Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
File: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft (raw, json)
Hash identifier: nCsd3pCEkZJnOb67GyNCDvPCtFHuEwnmIJ7sTH2gXpI=
Subject key identifier: 14:43:14:81:B7:98:02:2F:86:05:64:6D:6A:1B:53:7C:33:60:08:40
Authority key identifier: D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
Certificate issuer: /CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Certificate serial: 0199C41FF00B369AB17C41E85323508AE293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
Manifest number: 13EB
Signing time: Wed 08 Oct 2025 14:00:51 +0000
Manifest this update: Wed 08 Oct 2025 14:00:51 +0000
Manifest next update: Thu 09 Oct 2025 14:00:51 +0000
Files and hashes: 1: 0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl (hash: rBFq9FFdU2REEK4Q9nhkZA+/8oATMpUqoKtQFT7PX28=)
2: KqC_P0HJkM92_lcS0Jpa0USOEVs.roa (hash: KV6dI03WkVzxAgFRttiw4LQ06BXsoXy1LKrixgsu660=)
3: qufcdPSdEtDaFtrISHEdLWv3S2M.roa (hash: T2dPM9R1QKb1KXwCc1Gtxp+rTdBsb2KAhbC/WGxf99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:1f:f0:0b:36:9a:b1:7c:41:e8:53:23:50:8a:e2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12d4d2fb75a7559a20f79548c458542fd0a9a4c
Validity
Not Before: Oct 8 14:00:51 2025 GMT
Not After : Oct 9 14:00:51 2025 GMT
Subject: CN=14431481b798022f8605646d6a1b537c33600840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:e5:09:af:75:a8:64:cf:9e:32:02:75:5c:
ea:4e:81:d5:b3:86:75:64:f1:a9:21:e7:35:2f:d3:
7d:76:af:1d:30:2d:6a:07:1a:ed:eb:3f:fa:bb:0b:
f7:9f:11:3c:a9:7b:98:4f:87:fe:4c:7d:ee:54:29:
ef:1c:27:9d:74:b6:c6:e1:22:43:74:1c:01:40:8c:
e6:3d:f5:a5:b0:ab:c8:55:d7:2a:d9:27:16:4c:42:
6b:fd:c1:55:b0:a9:ad:38:de:1b:22:c5:39:0b:01:
07:17:0c:98:25:3a:d0:3d:6a:24:78:aa:dd:bf:82:
20:e9:c7:92:2e:7f:45:dc:4c:b7:9f:c8:b8:36:aa:
bc:28:2f:15:6f:2d:ba:21:61:b9:66:fa:ee:d0:d9:
2d:dd:20:46:77:3a:dd:b9:0a:2f:bc:1c:5a:df:fa:
66:ea:86:7f:1d:60:48:b0:e2:7b:24:4d:cd:d6:92:
ae:cb:8c:1f:a0:47:fa:4b:61:44:78:4c:ed:ff:c7:
91:d7:0f:c1:fd:aa:23:e3:18:42:b3:eb:30:6c:ff:
f1:06:18:35:ed:0c:95:b2:b1:95:f8:f4:6b:95:04:
af:b9:93:3a:81:31:ef:a6:ad:1c:ea:da:09:20:0e:
8c:85:a8:16:38:54:1c:d8:09:6c:00:54:53:31:7a:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:43:14:81:B7:98:02:2F:86:05:64:6D:6A:1B:53:7C:33:60:08:40
X509v3 Authority Key Identifier:
keyid:D1:2D:4D:2F:B7:5A:75:59:A2:0F:79:54:8C:45:85:42:FD:0A:9A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S1NL7dadVmiD3lUjEWFQv0Kmkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/575bef-970a-4b37-b12e-1eecd585db8c/1/0S1NL7dadVmiD3lUjEWFQv0Kmkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3b:5e:e7:48:ec:d1:04:6e:fd:42:81:92:87:64:ea:f4:2a:
2f:d7:89:78:36:ae:f4:b6:62:7a:1b:58:b7:5c:82:31:f8:9c:
00:51:0e:44:43:07:ad:85:0e:8b:55:48:d4:83:8e:11:7e:57:
44:ea:3e:e8:87:39:de:05:7a:ba:ee:9b:e9:f7:b1:85:93:45:
07:18:16:fd:1b:56:eb:40:5e:c6:46:30:07:fb:24:b2:e9:3a:
a4:5d:0d:b9:7a:80:4b:01:d2:8e:47:b3:96:b1:3c:39:44:e4:
4c:7b:54:d7:f5:b0:7c:12:33:d3:1a:d0:b6:37:b6:75:69:68:
b4:34:0f:15:a8:46:ee:04:3d:fb:7e:b5:7f:dd:3b:57:e8:73:
24:48:a3:ce:f0:f2:50:d7:2f:7a:e5:4f:0b:fa:7f:7c:76:14:
55:b5:5a:12:04:95:f0:e8:d3:33:cb:0d:50:d0:88:d2:8e:d7:
55:f0:cc:95:03:bc:e1:a2:9b:b8:be:ff:24:12:ec:b9:21:48:
89:3e:4f:77:c2:1d:01:be:e5:66:26:d9:56:06:29:13:75:4e:
6b:e2:ca:7c:d3:ea:f4:d6:25:6a:c9:46:0e:a8:04:5b:78:0c:
e0:96:77:18:7a:dd:49:e2:15:cd:da:37:5b:ff:ef:88:5e:73:
75:ff:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:34:48 2025 by rpki-client