Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: ATt+zjJ6w3rbYvBorCY17WuzebLKPCdP96uxrLdyhpA=
Subject key identifier: E8:5A:26:0D:F8:E3:D7:20:F9:76:2B:AB:05:D8:09:36:9F:87:A9:43
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 0199FCFD7F6398562B182AA8EEF6E74A93BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 04F1
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: khx38lZS/NTLT6lvn5rDfJpU+BRmSpmUMMaku+u5zrs=)
2: yErW5kNKHDcTg-fzTjTLkaeTdfs.roa (hash: kizhklattplgXfiOmItfgbUnFHeiT1NCHm8Wv3r0lL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7f:63:98:56:2b:18:2a:a8:ee:f6:e7:4a:93:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=e85a260df8e3d720f9762bab05d809369f87a943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:74:5d:bb:26:7b:d1:e3:f9:5e:79:38:f4:
62:d9:a5:5f:13:da:ce:d9:94:dc:76:99:bc:9d:fb:
58:f5:45:c0:79:30:4e:5b:7e:41:9e:bc:51:44:e9:
3e:55:8c:f5:db:9f:87:5f:78:91:96:f5:0b:76:07:
71:10:83:cd:4f:13:1d:90:68:af:5d:bf:7b:2b:91:
0e:2d:b8:91:ad:c8:6f:69:c3:b3:05:99:85:11:64:
24:e5:44:f9:16:cf:93:96:fa:f8:33:2a:0b:0e:27:
fc:18:26:d4:22:15:29:73:22:aa:cc:b4:31:af:72:
12:19:58:0e:32:d4:23:75:78:ae:e9:5b:93:da:92:
6f:94:d2:57:d6:00:46:68:b4:c7:36:36:6f:90:c0:
e3:24:a4:e6:ed:2c:fd:95:d1:59:58:d6:18:5e:a9:
e0:0d:74:5b:25:c1:c6:02:54:63:2a:cc:b8:29:59:
32:31:9e:3e:04:be:16:76:53:b2:1c:20:83:e5:3a:
75:24:84:a6:f9:c6:90:78:51:0e:7c:15:c4:1b:ca:
e9:67:8a:54:ae:d1:05:69:07:49:31:0f:bf:e4:22:
0a:b0:03:cc:cf:d7:96:67:a8:73:2c:67:bf:53:59:
25:41:c8:73:ab:34:84:68:42:5e:ae:88:58:7c:c5:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:26:0D:F8:E3:D7:20:F9:76:2B:AB:05:D8:09:36:9F:87:A9:43
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:98:e0:db:c0:70:c9:d8:74:0e:f1:83:df:f9:dc:a5:b6:4e:
34:c1:1b:e4:3e:b9:b4:12:53:3a:42:4e:06:d7:57:34:a3:b7:
f2:40:6c:03:6d:28:33:86:54:e2:7a:05:8d:7c:1c:7a:7b:ee:
5f:9a:23:01:40:3e:35:89:f7:52:26:0e:5e:20:ce:7d:15:ec:
e7:cd:d7:f3:2d:b9:bc:5d:cf:b0:e0:a2:04:35:0a:3c:76:60:
a2:bd:b8:d9:21:06:32:02:d4:e3:ff:1a:3e:5d:cd:da:a8:b0:
bb:53:4d:fe:2b:cb:97:37:97:c9:dd:d0:db:1c:19:fa:df:8b:
33:93:af:52:d8:00:64:f7:1b:90:20:24:32:05:6e:56:7e:94:
fc:4c:b2:eb:fa:13:9c:2d:a6:43:af:04:58:37:c9:61:29:a6:
8c:e3:a4:3d:41:49:2c:fa:04:5e:7e:01:cf:b8:f9:ce:41:56:
2c:00:e8:c7:cf:66:1a:26:9b:44:49:30:27:3d:b0:bc:b1:bc:
fe:eb:fa:32:4a:cb:ba:f0:fb:89:bc:a6:c8:bb:11:90:c2:e0:
00:a8:fb:c8:e9:12:1b:3b:eb:43:92:f8:6b:0d:b9:b0:a0:e2:
38:03:a2:5f:52:db:34:63:d0:39:16:f9:cc:55:81:e0:2d:31:
d7:27:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:01 2025 by rpki-client