Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: HeiXl1Q/6iA20Aj6C6hDVaW5Ghb92wQXqyNylJDXzeE=
Subject key identifier: 35:DC:40:82:59:2F:5F:83:31:B6:1C:82:72:50:CB:D8:EA:91:3E:19
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 019A1128394230371628C43B366797A829BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0E64
Signing time: Thu 23 Oct 2025 13:00:39 +0000
Manifest this update: Thu 23 Oct 2025 13:00:39 +0000
Manifest next update: Fri 24 Oct 2025 13:00:39 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: xrSMlGeN/LYxXOqvGRBLPP9Go79lxIOBOSydODcT500=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:28:39:42:30:37:16:28:c4:3b:36:67:97:a8:29:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Oct 23 13:00:39 2025 GMT
Not After : Oct 24 13:00:39 2025 GMT
Subject: CN=35dc4082592f5f8331b61c827250cbd8ea913e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:88:47:f0:2b:f1:ba:bf:6a:d2:f4:0a:01:
7f:52:14:05:79:cd:41:b0:58:ea:0e:29:ff:93:61:
db:2b:7d:cb:6c:f4:5e:82:12:ae:6a:bd:7b:fc:42:
d3:e3:0c:5c:3d:66:53:28:c9:50:92:5c:e0:0c:00:
ce:eb:d5:03:07:7b:8b:28:76:d8:59:83:27:8b:0e:
b6:57:2c:e6:fd:f2:1e:0f:d7:b5:bc:13:c3:f9:35:
f9:36:93:1d:4e:3d:12:bd:30:6a:8f:21:58:92:b7:
6b:9b:68:c4:6e:bb:0e:20:7c:59:55:16:42:bb:ea:
0b:86:f9:72:1e:90:2d:b5:a8:8d:3a:84:8c:4a:6e:
43:b4:c5:18:31:cf:00:62:b9:c5:21:18:d6:d0:a4:
fd:45:70:04:e4:18:1a:36:37:4b:49:b0:02:94:02:
9f:c1:3c:dd:43:b3:ab:b0:55:77:e2:b6:d1:f6:4d:
5a:a9:c6:a1:b0:3a:2a:eb:3d:63:7e:66:6b:d0:bf:
db:17:5d:99:75:3c:50:29:71:3d:82:09:df:70:42:
dc:2f:8f:6d:42:0c:80:be:5a:d6:2f:f2:f4:cd:b4:
a0:6b:27:4c:21:fb:10:80:7f:86:05:7a:20:17:2c:
b3:34:4d:28:70:ff:92:80:0f:61:1b:3f:75:00:82:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:40:82:59:2F:5F:83:31:B6:1C:82:72:50:CB:D8:EA:91:3E:19
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:6c:82:96:a8:d3:25:30:49:5c:32:e6:28:c5:62:5b:8e:
23:38:65:47:53:65:56:78:8e:30:07:00:2f:00:61:5d:2f:54:
22:51:e1:f1:37:ed:1d:08:2f:f9:8c:f6:97:23:87:47:0b:6f:
cb:60:86:cb:21:9e:a1:ee:6a:b7:92:cf:15:30:2a:a3:01:f6:
0a:4d:fc:56:a3:35:de:93:4d:87:fc:ea:93:96:37:ac:65:9f:
29:32:e4:6d:fb:f6:af:79:48:1b:1a:a2:4f:98:c5:a1:2e:7c:
e4:f8:d6:b4:60:de:1b:35:13:f2:6c:15:a4:b4:13:c5:e3:cb:
d4:09:fe:15:64:4b:c4:fa:fa:c9:2d:ec:e1:7c:4b:5d:95:9b:
91:0f:e8:7d:92:7d:25:c5:e3:e2:eb:9b:c0:86:60:4b:03:92:
78:19:22:1d:41:68:f3:5e:8a:da:64:1c:1a:8c:bf:e3:33:3d:
42:d5:63:b4:25:4f:ec:e4:d2:49:5e:4b:f3:f4:da:3b:ae:4b:
f6:11:ee:2e:cd:d5:18:19:eb:07:85:94:32:32:0a:59:89:89:
76:77:e6:8a:26:50:6a:f7:83:12:cc:81:40:95:57:a3:42:03:
6c:b9:93:eb:bd:50:67:82:26:a0:6e:15:e1:e2:f4:60:e6:da:
97:45:ba:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:37:47 2025 by rpki-client