Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: Q+cCDa2fO+Xb+xU8wQu5SEuSp7zfcxZ9dXY5OJOORoA=
Subject key identifier: 31:5B:FE:BE:B5:67:63:AB:17:B4:52:81:AE:74:94:36:45:67:69:4C
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 0199FFC819F6F486DEA2CAD774F962FD510F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 0F7C
Signing time: Mon 20 Oct 2025 04:02:07 +0000
Manifest this update: Mon 20 Oct 2025 04:02:07 +0000
Manifest next update: Tue 21 Oct 2025 04:02:07 +0000
Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=)
2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: z6QWjCPcWgjW4Gbu9eihniX6ZRgtn3ZgkynNSAksgcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:19:f6:f4:86:de:a2:ca:d7:74:f9:62:fd:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Oct 20 04:02:07 2025 GMT
Not After : Oct 21 04:02:07 2025 GMT
Subject: CN=315bfebeb56763ab17b45281ae7494364567694c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:0d:4a:26:8e:bb:59:58:e2:b1:eb:b1:39:
75:a4:78:66:29:11:a1:51:cf:b2:f4:d3:ba:06:87:
d4:4b:f0:9c:07:73:94:91:c4:ce:10:70:67:9f:8f:
31:57:45:9e:2a:81:73:cd:85:08:3c:f6:e8:4a:d5:
a7:4c:97:c9:5f:7d:f3:ba:6b:90:35:f2:75:bd:91:
63:1f:95:33:da:a2:ef:8b:03:b4:3a:c4:6c:8b:ad:
2f:db:20:42:d2:07:6b:52:00:c3:92:5f:33:22:ba:
96:02:69:66:3f:c0:94:d9:07:45:20:b4:9e:c1:5d:
11:4d:63:23:3e:87:a4:c7:fd:26:c6:88:65:26:5e:
76:2a:38:ab:34:19:bc:80:de:fa:de:27:64:f5:c5:
b3:87:aa:15:87:92:11:62:1e:c3:d4:df:d5:52:e1:
0c:57:86:c6:9d:42:65:a9:3e:aa:cf:5b:9e:91:5e:
1a:39:66:54:0f:fc:f9:db:7d:2c:1b:67:60:a8:f0:
34:c7:e0:6b:f0:cf:88:2a:db:ba:98:c7:1c:ea:86:
cb:58:94:0d:d7:e8:6d:d8:c2:cb:22:9d:d0:f6:c6:
7e:dc:1b:fe:81:5d:76:b8:e8:63:b1:dd:16:3a:a4:
af:0d:1f:41:94:e9:23:38:4e:5d:25:3b:cf:bb:7b:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:FE:BE:B5:67:63:AB:17:B4:52:81:AE:74:94:36:45:67:69:4C
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2f:e7:ad:70:df:17:1d:a8:2d:00:69:6a:cb:64:7c:6a:29:
c8:87:83:b6:b3:87:4c:0c:27:c8:db:fe:ae:55:62:53:b3:ee:
ce:17:25:41:cb:6d:3c:75:35:5c:59:d1:e2:22:23:1b:a2:df:
ca:63:7f:3e:fb:48:3f:f7:9a:13:81:ed:f1:7e:60:4a:2a:d4:
82:44:c2:2c:b8:d8:92:5e:50:6a:7c:0e:63:3f:ed:79:bf:d9:
3c:b9:5c:6b:9a:32:fb:92:bd:5f:f8:78:f9:ca:90:d0:e6:0f:
bc:06:70:a3:f8:c2:e4:4b:d9:f5:f0:78:4f:3c:8b:9a:64:0d:
1a:b6:14:7c:25:fb:1a:8f:46:c5:16:2e:b1:e3:1a:e8:bd:a1:
2e:ef:14:18:10:1b:d5:2d:39:ad:88:76:99:0a:85:b3:69:d6:
29:62:cb:4e:50:4f:6c:d1:73:e1:eb:c8:7d:e2:be:65:e9:5d:
9e:9d:fc:60:89:c8:dd:15:3e:4b:ce:12:8d:6e:65:80:42:23:
b8:32:60:3f:51:83:7a:da:41:c1:7e:29:aa:d5:61:dd:9a:4c:
bd:3f:c2:2c:5f:53:f6:ea:f8:d7:0e:75:1c:1b:6a:a0:9d:24:
d4:99:d2:62:c8:7f:5e:e9:e5:9b:df:1b:49:0b:f0:39:24:1f:
66:12:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:28 2025 by rpki-client