Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
File: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft (raw, json)
Hash identifier: Uy+6efn0vlgLdDLKsYjYSgwifVRHDgZCCX214mOOm0k=
Subject key identifier: BE:A7:B3:62:10:59:90:13:CA:51:D9:DB:17:5B:2D:EE:6F:9D:4F:32
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Certificate issuer: /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial: 019A00DA04BB3FD16062D1A17530A45A310A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
Manifest number: 0679
Signing time: Mon 20 Oct 2025 09:01:19 +0000
Manifest this update: Mon 20 Oct 2025 09:01:19 +0000
Manifest next update: Tue 21 Oct 2025 09:01:19 +0000
Files and hashes: 1: dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl (hash: S9vGS13AJ3NSMnjSgNSOP55HcLinEemxyzB3tYtCAN4=)
2: f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa (hash: f6fUQrnWj0Ply8n/xjNr8BkToE1SYVL6yBIWZoWRSsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:04:bb:3f:d1:60:62:d1:a1:75:30:a4:5a:31:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Validity
Not Before: Oct 20 09:01:19 2025 GMT
Not After : Oct 21 09:01:19 2025 GMT
Subject: CN=bea7b36210599013ca51d9db175b2dee6f9d4f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:44:0b:d7:3f:49:13:72:3b:85:4c:17:43:
49:9c:8e:fa:50:22:ea:a0:a6:9c:9e:7c:82:aa:21:
b2:2c:b5:b9:10:d5:14:8c:0e:f0:8c:81:3f:e5:0f:
82:b4:d8:76:e8:8c:14:b1:68:d9:bb:0e:2c:cc:32:
62:87:ee:b0:c6:c4:68:2d:c1:a2:4c:cf:ca:1e:32:
8b:5e:b2:ef:55:f7:3b:a3:aa:09:23:5a:fb:23:c5:
fd:32:29:0b:89:b8:4d:5b:dd:6d:5a:f3:d2:f9:bc:
70:c9:3f:c9:fc:25:ce:9b:89:0a:85:17:d0:71:5e:
8a:5e:6b:aa:1c:3c:db:d9:26:3e:43:ad:3f:30:5d:
3e:52:a7:37:16:4e:9b:a5:b1:66:88:04:d8:16:98:
f8:b1:e0:45:22:59:6e:25:34:95:f3:ce:47:84:77:
f0:d4:88:55:1f:9d:44:84:c7:21:90:50:72:47:0d:
38:1a:27:9d:72:02:3a:00:d7:1e:9b:e8:55:aa:a6:
c6:7b:61:48:5b:10:ef:1c:0e:83:8d:20:e3:78:57:
7d:89:cf:2d:aa:f9:fc:7e:dc:f2:e5:95:34:76:0a:
1f:eb:11:5d:9a:d3:b3:fc:a8:7b:d8:c8:64:50:88:
c0:12:ab:48:f1:08:8e:9f:c7:a9:6f:95:14:52:18:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A7:B3:62:10:59:90:13:CA:51:D9:DB:17:5B:2D:EE:6F:9D:4F:32
X509v3 Authority Key Identifier:
keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bb:6c:1f:a3:9d:e4:44:83:4c:47:0f:6a:ec:14:51:08:58:
5c:f5:21:a3:74:18:df:3b:26:5f:67:e1:74:41:4a:24:b1:51:
3e:3a:a5:36:92:69:4b:35:de:20:ce:2d:ad:66:9c:97:61:b6:
bf:0a:14:eb:0c:10:0f:46:e4:16:94:a9:f1:81:9e:55:2c:de:
ab:e4:16:f1:7e:d0:42:6c:cf:de:ba:01:00:3e:7c:e1:99:fd:
80:a1:8e:a4:c8:a7:cb:48:5b:b1:bb:85:66:45:ac:68:01:ad:
a0:cc:5d:c9:fe:5f:03:65:bf:7e:d1:1c:52:86:ea:91:13:7a:
a9:ac:68:5c:50:b3:fa:78:d9:90:cf:e2:ed:af:9b:11:fc:5b:
3b:ef:1a:55:1c:66:42:e6:5a:01:70:3c:17:de:b1:08:cb:d4:
93:90:5e:dc:62:4e:46:c0:7c:c7:a4:80:1d:86:7c:d9:26:d6:
10:fa:3c:de:83:bd:4f:d1:00:25:a0:2d:34:42:87:89:6f:e4:
ee:9e:d8:2e:ea:be:79:1d:14:e0:7c:30:2a:23:45:4f:db:0a:
6a:fb:e1:27:de:cf:4b:3d:a6:5a:54:83:34:18:21:f8:9f:34:
a3:4c:eb:aa:d2:82:c1:13:2c:6f:d1:2b:40:5b:fb:25:32:f1:
8f:d0:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:37 2025 by rpki-client