Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: Im/5oI2iAKDoy6rcWoMnAGvRg2mIal946hAbMyLNfvM=
Subject key identifier: F9:F6:19:3D:2D:E5:67:F6:9B:46:15:44:B1:93:9C:23:A3:8B:A2:CF
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 0199FBEB3841EBBD02521F32B1013D4BE914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 0F49
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: con/q2f6hA4C94R1bjkuwvLTjRAV3tRT56e95wkVn6U=)
2: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (hash: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=)
3: fzU99qCGkV_CIT5aPe-FRXxnYbQ.roa (hash: vzw9SWyMsFCc6IE8QjYq1it7590sCq4Ux6IdTNIF19M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:38:41:eb:bd:02:52:1f:32:b1:01:3d:4b:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=f9f6193d2de567f69b461544b1939c23a38ba2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fb:87:04:98:1b:1b:c9:6f:56:d4:d7:b7:72:
94:70:cc:be:3e:97:49:c3:e7:26:04:d5:ee:90:74:
2b:c8:0a:97:81:84:d3:91:af:0e:1b:0f:b9:46:48:
c4:75:e1:fb:6f:5a:ca:d6:79:28:dd:e5:22:e3:a6:
9e:c6:fc:c7:e2:8e:bc:24:a6:06:74:dd:d4:5d:ef:
d3:18:24:35:b2:4c:8b:e7:a7:ee:b7:39:a9:c4:14:
3d:12:b0:ec:2a:8b:17:f0:11:54:8f:67:fd:7c:5e:
a7:ad:4d:99:13:eb:c5:e7:cc:72:d6:6b:32:5a:b6:
b9:a9:6e:7c:5e:f3:12:37:40:7f:ff:84:d5:e1:e5:
23:aa:fb:5b:35:1c:d1:a6:ac:2f:c1:bb:73:b9:e5:
38:ca:b6:fc:d5:95:dc:b9:31:8c:ba:be:f4:ea:9f:
54:20:2b:8f:63:84:e5:f3:cc:91:7e:58:15:7c:f5:
eb:a0:60:b8:b4:69:e0:a3:75:ff:4f:58:46:06:bd:
af:00:ff:00:5b:ca:b8:2f:82:07:95:5a:b9:c8:47:
8d:fd:99:4e:8b:cc:e6:9a:1f:2b:1f:98:01:bc:c2:
3d:3f:3d:ff:78:ce:3d:0d:90:c7:6e:9c:2a:1c:77:
73:80:60:ab:ab:ea:75:cc:87:e1:b6:ff:63:c6:8a:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:19:3D:2D:E5:67:F6:9B:46:15:44:B1:93:9C:23:A3:8B:A2:CF
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:a7:f4:f3:2e:ec:2e:31:86:d1:7b:05:90:34:47:0a:7c:
20:38:4e:50:cd:29:88:99:ab:83:69:92:2e:e7:c9:63:ad:e1:
f0:50:b5:7a:92:e9:a5:ab:52:f8:f8:d1:d6:dd:b8:d0:e4:13:
f2:2c:d3:07:6b:88:0f:4a:d0:bc:6f:1b:47:7a:b5:51:e9:7c:
e4:7a:11:ff:19:b6:84:41:e0:44:6c:9e:bd:be:2f:dd:1c:5a:
ed:a8:e0:0e:af:a1:d1:63:0d:5e:75:fc:bd:5a:b0:74:85:9f:
6a:5b:36:ff:60:9c:e3:a7:f2:a5:13:c5:59:29:eb:44:79:44:
ef:51:bc:8d:0f:55:18:7c:fd:f2:10:bc:80:30:fc:65:70:c8:
93:f5:cc:77:c1:6c:c8:0b:bd:90:a0:f3:79:59:3c:09:34:78:
6a:e0:dd:8b:0e:11:34:ee:36:6d:91:96:f1:1b:bc:34:65:75:
34:21:ce:d1:89:ad:e0:c4:3e:0a:3f:a7:31:14:15:28:d8:1e:
04:39:0b:0a:aa:d9:cb:2c:3a:63:29:b7:42:19:15:f2:83:0f:
f7:c2:bf:9d:34:31:0d:08:17:4c:5c:5b:61:77:f5:ad:bf:47:
ba:10:7d:e2:69:5f:3d:a5:e5:e4:d9:d8:0a:2a:79:0d:ce:d3:
2f:b1:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:48 2025 by rpki-client