d7:
3e:ed:8e:bb:f3:f3:15:71:60:f2:de:a6:03:07:7a:33:f2:07:
c2:2a:8b:0a:c7:d7:1a:7d:24:d1:1f:d9:d2:bd:84:02:8e:6c:
f8:28:1a:84:b5:ff:08:ba:8a:03:2f:5c:fb:03:ca:34:bd:fb:
f2:cc:6d:7c:03:f0:f7:92:eb:7b:fc:11:60:4c:52:3c:0d:e7:
62:c9:0f:b3:69:ba:63:fc:cc:81:ab:ab:9a:6f:f2:4a:49:a0:
2e:be:39:b8:34:3e:90:e7:8b:2c:03:91:92:4b:e0:45:30:29:
b6:9c:1f:48:c3:58:5c:af:6a:9f:7d:24:72:c2:b4:7f:ce:1b:
a3:13:84:cb:45:d2:74:de:68:21:59:00:ce:46:cc:b2:6f:6f:
52:3b:89:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:41:14 2025 by rpki-client