Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json)
Hash identifier: MZ+oi3svrKtNgeKTRBlteQBmbXB3EZJ+FGrxeXgLPwI=
Subject key identifier: BD:1E:55:29:59:C5:AD:63:52:CA:CD:F8:4F:DA:AE:10:E6:03:AF:8B
Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Certificate serial: 0199FD344106B16FF516792844F2E1D89928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
Manifest number: 0FCC
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: 4FCKqar0XtnEKUi3gFfvOiKskUg.roa (hash: n0va6MokXLOyx5Mouds6xLFs3obz/ZHN/b5YuHxhU6k=)
2: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: 0WOV5i0aLQTHAXKInJzLr89KNqdf3Fh4EIlz3ZeW5EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:41:06:b1:6f:f5:16:79:28:44:f2:e1:d8:99:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=bd1e552959c5ad6352cacdf84fdaae10e603af8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:70:94:6d:fb:51:70:0f:dc:d6:bb:4a:fd:
08:ba:a7:46:3b:ff:34:49:f1:d7:cc:11:01:00:76:
a1:50:d5:bf:82:6f:38:54:c9:49:61:1b:65:27:7c:
27:cd:2f:73:b4:86:8e:07:ba:83:e5:2c:90:0b:03:
85:d7:c4:a2:a4:36:b0:70:75:68:61:fc:2d:d8:57:
4d:90:48:e5:c1:61:22:4c:1d:cc:db:cc:54:ea:1b:
08:a5:64:70:9e:65:18:a9:01:3e:c2:3f:1b:f3:b4:
c0:e4:d6:4e:ef:a4:bf:9b:a0:6f:ff:35:63:96:f1:
24:eb:a7:64:a7:74:e4:61:f3:30:2b:06:90:d4:8a:
fe:76:10:ec:45:5e:e1:35:b4:b1:59:07:d3:6f:8b:
d3:c8:88:fd:a6:d7:ea:5e:af:f4:ad:60:46:b2:e1:
71:33:5c:60:6b:fb:b9:d9:0e:8d:a8:21:8f:91:3c:
5d:49:e5:94:60:1a:ad:02:e9:ba:21:88:17:e8:ed:
8e:c3:70:8d:44:af:b8:26:0b:b9:80:25:9c:f5:a6:
89:f5:77:95:6f:75:3f:47:99:56:16:b8:38:73:75:
00:64:7d:e1:dc:0c:d7:9d:a6:a4:b4:f8:57:1c:42:
34:bf:2c:c4:a9:3c:19:e7:47:3a:7c:6e:89:40:dc:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1E:55:29:59:C5:AD:63:52:CA:CD:F8:4F:DA:AE:10:E6:03:AF:8B
X509v3 Authority Key Identifier:
keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2d:0b:48:1e:f8:32:87:b0:c6:4f:78:6d:0d:03:60:c9:0e:
5e:74:19:9f:49:8c:5c:0a:75:27:08:e1:05:d8:c7:c5:87:8a:
15:ac:ec:c5:f0:8d:49:6e:a7:9b:14:6c:ae:da:37:08:7d:21:
62:f1:37:b8:fa:1e:76:16:bd:6f:85:d5:b6:74:04:35:da:c1:
70:f2:37:0c:d3:17:ea:59:30:57:b9:51:9a:bd:a8:83:88:34:
0b:df:60:de:08:9a:2a:76:73:a6:31:76:e9:a8:9f:a4:35:ff:
83:52:9c:d2:81:ca:75:b0:df:bd:10:fb:36:0a:3d:71:71:26:
58:11:41:59:86:e3:77:6e:9d:a6:e8:c2:e8:81:88:57:e5:c5:
86:bc:ee:03:22:23:43:b6:68:cf:d2:43:a8:a3:cb:ad:0b:65:
cd:be:24:ad:8a:30:df:6f:07:39:c9:66:91:20:8e:62:55:4d:
dc:d9:c4:29:c5:40:45:b9:5c:f9:0c:f5:c0:20:85:38:2e:df:
b7:e6:b1:82:13:47:e3:0b:c0:dc:09:5b:80:57:36:37:0d:39:
f4:c6:4a:1e:5c:e2:7c:f6:eb:91:04:d9:ca:d4:b8:34:44:97:
1a:d6:85:6b:53:c2:51:46:32:13:dd:55:25:7a:ef:64:3f:ec:
4e:51:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:47 2025 by rpki-client