Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: TceQDJw+7MG1SQH7bqUHDizptj23MIIhaPnZVOl8/G8=
Subject key identifier: 9B:F2:FF:36:C5:87:87:FD:F5:C7:F0:F1:EA:06:EE:B8:09:1A:3B:8F
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 0199FF224215578A53EDD8271300E5589324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 10CD
Signing time: Mon 20 Oct 2025 01:00:59 +0000
Manifest this update: Mon 20 Oct 2025 01:00:59 +0000
Manifest next update: Tue 21 Oct 2025 01:00:59 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: iIeIeQ7BppduMgTS49RJjYku5zhacWZtQx9JiDon7g8=)
2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=)
3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:42:15:57:8a:53:ed:d8:27:13:00:e5:58:93:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Oct 20 01:00:59 2025 GMT
Not After : Oct 21 01:00:59 2025 GMT
Subject: CN=9bf2ff36c58787fdf5c7f0f1ea06eeb8091a3b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b4:de:30:09:65:e4:ae:e2:f0:15:b4:46:ef:
31:6e:f7:4f:39:90:2d:b7:6d:af:a8:31:e1:3c:26:
07:dd:1e:2f:43:42:20:d6:7d:50:58:ed:6d:e5:51:
13:ef:3e:70:04:5b:ca:11:f3:12:41:4e:66:c9:b6:
1c:c0:64:79:8d:da:0e:e3:37:8f:43:fb:15:43:54:
62:3c:3e:47:e5:8b:5c:a7:8d:29:32:d2:2b:24:a3:
05:12:b6:eb:cd:ca:fc:59:1b:f6:2d:9c:19:85:67:
8b:be:1b:fe:37:b1:dc:bd:ce:64:37:00:4c:7d:82:
19:b0:e9:45:a0:7e:f8:09:8d:0a:68:9d:f1:9b:cd:
35:8c:90:db:25:1e:98:d3:53:ca:ec:75:08:db:42:
ce:7f:09:f8:90:c4:7b:0e:68:36:ac:b3:a2:c2:84:
2f:da:15:0a:eb:0d:1b:d8:a4:44:e7:d1:bf:8d:a5:
6f:8c:31:42:6d:8f:5b:3c:6b:b6:60:10:83:ee:d1:
b9:8f:5a:46:10:ea:1e:96:84:ff:20:08:1c:36:1c:
6d:f9:e1:08:0d:ae:c6:b5:a7:5c:7d:07:cb:f0:db:
63:d9:5f:41:91:93:be:43:8f:af:96:fd:14:90:30:
35:08:e1:e8:a9:5f:82:30:a2:e7:97:33:6c:d2:af:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F2:FF:36:C5:87:87:FD:F5:C7:F0:F1:EA:06:EE:B8:09:1A:3B:8F
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:60:ca:f0:70:b3:61:79:94:ce:00:68:b6:6f:7e:50:73:03:
e3:d5:46:a9:9d:fd:54:7b:66:c6:41:d7:64:92:c2:b7:e5:b3:
6d:07:f7:d1:0c:53:50:a7:ff:e2:64:b4:70:27:8d:fa:ce:50:
74:aa:6b:45:cb:92:7d:70:76:07:42:a3:ee:f0:e7:81:9d:b8:
cd:da:a4:97:a3:9c:b6:69:50:b8:b8:84:75:5d:88:dd:62:d5:
ff:80:8f:db:78:b2:4c:d0:6a:ac:95:7e:51:2a:26:47:a6:85:
52:cf:8c:9c:4e:d7:b4:64:e4:6e:f6:ce:56:48:f5:8c:a7:91:
7b:90:4e:32:75:83:1d:d2:9f:80:c3:b6:7c:ff:e9:fc:c9:1d:
8b:88:2e:bf:1d:04:96:fe:2d:93:19:4c:e0:5b:19:3a:e7:e4:
0e:07:7e:51:81:3e:77:3d:c8:42:7e:e3:5a:7a:af:6d:60:d9:
f6:a7:e7:bf:5e:a3:10:6b:21:77:ae:12:69:86:ef:0f:73:0f:
a0:7e:64:95:d3:3d:f1:b3:ae:86:68:1f:d7:0e:73:6a:c0:05:
6b:c7:31:77:97:af:d0:4a:19:6d:4b:ca:e7:ec:6b:56:88:1b:
11:20:ab:40:bd:17:ce:47:17:7b:c1:0a:ca:80:49:da:56:73:
c0:d9:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:19 2025 by rpki-client