Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File: d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier: TWrhVF/3cNFFaPvAqeIHaplQqp5QOZ44pny1HqrNWPo=
Subject key identifier: 57:D8:DD:F9:73:97:5C:55:01:F9:3A:A8:55:47:FD:2A:99:23:20:1E
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer: /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial: 0199FBEAE352328034B33A23BB67C45FD0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number: 0FA2
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: bmhbJZwVKcJluf5Hw6r36kBMFalCwxXOuMHHsUl/6UY=)
2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e3:52:32:80:34:b3:3a:23:bb:67:c4:5f:d0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=57d8ddf973975c5501f93aa85547fd2a9923201e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:e9:42:f8:92:2e:59:62:83:d9:74:85:4a:
8f:3f:42:2d:96:1d:b6:fb:a4:35:2b:c9:5a:b0:d1:
47:5a:b6:39:c4:d3:8f:c3:2f:78:1f:70:5b:c9:6f:
26:84:4a:82:da:55:68:14:e5:0b:28:84:b3:79:36:
a8:ef:7d:f1:4a:8c:84:f4:f4:01:93:a2:a5:c1:df:
89:90:30:b8:d7:d1:1b:06:bb:e1:fe:d0:0b:e0:3e:
6b:39:0c:37:e9:4e:c3:78:d2:a6:54:9a:f8:94:b3:
ea:54:98:37:33:51:08:b3:27:e8:a5:2c:75:78:9a:
13:48:bf:23:29:5b:99:e4:04:43:a5:c6:2d:aa:74:
ce:3f:af:16:98:93:3b:8c:fa:f5:35:a2:9f:65:63:
c1:06:64:75:97:e1:22:43:de:9d:8c:87:ea:98:5a:
00:cb:ab:1c:4a:02:37:78:73:d2:54:33:84:82:52:
bd:e1:b2:6a:19:7f:9c:24:ca:86:87:c6:81:5a:31:
41:03:33:3e:83:ed:d7:eb:1b:ec:9d:ca:1a:80:7f:
83:cd:46:18:4a:1d:30:c3:8a:54:b0:b1:28:e2:63:
fd:6b:4f:1d:4c:24:ad:19:23:ba:5d:5a:bc:13:a3:
7a:5b:14:73:fa:db:a7:3b:51:37:e1:3c:6c:54:cb:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D8:DD:F9:73:97:5C:55:01:F9:3A:A8:55:47:FD:2A:99:23:20:1E
X509v3 Authority Key Identifier:
keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:05:1e:bc:48:d3:98:31:ca:d8:e0:fb:15:35:61:0a:b9:88:
5b:9d:23:4e:78:52:05:ec:a4:19:42:ff:79:d6:7f:13:3f:a6:
42:d2:ad:75:0f:f6:f4:c1:65:ce:0d:4a:84:49:22:6b:19:7b:
a3:50:2d:00:e3:f1:88:e3:ee:8a:1e:84:e9:b4:d1:78:18:4e:
d1:f2:c4:94:85:1b:2f:b4:bf:91:19:00:6d:84:42:43:97:ca:
a1:0c:0f:b1:db:ab:ad:0b:10:00:0f:cc:ae:f2:ce:41:8e:ca:
10:b1:49:2c:1b:84:38:6a:8a:77:b8:55:83:50:95:ee:b0:2e:
4e:a4:84:5e:35:e0:94:24:93:46:a5:22:10:5c:ee:2c:4c:37:
5f:f0:10:93:63:71:10:4b:83:75:c9:c7:00:03:c3:15:79:f0:
32:0b:0a:cf:1f:65:b8:10:84:3e:27:9d:56:e7:3e:20:a2:64:
c3:00:ca:ca:1e:19:7f:52:59:5a:e3:2e:a2:9a:f2:0d:3f:b1:
46:6d:41:5d:4b:f3:1d:46:81:8e:93:52:9c:8a:4e:61:5e:ed:
3d:43:67:f8:f2:80:6a:8a:87:7a:5b:8e:10:bb:69:ba:bd:78:
54:fb:d4:e2:5b:c0:6f:a1:71:3a:93:1d:c4:db:e2:45:90:73:
75:fd:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:21 2025 by rpki-client