Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier: TJ5+JqtT8xyFtYLAnx/LGv4dxGDKu3tScMftqn425K0=
Subject key identifier: DD:8C:32:55:0E:84:2F:ED:2D:E6:BB:7F:6A:18:80:C2:AD:75:66:1B
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial: 019A28C310449F2D5B18D8D022C2BEAD4803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number: 0DC5
Signing time: Tue 28 Oct 2025 03:01:03 +0000
Manifest this update: Tue 28 Oct 2025 03:01:03 +0000
Manifest next update: Wed 29 Oct 2025 03:01:03 +0000
Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: IozxUe0PlMbnMWU3ABrYO5tdBfKjpqoTgG4SyrKXE68=)
2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c3:10:44:9f:2d:5b:18:d8:d0:22:c2:be:ad:48:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Validity
Not Before: Oct 28 03:01:03 2025 GMT
Not After : Oct 29 03:01:03 2025 GMT
Subject: CN=dd8c32550e842fed2de6bb7f6a1880c2ad75661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:5f:d9:e3:67:c9:e9:c2:44:d5:8c:51:6a:
95:da:8f:2e:84:6e:1f:79:69:6c:27:74:59:00:b8:
58:02:0d:3c:b2:7d:7c:09:d0:6f:26:b1:00:4b:5b:
59:df:fb:50:f1:e3:0d:ee:11:f8:7b:46:30:6a:82:
07:71:aa:78:48:16:f9:14:9b:ff:6f:07:a0:6c:fe:
2c:a0:b1:51:dd:01:d7:de:f1:01:50:00:63:f4:27:
22:93:c1:64:d2:9a:7b:88:78:77:e3:ba:08:87:c7:
a0:f0:36:96:3b:8e:b5:34:6e:ea:57:3d:a7:6d:29:
93:60:f0:71:14:06:da:7f:a9:a1:02:cb:75:46:0e:
01:4a:17:e7:dd:80:ff:eb:c7:80:f6:66:43:4a:98:
fc:ae:c9:a5:66:30:22:fb:8b:cc:30:5a:f8:02:0c:
78:ea:8b:86:1d:9b:95:b0:9b:31:ff:a9:6f:e3:9a:
2d:bb:a7:47:47:51:4e:b8:0d:86:9a:f4:39:db:c4:
dd:9d:38:f7:9d:ec:4e:8b:1b:46:19:f1:d0:d5:d2:
aa:e6:31:ca:86:cc:3e:55:e6:1f:95:a0:49:59:76:
5b:2e:b6:27:c2:e4:c1:69:0b:8c:18:8e:11:a4:a8:
9c:f9:05:f3:45:24:e5:fc:42:26:8d:00:92:23:05:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:32:55:0E:84:2F:ED:2D:E6:BB:7F:6A:18:80:C2:AD:75:66:1B
X509v3 Authority Key Identifier:
keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a4:9d:ba:b4:15:02:be:37:58:48:c5:78:96:2e:91:3c:65:
e1:c5:18:35:c9:bb:44:e5:1b:8f:63:f4:2a:b4:b1:5f:49:fd:
52:4b:9d:23:02:e7:84:87:a1:fc:6f:90:dc:b6:20:4d:3d:b4:
7f:6f:22:83:7c:cd:22:9c:f3:69:a4:91:fb:ce:79:eb:33:eb:
ec:29:f8:ce:23:8e:22:eb:5a:8e:e3:0c:af:ea:1a:5c:98:6c:
31:22:2d:1a:59:83:60:60:58:40:04:f6:48:14:5a:87:6a:19:
0b:7d:b2:57:87:05:09:7c:cd:aa:fd:c6:ca:21:3a:c2:68:48:
f2:a6:53:cf:ae:f4:9c:c6:10:5b:39:95:6f:ee:e4:4e:7f:ff:
fd:ee:1a:69:a6:b1:83:9b:12:dd:22:a8:98:22:4d:2a:09:81:
4d:27:61:a7:11:5c:4d:d1:d1:9f:d1:a3:7e:8d:2f:37:e3:73:
4c:c8:0e:1b:b6:2b:74:c8:29:ef:8c:cc:61:e3:dd:50:92:9c:
46:77:8f:ee:47:8e:4e:d7:1a:56:d5:27:a7:0f:c5:fd:1e:9b:
38:e0:64:3d:e6:06:b9:bd:e1:32:b1:04:65:3b:f5:20:16:4e:
19:53:8f:d0:ff:c2:d7:90:10:74:ab:41:13:d4:30:c4:4d:48:
6f:31:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 09:00:29 2025 by rpki-client