
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: hPePQYgxG5uwNUWj6WH7eyYRNOQijS/hl+oxYSt61Js=
Subject key identifier: 75:24:83:ED:35:2C:8F:F2:EF:CD:66:A5:9B:BE:83:6C:62:BD:E7:71
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 0199FB0EC9DAE65308253B5F2F32D24B14EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0CEA
Signing time: Sun 19 Oct 2025 06:01:14 +0000
Manifest this update: Sun 19 Oct 2025 06:01:14 +0000
Manifest next update: Mon 20 Oct 2025 06:01:14 +0000
Files and hashes: 1: Zp_o_Avy64dimsDN37AJZ_vsvNw.roa (hash: w725AD9grVqnjs1N3X5smX0OnVgWb9b37Wpm1j4UCoQ=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: 4FsVJCyExbczu8XwIe5ReSkJijOYA1sxmLFXuRPKRI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c9:da:e6:53:08:25:3b:5f:2f:32:d2:4b:14:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Oct 19 06:01:14 2025 GMT
Not After : Oct 20 06:01:14 2025 GMT
Subject: CN=752483ed352c8ff2efcd66a59bbe836c62bde771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:ee:0f:e0:08:bc:79:13:03:59:86:a9:cc:
53:26:35:64:10:23:4e:c4:38:25:0c:c0:ab:14:c0:
ea:e2:cc:ed:71:11:92:18:db:80:f1:4c:0b:4b:54:
4b:a3:5a:b5:d0:3d:d9:28:94:9e:11:fe:b3:38:88:
e8:ca:8e:5f:6d:4f:9c:80:38:69:04:1c:16:ec:43:
b2:ca:01:14:ab:b1:e9:c4:57:b1:da:7a:0c:cb:72:
b8:ba:89:ea:08:35:fd:57:d9:bb:45:92:44:3c:1d:
63:32:83:ce:85:b1:75:ae:ff:9c:0b:2d:f5:9e:92:
98:b0:a3:3b:bb:28:ed:6a:5e:30:f9:29:42:7e:6c:
21:64:3a:31:5c:9f:98:ab:51:2f:22:6b:da:69:64:
24:8d:e3:47:19:31:f0:14:4e:4f:32:76:3b:d5:30:
28:d7:ba:4f:92:66:88:56:37:1b:fe:92:be:0a:de:
e4:12:5f:f1:be:04:cc:a9:9f:11:b5:30:f7:7b:1b:
59:bf:82:1f:36:89:57:04:56:a0:a2:6e:8f:08:e6:
f7:ba:7a:4a:4d:0b:b3:51:7e:b1:25:a3:7f:98:2a:
e8:eb:82:ee:0d:6b:a2:0b:8b:c8:fa:a6:de:8a:57:
08:b1:35:3e:4e:fa:b4:a0:72:cf:f4:e9:27:70:fe:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:24:83:ED:35:2C:8F:F2:EF:CD:66:A5:9B:BE:83:6C:62:BD:E7:71
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3e:33:14:6c:23:c9:ff:48:0e:32:a2:3c:f5:3a:14:fb:0b:
6d:80:55:92:99:21:80:2d:08:0f:d2:47:7a:5f:b3:6b:0c:9d:
27:91:dd:fc:b8:0f:13:a6:41:bc:01:cf:b9:c6:36:42:5f:b9:
76:bf:7c:f4:c1:ac:55:65:89:c9:7d:eb:cc:4b:d5:02:0e:42:
7b:46:23:53:d8:80:6f:a8:f3:fa:5b:63:d8:21:f5:76:16:40:
e1:25:7e:44:d2:19:1d:c5:85:a1:36:47:fd:c5:6c:10:29:b9:
5f:ce:aa:1b:9c:4c:f9:57:4b:c4:30:42:21:d7:75:d5:b1:2a:
1b:51:c2:d5:57:15:39:ce:c9:b9:2c:66:34:5f:47:cb:47:23:
e4:df:2b:b4:12:01:29:5a:a3:ab:5d:dd:1c:79:e4:5d:da:9e:
30:df:4d:b2:d4:46:5b:06:89:29:1c:5c:2c:95:ab:f0:1c:f3:
ff:af:15:c8:b6:2c:ba:63:25:52:66:8e:99:e1:39:78:cc:1a:
44:cf:97:93:23:a1:b5:76:c5:64:24:36:47:e3:50:12:98:ff:
2f:3a:09:e2:ae:0d:9d:37:b2:5d:21:99:79:30:30:25:a8:79:
aa:cf:0a:77:cc:79:a0:10:c1:66:93:65:ed:0d:d2:af:65:ce:
06:5f:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:36 2025 by rpki-client