Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
File: d-L_RonUITUPdqNzvBGT5FG4HvU.mft (raw, json)
Hash identifier: uUNoy+IjqepkfHfnmIilhhyS1trs0UK0ySm2fK4MYGw=
Subject key identifier: 75:3F:26:AF:09:A0:80:6B:7D:77:73:DC:8D:53:6A:BC:F3:6D:A9:4E
Authority key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
Certificate issuer: /CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Certificate serial: 0199FCC62C11DD4C16F54FD05F52415A7030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
Manifest number: CA
Signing time: Sun 19 Oct 2025 14:01:09 +0000
Manifest this update: Sun 19 Oct 2025 14:01:09 +0000
Manifest next update: Mon 20 Oct 2025 14:01:09 +0000
Files and hashes: 1: _jCuY0H7p6bIiBFSZYJo7QRa2GM.roa (hash: TpMghtYoXA8sj9zv0aUbBiasB0uWw4MufaB/nWeBcDs=)
2: d-L_RonUITUPdqNzvBGT5FG4HvU.crl (hash: 2Tocs8epubrY/oubZCpF6Z1p89reZ0HMh5RSYrrarhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:2c:11:dd:4c:16:f5:4f:d0:5f:52:41:5a:70:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e2ff4689d421350f76a373bc1193e451b81ef5
Validity
Not Before: Oct 19 14:01:09 2025 GMT
Not After : Oct 20 14:01:09 2025 GMT
Subject: CN=753f26af09a0806b7d7773dc8d536abcf36da94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:ff:59:df:34:80:d8:3c:c6:81:95:6e:c4:
ec:d6:51:f1:6b:fe:1c:04:0a:54:07:65:8a:f5:53:
23:58:3b:f6:3b:07:d4:70:5e:58:f4:4c:c6:0b:74:
f8:49:4e:a4:f5:06:66:ce:96:2c:f8:6f:54:3a:5b:
32:7e:c5:3c:3a:11:97:22:5f:40:0c:95:a8:82:da:
8b:fb:8b:c6:e3:31:01:c1:3d:1c:94:73:ac:9a:f1:
ba:ca:2c:cc:35:92:a6:4b:a0:42:7a:95:c7:6f:a0:
f4:80:a6:45:cb:b5:c7:42:88:ba:f7:19:10:a4:89:
7e:10:10:b9:ab:c3:8c:69:45:e0:8a:52:50:2e:91:
66:ec:80:b8:1b:46:15:f5:bb:7c:ef:c6:d4:74:11:
a2:99:66:d4:bf:c3:0f:2a:9c:0a:dc:9d:e4:39:45:
ac:88:6d:58:4d:f5:7a:b4:35:2c:ac:1d:8a:47:60:
f3:82:26:73:04:e6:ac:56:0b:41:a1:19:15:44:1a:
07:a3:8d:35:1c:39:f4:2e:66:89:2d:82:57:55:0e:
09:13:ac:86:13:39:50:88:a2:96:cd:19:c2:e7:04:
c2:13:27:4d:9b:a4:b2:17:1b:19:c5:b9:dc:80:97:
c3:0e:df:53:00:9b:56:89:ed:d2:f8:3d:c6:83:a8:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:26:AF:09:A0:80:6B:7D:77:73:DC:8D:53:6A:BC:F3:6D:A9:4E
X509v3 Authority Key Identifier:
keyid:77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:28:17:7c:78:15:f7:24:38:df:14:48:7b:fe:7a:c6:7f:46:
48:b7:5f:e4:54:17:0b:6b:a9:66:9e:85:2c:fd:3d:cc:c6:33:
c9:44:34:83:1c:23:aa:00:b2:20:61:19:43:4a:c1:5e:ec:1a:
df:93:45:e4:2d:e1:80:72:2a:6a:a3:a7:1f:f6:e8:19:1c:91:
da:4a:0c:40:96:d6:ad:16:9d:59:55:4b:43:6b:22:27:fe:26:
13:ca:41:a0:8d:1e:0e:37:8f:d9:72:2d:c3:b9:bf:70:1e:6e:
43:58:30:a2:dd:e2:7b:31:80:6e:c6:d2:5b:da:b6:49:2d:e7:
a0:97:d4:0b:0d:dd:d0:81:56:27:70:6c:24:ce:89:14:dc:1d:
1c:0b:ba:4f:86:29:53:f0:cf:a4:c3:7d:0d:d7:07:1f:a3:22:
f9:06:08:42:12:16:94:db:f1:67:65:b6:29:5a:ad:60:a6:74:
b5:ad:60:43:b7:ef:b0:de:66:35:c5:4f:09:4d:be:d2:2d:97:
56:b9:9a:08:5f:7d:f2:f5:a9:28:24:20:e5:82:31:e7:27:b1:
f9:b8:96:f5:c7:66:ce:62:a5:56:cc:49:23:6d:0e:98:15:88:
eb:cd:4c:62:bc:8f:e6:eb:25:40:c8:ba:c1:06:c2:3c:12:b8:
f6:b1:6b:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xiwR3UwW9U/QX1JBWnAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZTJmZjQ2ODlkNDIxMzUwZjc2YTM3M2JjMTE5M2U0NTFi
ODFlZjUwHhcNMjUxMDE5MTQwMTA5WhcNMjUxMDIwMTQwMTA5WjAzMTEwLwYDVQQD
Eyg3NTNmMjZhZjA5YTA4MDZiN2Q3NzczZGM4ZDUzNmFiY2YzNmRhOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1b/Wd80gNg8xoGVbsTs1lHxa/4c
BApUB2WK9VMjWDv2OwfUcF5Y9EzGC3T4SU6k9QZmzpYs+G9UOlsyfsU8OhGXIl9A
DJWogtqL+4vG4zEBwT0clHOsmvG6yizMNZKmS6BCepXHb6D0gKZFy7XHQoi69xkQ
pIl+EBC5q8OMaUXgilJQLpFm7IC4G0YV9bt878bUdBGimWbUv8MPKpwK3J3kOUWs
iG1YTfV6tDUsrB2KR2DzgiZzBOasVgtBoRkVRBoHo401HDn0LmaJLYJXVQ4JE6yG
EzlQiKKWzRnC5wTCEydNm6SyFxsZxbncgJfDDt9TAJtWie3S+D3Gg6j8VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU/Jq8JoIBrfXdz3I1TarzzbalOMB8GA1UdIwQY
MBaAFHfi/0aJ1CE1D3ajc7wRk+RRuB71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNTk2ZDktOWQ5YS00MDgxLWEyZjAt
NTQ0NmQ4NmJjZmM2LzEvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jNTk2ZDktOWQ5YS00MDgxLWEyZjAtNTQ0NmQ4NmJjZmM2
LzEvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzCgXfHgV
9yQ43xRIe/56xn9GSLdf5FQXC2upZp6FLP09zMYzyUQ0gxwjqgCyIGEZQ0rBXuwa
35NF5C3hgHIqaqOnH/boGRyR2koMQJbWrRadWVVLQ2siJ/4mE8pBoI0eDjeP2XIt
w7m/cB5uQ1gwot3iezGAbsbSW9q2SS3noJfUCw3d0IFWJ3BsJM6JFNwdHAu6T4Yp
U/DPpMN9DdcHH6Mi+QYIQhIWlNvxZ2W2KVqtYKZ0ta1gQ7fvsN5mNcVPCU2+0i2X
VrmaCF998vWpKCQg5YIx5yex+biW9cdmzmKlVsxJI20OmBWI681MYryP5uslQMi6
wQbCPBK49rFrig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:45 2025 by rpki-client