Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
File: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft (raw, json)
Hash identifier: u/FWjQ2TP+/jhX8O++vBVMX5xRi6T9Shlyymp86XMBc=
Subject key identifier: A2:94:78:F5:D3:99:7E:70:1E:C4:0B:5B:C7:C3:C9:8E:A3:F5:87:E3
Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Certificate serial: 019933EE16E730BFF4C2D09086FC3B95B37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
Manifest number: 0401
Signing time: Wed 10 Sep 2025 14:01:05 +0000
Manifest this update: Wed 10 Sep 2025 14:01:05 +0000
Manifest next update: Thu 11 Sep 2025 14:01:05 +0000
Files and hashes: 1: 6BzrArwu58N5sBVvJVBthqND_N4.roa (hash: OfB+8pNfA8OgycXqKbk5L8hxFdJxQJhdYPo6qkN9fXA=)
2: D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl (hash: 5EBoXSVwTyHDK/zwVrSNgi4pz8/A9CBpbj7u9z/it2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:16:e7:30:bf:f4:c2:d0:90:86:fc:3b:95:b3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e
Validity
Not Before: Sep 10 14:01:05 2025 GMT
Not After : Sep 11 14:01:05 2025 GMT
Subject: CN=a29478f5d3997e701ec40b5bc7c3c98ea3f587e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:f1:17:ac:18:5f:35:37:d4:4d:eb:3c:5c:
10:a9:c4:ab:e6:a4:3b:57:15:1e:90:88:1f:82:4c:
17:78:36:9d:bb:87:df:7d:9e:aa:b5:00:06:3d:37:
ee:49:dd:3d:7e:ba:a6:eb:9d:c9:eb:ed:c7:35:13:
fb:a4:bb:84:16:85:49:71:b8:98:b0:4b:57:05:05:
41:d5:5c:1a:f6:ff:9d:88:95:7b:b3:7a:0b:f8:a1:
be:5d:56:f8:22:0d:a7:8e:a9:7d:96:fa:90:0c:ab:
d4:80:42:a1:ac:1a:06:b2:a9:b5:09:6a:02:54:44:
de:d7:0e:7a:9d:53:9e:f3:6d:47:96:7b:25:70:dc:
8b:78:1b:8f:37:0f:8d:09:73:fa:7c:f4:45:21:02:
3a:ad:c8:a0:07:d7:cd:9e:2c:ab:e5:07:bd:bd:65:
2e:e7:cd:b6:75:5f:f3:7c:1f:3c:3b:aa:10:37:f4:
f6:96:d4:e0:82:26:05:a5:a4:d9:fe:b2:96:2f:2a:
fb:c3:df:03:6d:1e:87:84:29:07:de:cd:c1:32:76:
37:05:23:e0:54:35:07:4d:22:83:23:7d:93:97:e0:
ec:a8:b0:a1:d7:89:38:97:c1:b9:a9:3f:e0:cd:83:
aa:da:fa:2a:09:86:bf:c0:23:b6:6c:9f:d9:3e:be:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:78:F5:D3:99:7E:70:1E:C4:0B:5B:C7:C3:C9:8E:A3:F5:87:E3
X509v3 Authority Key Identifier:
keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:44:5b:72:2d:93:19:c5:cb:b4:bb:47:06:ca:72:c3:06:53:
ec:f2:56:b1:0d:73:61:a8:4b:1f:0c:ff:6c:58:1a:67:fa:64:
48:af:60:12:2f:77:d4:08:18:c2:16:8f:56:65:9a:28:9a:16:
e9:84:24:59:85:ff:a7:39:79:5d:c3:3e:86:c6:3e:b8:f8:a5:
39:62:fb:02:ad:73:44:1b:85:3c:bc:e8:b1:db:08:d2:dd:a7:
29:1c:b2:13:3f:a8:17:99:03:86:f5:a5:98:2f:1f:ff:6c:8d:
b5:93:55:30:ed:38:86:80:1a:18:00:44:75:dd:53:6f:7a:df:
ab:67:7a:5e:54:6a:61:2b:81:2f:e2:b6:ea:a5:73:00:4c:a4:
34:79:b8:ed:0a:e7:2b:ea:ab:0f:1b:b2:fd:7c:e7:ce:ea:de:
c0:9d:93:5a:0e:66:3f:fb:d9:26:3a:31:f1:3c:67:af:78:01:
3c:04:e5:75:1c:de:c4:da:30:0d:96:25:72:17:af:2f:9d:ed:
fb:e3:a5:50:4c:68:7b:fa:2d:b7:1a:ec:3e:83:4b:f4:cb:1a:
52:b4:1e:78:23:44:5d:bb:61:d1:45:50:c8:b7:c5:7f:77:f6:
df:d9:a6:a2:0d:22:eb:e6:33:69:00:70:c3:3a:89:a3:9a:0e:
4f:c0:9b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:13:19 2025 by rpki-client