Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: hZOzIdxrvRLTfMsiK6etdsVnWORipeLMDVzbePGHn98=
Subject key identifier: 05:B2:96:CC:DB:B4:45:7E:C2:25:84:1B:E8:8A:FA:73:3E:DA:CA:AF
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 0199FE46C296ECCFBF3BAACEA8040EC79DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 03D6
Signing time: Sun 19 Oct 2025 21:01:14 +0000
Manifest this update: Sun 19 Oct 2025 21:01:14 +0000
Manifest next update: Mon 20 Oct 2025 21:01:14 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: slhu73Gl3hLWx2fWeiASHAASsPGHnjLIK2d40EDkLf8=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c2:96:ec:cf:bf:3b:aa:ce:a8:04:0e:c7:9d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Oct 19 21:01:14 2025 GMT
Not After : Oct 20 21:01:14 2025 GMT
Subject: CN=05b296ccdbb4457ec225841be88afa733edacaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:38:c3:10:8f:a6:83:22:41:11:22:d2:40:
43:a4:c0:93:70:46:0c:85:6c:32:0a:e0:3e:c7:71:
ef:16:61:b2:83:f3:90:70:1d:59:c8:95:86:56:b2:
d2:be:9b:46:3e:2b:c3:df:a5:ca:71:b6:65:04:f8:
15:91:7f:f7:a3:79:69:4c:33:87:14:db:9a:4b:22:
e6:05:c9:83:cf:d3:ab:fa:ba:64:84:99:da:0a:f0:
71:2d:9a:e4:9e:2e:f6:c8:47:63:42:f3:b2:09:31:
e7:ae:5d:56:90:36:38:36:08:ba:1f:5b:0e:64:6f:
ba:79:1e:a6:bd:61:8b:cf:39:4e:d9:74:e2:04:eb:
32:d9:8e:32:b4:66:12:80:81:5f:78:ec:58:82:31:
23:a8:70:85:0a:af:fd:72:12:29:b9:cd:99:c3:d0:
3d:77:39:79:14:a7:cd:44:9f:be:7a:0b:50:fb:fd:
6d:95:f1:f4:71:7b:ba:18:37:d4:30:2a:8b:54:18:
ac:8e:64:8b:ca:1e:3d:dc:3e:35:d1:6e:1b:17:bd:
c7:7e:40:83:ba:fb:e9:3f:d0:6f:3d:5c:ca:3a:90:
fc:10:aa:2d:8d:97:c9:be:8d:04:d7:ac:1c:7d:fd:
fd:89:1f:13:ce:96:62:83:7b:8b:66:2d:4e:e4:64:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B2:96:CC:DB:B4:45:7E:C2:25:84:1B:E8:8A:FA:73:3E:DA:CA:AF
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:89:15:a1:e6:7d:2b:3f:c4:9d:a5:71:5b:e8:c4:80:02:
14:fa:bd:fb:59:ef:50:59:86:bf:c2:8e:35:29:3f:1c:5c:b9:
1a:3b:ae:1c:3f:5e:ff:46:f5:e6:e3:61:cd:67:12:18:18:38:
02:fa:d4:08:60:fa:b7:ef:93:8d:07:d3:2d:4e:4a:73:05:4f:
e8:8b:61:bf:1d:96:7f:3c:aa:19:e7:1f:97:94:25:76:53:04:
ad:3f:24:13:5f:53:31:02:db:48:27:22:84:b3:d7:ad:90:58:
08:fd:8a:dc:15:e3:5b:91:a2:9d:56:e6:a0:2d:be:b3:f2:98:
90:f8:c5:ea:c9:0d:aa:97:ed:35:3c:72:ab:77:c7:1d:c6:10:
d2:57:34:b4:95:fb:16:de:6c:76:34:a0:77:d9:fb:c8:62:06:
25:09:f8:d0:6a:72:5b:0d:ce:cd:d9:37:1a:f8:d5:fd:68:43:
91:cc:02:aa:9e:54:0c:ca:75:73:38:4b:2c:13:7f:77:e1:14:
e0:58:43:a7:d3:78:67:47:60:d8:21:1c:9d:ba:95:9c:ff:33:
55:48:95:9a:b9:00:51:14:5f:79:ad:60:12:36:cc:2d:0d:e9:
cb:eb:43:fe:10:ce:d0:52:55:9b:c1:37:ac:eb:c3:aa:32:80:
3d:2e:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:47 2025 by rpki-client