Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
File: d5pKQpXGOP3nYPPNpHbYv8JxErI.mft (raw, json)
Hash identifier: 4oRgbjWuYDJqD48QzFz62te81y3SMfiQ4pNdtYqyEHU=
Subject key identifier: 8F:B8:76:7A:05:35:0D:65:BD:21:CA:0A:52:F2:12:50:C1:F4:35:75
Authority key identifier: 77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
Certificate issuer: /CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Certificate serial: 0199FF59632CC8095141CE835AB7FBEFC55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
Manifest number: 0199
Signing time: Mon 20 Oct 2025 02:01:11 +0000
Manifest this update: Mon 20 Oct 2025 02:01:11 +0000
Manifest next update: Tue 21 Oct 2025 02:01:11 +0000
Files and hashes: 1: 9YQA36vAku85UbE81d8YCXXLJnY.roa (hash: Aeb9cL8NYmy9yNSDJcp65b2WQtEKFZt794slbkjrbPk=)
2: d5pKQpXGOP3nYPPNpHbYv8JxErI.crl (hash: u8R63mDMP+7DAhxc79uiWIV7yvPO/Cx2FB16inst2nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:63:2c:c8:09:51:41:ce:83:5a:b7:fb:ef:c5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779a4a4295c638fde760f3cda476d8bfc27112b2
Validity
Not Before: Oct 20 02:01:11 2025 GMT
Not After : Oct 21 02:01:11 2025 GMT
Subject: CN=8fb8767a05350d65bd21ca0a52f21250c1f43575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:37:7f:98:2f:72:5e:9a:30:64:99:d6:f3:
b7:62:4d:f1:cd:c4:26:7e:b4:47:d0:cf:4d:65:14:
80:17:27:7f:44:cc:f1:87:ab:db:24:5c:33:1b:d8:
00:d1:11:d4:ad:a1:05:3d:f9:9c:3d:d9:b0:42:e0:
5c:57:80:56:bc:f2:3a:67:67:b4:8c:ab:a8:10:b1:
df:fb:e6:83:f1:82:0b:23:e4:97:f9:d4:d0:8e:d5:
d2:e0:74:55:df:61:54:b8:61:ab:59:7a:cd:3c:25:
4b:b2:3c:18:29:1e:8d:4e:d6:18:ed:ae:18:9c:a6:
14:4e:6a:e0:b3:ad:e2:4f:85:68:2e:8f:07:31:68:
06:2b:9a:c9:d5:49:05:ec:93:bc:ba:04:ca:30:2f:
9a:61:f7:8b:cf:81:d0:91:ce:67:41:82:5c:ad:8f:
53:d4:c4:6b:40:0d:84:df:56:e5:91:34:7b:ff:50:
00:a7:f6:98:d0:f1:65:39:fc:8d:c6:45:6c:d1:03:
9f:72:33:2b:2a:53:86:25:90:ff:5a:ef:26:f2:46:
c2:dd:e9:75:a1:8f:30:9d:bc:79:92:ef:c5:ef:79:
40:cb:f6:37:64:44:b8:f9:59:ac:91:1c:ed:d9:5d:
53:e2:3d:72:37:69:f6:19:ad:e1:9e:69:d5:37:63:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:76:7A:05:35:0D:65:BD:21:CA:0A:52:F2:12:50:C1:F4:35:75
X509v3 Authority Key Identifier:
keyid:77:9A:4A:42:95:C6:38:FD:E7:60:F3:CD:A4:76:D8:BF:C2:71:12:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5pKQpXGOP3nYPPNpHbYv8JxErI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fd89f9-98b6-4217-bccd-62c67d4bc546/1/d5pKQpXGOP3nYPPNpHbYv8JxErI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:97:7e:50:ae:25:69:51:d0:bb:f6:b2:5c:58:90:2c:05:f4:
69:93:54:11:4d:20:76:e4:71:f7:f6:2d:69:d2:54:36:05:df:
48:b5:4e:62:ba:5d:4f:11:24:c0:fa:04:f2:29:d1:88:78:dd:
b0:b4:f9:e6:8f:28:80:46:2e:0e:78:53:f6:22:01:d2:48:a5:
43:27:b3:a0:08:a5:ec:60:df:79:f0:6f:52:9f:7d:e4:3e:43:
fc:e5:9b:18:6b:87:0f:eb:a3:f6:ca:38:0b:db:90:46:a4:4f:
08:8a:6c:96:f8:12:e2:c5:f3:9d:ef:09:6b:bc:3a:94:a7:a6:
f8:36:8f:ac:3a:7c:24:8c:70:8c:21:74:4c:13:16:19:8e:db:
59:10:fd:cd:e2:64:f2:38:eb:b0:e3:2b:64:bb:93:a6:f4:4f:
c2:f5:37:8c:20:e7:77:54:df:42:62:f6:d0:cd:10:96:e3:de:
f0:46:04:63:10:9d:2f:83:f6:7b:69:f8:17:10:bf:98:f9:45:
0e:df:b4:ab:26:8b:b0:0d:a5:85:08:57:07:d9:ee:47:9d:18:
05:6c:c5:c8:d6:81:5d:6c:4e:9e:de:b0:f9:eb:10:14:8b:dc:
9d:72:e6:b8:a3:cc:26:38:3f:20:c1:1d:f0:97:8b:1d:7e:60:
64:40:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:53 2025 by rpki-client