Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier: nZFUmE88XbsFexLhJX6PI7JxHoFv0ZE3m3pE/Vd/OpQ=
Subject key identifier: 94:3E:B0:4C:D2:B5:27:C3:47:24:A4:15:D8:65:4A:21:62:01:79:D8
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 01995E6A39CABA5FF507A7B99185EE106684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number: 09FB
Signing time: Thu 18 Sep 2025 20:00:43 +0000
Manifest this update: Thu 18 Sep 2025 20:00:43 +0000
Manifest next update: Fri 19 Sep 2025 20:00:43 +0000
Files and hashes: 1: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: nESrgPTpwaG6wBvdj1IJN3gDdtDiAOM2KhxuBjUQ6+o=)
2: FAudlpGk_kDfTVYbbohSs3--fwY.roa (hash: s6Wsa14pBQYCdq/M2UXC/KMh/WJZHtqOr4iUBFGtM4E=)
3: sKN4W1XQgBRPMLqN0BmAh5exg2s.roa (hash: IHu6vZ3N6G+PYxes9sQszliF8LVxezHAOlnn1uRbGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5e:6a:39:ca:ba:5f:f5:07:a7:b9:91:85:ee:10:66:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Sep 18 20:00:43 2025 GMT
Not After : Sep 19 20:00:43 2025 GMT
Subject: CN=943eb04cd2b527c34724a415d8654a21620179d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:e7:33:c6:74:fc:c9:8f:e0:1a:39:68:6b:
02:b7:3a:d3:73:c4:41:16:cd:55:81:28:d1:7f:f6:
4b:8b:31:9d:fa:61:68:d4:d9:8a:bc:6b:df:f0:d2:
3d:6f:a8:6a:f4:61:3c:7f:a6:58:f6:44:3e:71:a2:
a7:30:08:54:61:88:84:b4:f8:e8:37:da:67:5f:4a:
2f:bf:07:77:9c:67:a6:64:93:9a:12:f3:1b:7a:65:
d5:55:45:3c:7b:30:38:16:db:c0:22:73:ce:2f:0a:
2e:b1:d5:ad:56:cd:ae:f6:3e:2f:d2:8b:85:78:be:
d0:d0:84:9b:69:3e:31:49:e1:69:21:5b:fa:53:18:
bd:a2:7e:49:09:6e:b4:3e:8c:58:40:83:a2:5a:0a:
11:dd:49:45:d7:82:8e:64:1f:fb:cd:ea:64:18:d9:
9d:ab:1f:13:19:f9:64:31:8d:87:6e:6f:01:34:06:
e5:73:f6:c8:38:1d:82:8a:b3:74:d3:c4:5f:e4:de:
18:86:35:25:9f:bf:0b:f4:c0:87:9a:a5:f2:6c:31:
92:f6:79:10:ee:db:c0:ff:c7:67:82:85:b3:ea:39:
4a:de:c8:d8:02:fd:57:ac:86:0c:ec:2e:83:19:86:
f7:88:2f:53:5a:f9:6d:f3:26:1b:20:c8:12:d2:71:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:B0:4C:D2:B5:27:C3:47:24:A4:15:D8:65:4A:21:62:01:79:D8
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1c:8a:f4:23:2d:ac:d8:a7:3f:af:34:2c:ce:de:11:50:42:
39:a4:3d:de:63:cf:9f:d6:58:f0:ba:8c:1c:b6:d0:b9:2c:e4:
08:72:9e:62:eb:04:e3:97:de:68:43:b0:0c:cb:06:0b:1b:42:
47:df:7f:8f:2b:02:89:50:0d:c2:4c:79:e5:b2:d3:67:3a:74:
fb:55:4e:9a:04:29:68:b9:e7:88:ee:33:48:a4:5d:59:67:c1:
ee:d9:b6:95:07:49:4a:33:be:30:05:d6:f8:d3:7e:56:71:93:
a5:b8:bf:e5:dd:e2:43:22:b6:3e:b4:ff:09:77:51:01:49:79:
51:6d:ed:a7:72:9e:41:93:1a:81:84:c4:84:93:8c:07:67:85:
64:de:2c:03:6d:56:fa:93:51:e9:46:19:8e:12:11:13:ef:21:
53:37:72:1b:38:25:95:be:25:a2:45:a5:64:b3:4c:f4:fb:69:
d6:32:b9:59:f9:50:ef:69:ac:19:e0:fb:12:6c:62:1a:71:37:
f6:aa:b2:e1:de:ea:4d:fb:78:8c:60:9c:f0:05:3f:ad:a6:30:
ca:e4:f4:6c:e1:a9:29:f2:46:92:5d:0c:6d:c7:7c:73:ef:92:
4b:d5:a5:95:b9:91:98:1d:79:05:91:b9:98:c9:91:7a:35:c8:
da:3a:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:55:42 2025 by rpki-client