Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: jGS3fv94F15qsITZTCfmZVogUKh32iMW4+WMoHYSYn8=
Subject key identifier: DD:DF:55:AF:9D:6A:DA:53:7F:6B:B9:14:E7:AE:CA:F8:4E:FA:AE:00
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 019A2365AC0779D5B9C086AEEB53DC9EE45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 047D
Signing time: Mon 27 Oct 2025 02:00:56 +0000
Manifest this update: Mon 27 Oct 2025 02:00:56 +0000
Manifest next update: Tue 28 Oct 2025 02:00:56 +0000
Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: gctCqnR263OKcUGDSqlSYtNSOHsS93lByfGXu2Rj31o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:ac:07:79:d5:b9:c0:86:ae:eb:53:dc:9e:e4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Oct 27 02:00:56 2025 GMT
Not After : Oct 28 02:00:56 2025 GMT
Subject: CN=dddf55af9d6ada537f6bb914e7aecaf84efaae00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:6d:66:58:f2:49:36:f0:b5:c7:34:f1:04:
f4:4d:36:d3:d6:9e:ee:00:2a:8f:ad:aa:a8:14:e5:
bb:61:11:1d:2e:51:4f:2c:a4:f2:17:79:27:d0:74:
9d:23:6e:d6:bc:f4:48:2e:1e:1d:6a:0c:15:37:7e:
2e:15:4c:2e:77:3d:1c:6b:30:b0:95:09:1e:e0:42:
13:43:72:0b:d4:8c:2e:7b:e7:46:b1:aa:62:fd:1b:
d4:24:79:5c:b0:e3:be:29:4e:45:a2:e7:ea:02:a9:
7e:63:3e:e8:08:19:7f:04:70:7d:18:32:f5:2a:51:
ff:76:68:60:5e:93:d3:ab:a4:a7:72:c9:43:8c:b3:
b2:6b:49:d5:87:2d:80:e4:b9:c9:0b:97:06:7f:80:
14:c5:44:6b:76:33:c5:36:8d:1d:1b:41:35:e9:f2:
14:98:02:c3:3b:5f:26:ba:2d:a3:2e:95:e4:11:ba:
b3:62:bc:0c:c0:27:6a:92:a2:e7:fe:80:ee:75:55:
38:2a:45:2b:fa:ec:97:a2:b2:72:3f:6e:f9:0b:10:
7c:01:ac:9f:1e:6f:66:f4:c5:0f:75:e3:e2:42:b2:
60:d8:0b:c2:19:dc:2c:0f:56:0d:2a:16:dd:2f:04:
0e:9b:d3:f4:66:10:e3:92:dd:53:2e:2d:25:56:8f:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DF:55:AF:9D:6A:DA:53:7F:6B:B9:14:E7:AE:CA:F8:4E:FA:AE:00
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5b:1d:1e:ea:87:f5:23:01:c7:f2:77:25:5f:8c:ac:e3:7a:
b5:51:9d:20:c2:28:e5:0b:30:04:a5:b0:00:b7:ca:e6:bb:c1:
7d:ce:54:14:8b:15:b8:2e:07:61:86:e3:34:49:57:2d:6a:b5:
4e:1d:ca:46:7f:44:42:71:7f:86:d6:e0:5a:50:64:75:74:88:
61:51:b4:68:80:e5:36:71:28:a2:4d:68:3a:c2:d2:02:47:4e:
70:7c:85:00:e5:e0:29:85:43:ba:4c:9c:8b:82:b8:21:53:0b:
a0:2b:7f:2a:26:f2:90:50:5a:64:4e:a2:a9:0c:5f:c0:a1:5e:
49:85:c6:79:c4:a3:f0:87:1b:b5:78:9c:11:1f:fb:38:85:0f:
c9:31:2e:d0:5c:61:c8:9c:66:03:7f:76:73:3a:08:f9:9d:25:
77:b1:8a:48:5b:53:fc:59:50:5e:21:d6:f0:5c:2e:e0:3d:65:
21:35:35:c4:ff:8a:1e:22:5f:20:88:5c:2f:db:1d:d8:ae:38:
12:2d:c4:30:4a:54:b5:70:30:b5:78:6f:ee:9d:19:6d:e4:40:
33:e6:38:19:43:84:3f:8c:0c:61:b3:e3:c9:a0:8a:09:7d:14:
f8:af:b6:41:9b:33:5c:1f:f0:3e:e0:67:e2:c3:be:a3:6b:2b:
31:3d:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:22:00 2025 by rpki-client