Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: mLi29dbjrHVZ1Ph4nJ5tcYJLyFkhSVgHOJGbI1TSJOk=
Subject key identifier: 99:C4:D9:1B:1E:05:9F:D5:4D:F3:78:E4:48:E4:66:4D:85:BE:24:D6
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019A4D73CC4692A0F6AC9B8AE4C374CA93D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 03FF
Signing time: Tue 04 Nov 2025 06:00:25 +0000
Manifest this update: Tue 04 Nov 2025 06:00:25 +0000
Manifest next update: Wed 05 Nov 2025 06:00:25 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: k+rpCyaFdF0DDavEMI0Wnz5nNiwXpRV9xaPZ4o4KOig=)
2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:cc:46:92:a0:f6:ac:9b:8a:e4:c3:74:ca:93:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Nov 4 06:00:25 2025 GMT
Not After : Nov 5 06:00:25 2025 GMT
Subject: CN=99c4d91b1e059fd54df378e448e4664d85be24d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:5c:1c:7f:27:ce:cb:9e:d8:3a:b9:7c:58:
8f:3e:f2:c7:c5:aa:bb:d2:48:09:37:16:a4:76:8e:
27:06:3c:95:94:4b:08:f1:f5:e5:01:45:68:04:29:
ad:f5:b3:42:05:e4:f0:1b:07:70:7d:b9:59:13:91:
91:af:b5:e9:52:07:ef:a1:2c:fb:47:02:f3:c9:18:
63:f6:33:f5:58:cf:ea:ae:5b:27:00:d3:5a:5b:50:
67:52:d7:76:41:66:90:0e:4c:0b:45:35:0a:18:65:
f9:c7:fe:a1:99:8d:b1:c3:b4:97:0a:ef:07:23:5c:
cc:74:a9:07:18:82:c1:44:8b:f0:d7:55:fc:8a:83:
53:68:e2:8c:1b:c8:12:d7:87:88:f9:91:ed:5d:12:
49:9d:84:fc:b5:a9:fd:b2:0c:81:a2:3f:25:1d:65:
b2:bd:af:51:9a:78:84:b7:6c:4c:10:7a:1d:02:10:
84:6c:d3:6b:e3:3b:a0:5a:cd:35:bb:ae:02:dc:b0:
90:79:89:b2:1f:6f:84:a3:4e:c6:0e:d7:54:b5:ed:
30:17:06:a3:22:4f:cf:4d:1b:0b:18:b6:ff:f6:96:
54:b1:06:23:24:a1:5b:05:a5:20:31:15:2a:e8:82:
4e:80:8a:43:52:57:3b:b2:99:23:c3:92:6b:d5:36:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C4:D9:1B:1E:05:9F:D5:4D:F3:78:E4:48:E4:66:4D:85:BE:24:D6
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:79:87:1d:28:94:a6:fb:a5:56:7e:0c:6c:76:41:59:67:02:
55:ff:d8:8d:75:30:1e:b3:1f:4a:4b:23:31:84:63:68:e1:73:
07:81:fc:74:ca:d6:83:c2:d3:42:ac:3a:0b:36:4f:2b:67:29:
b3:50:05:10:c7:1c:2f:41:bf:82:31:db:d9:73:fd:31:21:0b:
83:8b:3c:ae:9d:61:ac:f2:32:19:37:6f:bb:97:07:80:bb:0e:
a2:8e:8d:82:c9:a0:5d:96:e7:9e:86:46:92:21:16:c9:e1:ee:
c3:3f:83:9e:29:70:0b:f2:4e:ad:b2:3c:15:e6:cc:42:ac:26:
92:1b:e0:73:ef:1b:bf:0f:d1:a8:38:0d:bb:86:e7:10:91:87:
3f:05:4c:fc:92:9a:fb:62:f4:1a:32:9c:c6:27:37:ca:68:7c:
00:5f:06:f3:26:08:e0:01:71:32:e0:1e:62:d9:e3:3b:ba:d9:
03:e2:20:b9:8b:c5:12:c0:1f:f9:00:d8:93:ed:66:02:f6:78:
35:6c:3d:6e:6c:d8:dc:56:b0:c5:a8:4b:78:94:dd:88:69:4d:
91:6b:ee:25:ee:94:96:a1:ce:86:38:74:95:c5:a1:e5:d2:e1:
8e:ef:3c:6f:3f:cc:08:83:a8:9d:9c:05:33:1b:26:37:e6:d0:
2f:fa:d0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:03 2025 by rpki-client