Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: irq8ihb9PLLpG3EXrX6YZTC6Pkw2VXF6n6tR4PTanwM=
Subject key identifier: C2:95:D9:8C:E2:85:D5:E2:C0:47:58:1B:ED:7A:2D:06:95:0A:FE:FC
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 019A4F622267F31FBC677F9F1A2B451C413E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 06BE
Signing time: Tue 04 Nov 2025 15:00:22 +0000
Manifest this update: Tue 04 Nov 2025 15:00:22 +0000
Manifest next update: Wed 05 Nov 2025 15:00:22 +0000
Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: FUK6O/rjOIEURymAo/TcwfTiZIldTLFBytsH7vHepwA=)
2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:22:67:f3:1f:bc:67:7f:9f:1a:2b:45:1c:41:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Nov 4 15:00:22 2025 GMT
Not After : Nov 5 15:00:22 2025 GMT
Subject: CN=c295d98ce285d5e2c047581bed7a2d06950afefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e3:4d:6f:d2:28:eb:77:3d:f9:4f:bc:61:3a:
3d:3a:19:ff:1f:6f:ca:e8:63:2f:f6:0a:4c:da:47:
ab:25:41:fa:82:58:9d:04:46:98:db:94:05:67:47:
3f:7e:94:19:cc:59:6b:db:14:d4:55:22:f8:1e:29:
2d:6e:42:1e:0e:d1:6c:34:a8:7a:73:51:7a:44:03:
e8:2b:50:17:49:09:1d:ae:e1:1b:33:be:24:e7:15:
94:ef:bd:7f:e5:bc:b3:38:5c:35:0b:91:0d:a9:e2:
2c:d2:0f:36:16:08:53:53:f9:7e:28:3c:ee:13:7e:
f8:42:b5:2c:29:92:fb:b3:57:e1:c0:9a:38:5e:46:
52:9b:03:8e:e6:f1:61:4f:72:a5:9e:f5:0d:c6:64:
60:a6:c5:6a:09:fe:b1:c4:2d:70:c5:56:e9:20:33:
09:f2:e0:cd:f8:62:68:56:d6:fa:41:c1:05:8e:fc:
09:32:b7:d0:d2:dd:b8:be:be:0e:5a:f5:67:f4:5b:
bd:f8:c8:de:6d:5d:d8:55:f3:65:24:7e:01:24:56:
24:64:d4:d9:39:ea:b4:7e:9b:2e:8b:a2:08:ae:36:
17:db:75:2f:39:45:d6:1e:dd:d7:b4:7e:0b:5b:5e:
d4:2d:c9:d6:cf:08:f0:67:9e:24:a6:f0:1a:7b:c0:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:D9:8C:E2:85:D5:E2:C0:47:58:1B:ED:7A:2D:06:95:0A:FE:FC
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:7c:9b:c3:0f:f6:88:77:fd:5c:da:06:3b:33:7d:bc:50:
83:81:05:f1:16:3a:c2:c5:29:57:82:9a:96:37:43:f8:0b:ac:
f8:79:a3:fe:90:34:31:5a:14:e6:48:26:78:88:75:ed:01:82:
3e:e6:b6:b8:a3:4f:8b:73:0a:22:75:2b:6c:99:7c:f7:f9:9b:
e1:06:9e:c4:e7:c9:1a:70:04:8d:01:db:73:7d:35:fe:2c:00:
87:0d:75:73:7b:18:30:7a:7e:14:c0:0f:a6:2f:89:78:9a:31:
3d:47:5c:65:db:5f:d8:6b:70:e6:c2:f5:d1:25:a1:ec:41:20:
23:d5:99:35:61:fe:78:2c:50:57:91:8d:d9:57:85:35:71:5d:
41:17:35:c8:c6:dc:4b:fd:f8:8a:5f:03:ef:dd:32:8c:72:26:
9e:88:2c:62:7e:28:f5:79:e0:6e:42:20:d9:97:f9:ac:ef:5d:
fc:03:f4:14:48:92:94:e6:4d:e2:cf:5f:2f:bc:b8:12:11:4f:
96:15:f8:4f:9d:3c:a4:ca:87:f6:51:b1:d2:60:57:d5:4b:4b:
e2:a9:9b:a3:ad:18:0d:c4:6f:49:4e:c5:2f:83:23:d2:0c:b0:
d4:a4:41:b1:67:9b:5d:56:e5:00:e4:37:6f:6b:c7:92:df:d6:
92:4c:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:34 2025 by rpki-client