Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: x7llgJjTH7A5gpkWfCJVU9MQwyshMMbSu08B5nzxcpg=
Subject key identifier: 0C:37:77:1C:21:13:EF:ED:44:0C:4B:14:A5:C1:42:45:90:DD:1A:AE
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 0199FCFD4924713F8CA64CF5F16F03D63833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: G0CxQC2Nto+YdqC7dQaO3uvL5n0GdPgU10mW22JlCwQ=)
2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:49:24:71:3f:8c:a6:4c:f5:f1:6f:03:d6:38:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=0c37771c2113efed440c4b14a5c1424590dd1aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:a9:91:de:d4:29:0a:97:ba:8e:bd:96:9d:
76:34:b7:05:6b:c0:0c:ae:28:23:56:5a:d6:13:ee:
5a:74:ee:42:57:2f:97:36:65:1d:97:1f:62:02:0a:
44:79:70:93:0d:7a:d2:c1:79:d5:e5:77:79:c9:b0:
40:ee:30:b5:9b:c5:bd:40:10:5d:bc:49:74:23:89:
9e:8a:8d:ef:9b:2b:01:cb:97:65:39:2a:05:a0:0e:
ec:b0:f2:6e:8b:3d:c8:2c:61:1a:9c:e7:f1:2e:4f:
f0:2c:a1:b4:14:cb:9e:8e:a6:66:96:e8:e5:a1:ad:
70:00:62:3b:65:56:9b:db:55:63:02:69:35:84:93:
0f:34:ce:ad:04:ef:3d:ad:52:a3:a9:08:86:fc:f6:
3e:95:92:53:eb:6b:6f:29:90:db:a5:53:69:e0:14:
4d:81:6c:46:ae:4f:a5:f4:63:8c:5d:11:56:ef:b8:
0f:b6:f5:db:3f:06:a5:f3:d5:76:74:d4:32:ca:e2:
9a:cf:e2:be:88:39:ce:21:c7:e5:85:a8:94:51:7e:
39:d3:2b:32:39:14:4c:ff:e9:67:d9:06:75:00:a9:
fd:9f:9d:75:d9:f2:e5:0c:2f:69:5e:01:e2:e4:76:
5f:9e:3d:d9:c5:dc:ad:d3:25:50:81:bc:72:52:67:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:77:1C:21:13:EF:ED:44:0C:4B:14:A5:C1:42:45:90:DD:1A:AE
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4a:5b:f5:58:8f:dc:cd:4a:47:b9:a7:a2:9a:da:d7:f2:23:
20:42:03:91:4e:a1:9e:4c:4f:0d:fb:67:70:00:f4:17:65:a4:
e7:c2:29:c0:98:b4:78:b9:48:f6:48:bf:55:11:dd:a5:05:89:
6b:09:a0:4a:2d:20:d4:7e:e2:47:e6:27:d4:6f:eb:1c:5e:8f:
07:5e:2d:d5:aa:2c:db:75:86:0a:13:0b:c1:ee:c8:84:86:6f:
55:05:26:f8:22:c5:1a:4e:2e:8a:77:29:6a:a3:a2:34:ef:37:
4f:cc:f4:64:e2:87:15:df:5a:a1:b7:78:07:71:19:ac:33:ec:
2e:8b:23:af:20:87:38:4a:b2:0d:f2:f5:27:2d:7f:43:d1:0b:
a5:a6:6f:70:d2:18:5e:db:4b:99:fb:79:04:0f:01:6d:e4:34:
6d:8b:7d:70:3d:1b:9c:54:54:c5:07:4a:12:bb:a0:93:68:1e:
6a:dc:87:20:f0:ba:5e:59:c7:6a:90:6b:a2:3a:6f:94:d1:62:
dc:a9:84:25:7e:95:aa:47:27:83:47:02:e1:38:19:7f:fa:55:
db:c8:df:9c:00:97:db:b8:5f:b3:58:f6:66:fa:47:9f:b6:d8:
5d:0b:68:73:44:2d:96:65:31:6c:a6:40:90:66:c1:1c:00:08:
0a:78:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:08 2025 by rpki-client