Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json)
Hash identifier: oL8wRRR0eAsk5c3zd0JB5Xl2x+ra3nSJSNYlvPmLEAA=
Subject key identifier: 05:C6:A9:60:72:1B:B6:A6:84:57:F4:B4:BD:B9:4E:3A:E4:1C:79:81
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial: 019A24AF017DEB203CB11448E8742A912806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
Manifest number: 0CE6
Signing time: Mon 27 Oct 2025 08:00:40 +0000
Manifest this update: Mon 27 Oct 2025 08:00:40 +0000
Manifest next update: Tue 28 Oct 2025 08:00:40 +0000
Files and hashes: 1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=)
2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: Xfl2tP1mRUbCsONP1J59QXo/Ev/fkjmzVdS/YEbSwWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:01:7d:eb:20:3c:b1:14:48:e8:74:2a:91:28:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Validity
Not Before: Oct 27 08:00:40 2025 GMT
Not After : Oct 28 08:00:40 2025 GMT
Subject: CN=05c6a960721bb6a68457f4b4bdb94e3ae41c7981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:5d:48:f5:3f:f1:40:5d:dc:3e:54:d7:0e:
b8:b1:9a:3e:ba:0e:ee:75:96:d3:c6:8e:18:04:16:
09:94:8b:c4:5c:01:0f:17:dc:81:59:c0:42:bd:82:
88:55:d9:30:cc:f2:2d:21:2f:d4:4d:ec:33:43:ce:
e6:fc:d9:04:9e:8c:c7:81:ac:1c:35:ce:f3:d4:74:
99:37:2a:3c:c3:1b:dc:89:14:86:59:a6:50:c0:80:
c5:ee:d1:82:77:6e:27:e4:c2:74:bd:8a:16:a5:56:
70:68:3e:c3:fe:2e:b8:a2:8f:2d:00:5b:3f:05:97:
fe:30:5c:77:87:74:ab:80:b4:e6:0d:a2:56:6a:39:
09:bc:15:e6:14:3a:75:34:8d:44:b5:37:13:14:ad:
aa:c8:a6:ac:8e:59:0e:1a:fc:f5:04:b1:89:50:c7:
39:b5:9f:af:fe:29:92:e7:f0:5c:b0:2b:92:8c:aa:
15:27:c4:e5:b1:e9:3d:63:07:25:bd:a7:22:c7:2c:
81:34:3a:3f:a0:e3:9e:c4:9c:f6:dc:a1:e5:e2:c0:
3e:68:7c:bf:f0:9b:60:47:5b:4b:51:47:98:c2:30:
6e:11:e1:46:d0:66:78:03:bc:89:af:fa:44:27:58:
66:75:6f:b3:92:23:95:7a:d1:2e:cb:46:73:43:52:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C6:A9:60:72:1B:B6:A6:84:57:F4:B4:BD:B9:4E:3A:E4:1C:79:81
X509v3 Authority Key Identifier:
keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fa:08:98:08:d4:03:88:60:75:8b:bb:5f:94:78:44:18:66:
a3:78:24:26:7c:c0:51:cd:85:43:f2:6b:a1:a0:b1:0f:9b:fd:
ba:17:6a:dd:9f:92:dd:87:96:74:9f:5b:fe:74:7e:d5:00:ba:
39:59:b8:17:31:a5:fe:5f:32:c9:cf:41:d3:62:50:68:67:16:
5f:ee:c0:06:64:16:27:bd:b7:63:d6:5d:10:cc:f6:3d:c8:31:
ad:3c:05:f8:92:2a:98:9b:59:d7:a0:9c:27:74:05:58:68:75:
73:9c:24:eb:14:57:dc:7e:2e:7c:16:42:c6:8a:00:0e:af:12:
fa:0e:a1:d2:07:e3:82:bb:c8:85:b2:b9:7f:64:62:dc:96:17:
27:96:21:2e:b8:90:f1:39:eb:2f:1d:07:71:25:42:ec:27:b7:
6f:e8:7c:5e:c8:98:06:bb:f5:f1:fd:64:45:49:90:db:e9:5b:
bc:75:52:56:a1:cf:e1:f9:31:05:b5:49:9e:c4:b3:03:1e:bb:
f0:d3:f7:9f:29:54:b6:95:78:16:12:90:7c:93:51:8e:90:30:
fa:a2:df:df:44:4f:5b:f3:e3:f6:be:58:17:39:e2:01:df:e0:
5f:ea:0d:99:2c:f6:93:87:ce:c2:5d:2a:f4:1a:ff:ae:09:de:
33:1b:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:59:20 2025 by rpki-client