Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File: 36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier: 9X1G+HhdPdIo31nJIGW4SsGLpNzeeodC+3hLngpzJ70=
Subject key identifier: 99:ED:50:8F:4B:D6:52:91:CA:2C:D0:3C:65:A9:FC:23:AA:2D:C3:A2
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial: 0199FCFD793C0951AE81032A39F0E8B794D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number: 0CDE
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: ik3iYhHeOOunHmsU7YLs/C1doxascn+/M8IAjBtN71E=)
2: q9fcvPSCGF87XIMkqAi6UV4OZNg.roa (hash: tkmW6OPW8Rw8o76e0nZ8YOnHGwglb96QyBZechqQT9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:79:3c:09:51:ae:81:03:2a:39:f0:e8:b7:94:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=99ed508f4bd65291ca2cd03c65a9fc23aa2dc3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:0f:9a:76:15:68:11:a1:6f:3e:df:62:91:
9b:a4:3b:8e:f3:e8:d1:90:0a:8f:01:9d:1d:01:88:
c6:39:5f:6a:6e:28:bc:a5:2c:0e:28:8c:7f:2f:18:
e9:f5:df:cc:cc:37:13:16:15:78:4b:d1:79:a1:c5:
6b:67:c4:b8:17:21:b4:85:a5:d5:1f:e7:c9:11:03:
80:c0:a9:0a:3e:46:ab:65:0a:93:11:82:52:89:3f:
c2:72:7c:df:57:a5:93:8b:a4:30:8c:2e:69:0f:ff:
44:c4:63:9a:c7:52:56:9d:3c:6b:68:8c:f1:9a:a9:
ea:6c:7c:37:7c:15:be:2d:05:e0:67:90:18:e2:0e:
b0:7b:a1:c5:7a:cf:b7:91:7d:5a:22:8a:db:45:2f:
94:d0:8f:ef:b3:86:48:ee:2c:53:50:34:dd:bd:fb:
3b:80:06:3e:e0:99:4b:df:89:d4:1e:13:e0:e5:ac:
f2:9e:b1:ce:35:6c:3c:3c:e0:d2:b8:82:a1:6d:96:
c1:3d:eb:ff:d5:93:2c:77:0d:77:08:0d:59:3a:f3:
66:8a:05:ea:41:9f:7f:a4:dd:3f:ba:f4:41:ee:10:
fa:04:0b:7e:4b:80:2c:b4:4d:e1:33:92:07:0e:d7:
8f:60:ef:c0:1f:ed:82:7a:5b:97:62:0d:43:5f:8d:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:50:8F:4B:D6:52:91:CA:2C:D0:3C:65:A9:FC:23:AA:2D:C3:A2
X509v3 Authority Key Identifier:
keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:28:f8:13:d9:52:c4:cf:23:85:46:85:6b:69:cc:ff:ec:d6:
1b:43:f2:80:de:4c:7f:a5:f0:57:1a:de:17:66:8a:90:fc:cf:
0c:d4:60:74:13:93:6e:ba:e3:3b:e2:b2:8e:3c:c9:aa:6b:c4:
f9:34:c7:ec:b9:44:92:fa:b7:b1:d2:5f:ec:f9:78:3d:73:76:
f7:e5:62:be:75:da:7d:eb:e3:3b:ed:76:1f:04:2e:07:80:6b:
7d:59:a3:b5:6a:68:8b:08:27:f2:c8:89:80:51:05:67:69:15:
08:f9:dd:85:82:9a:59:48:7c:06:1a:81:f9:cd:ad:00:1e:7c:
df:5d:06:f7:5b:89:be:ff:42:66:66:c5:2a:63:0d:7a:f5:0d:
fd:5a:0d:10:9e:8f:1d:48:cb:38:17:51:78:32:65:a1:f7:fb:
31:8a:46:a7:48:83:fc:ac:74:3d:7a:77:37:af:be:cb:0d:67:
af:35:72:97:73:84:c7:01:36:38:db:da:c4:6a:c4:07:35:50:
82:b4:b7:da:db:8c:bf:e9:54:02:91:72:6d:a9:ab:65:4a:77:
75:01:9e:14:46:b7:c5:83:dd:62:72:89:01:c5:0d:d2:f6:b2:
6f:7b:65:49:7f:ed:c3:4d:92:a2:f3:6f:7e:ad:15:19:6b:6c:
b3:36:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:45 2025 by rpki-client