Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: vYKqJ2auVUXJaWPQRR69MUS/1xKcD/cAGdhT36uebbo=
Subject key identifier: 85:C2:EE:17:B9:CF:4B:0C:62:49:94:DB:E0:65:E3:88:F6:D7:60:89
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019A21ADFE8187F6341065AE1594D47F059F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 18:00:42 +0000
Manifest this update: Sun 26 Oct 2025 18:00:42 +0000
Manifest next update: Mon 27 Oct 2025 18:00:42 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: zvifdbSlorfQ1MnvMQLe6/MmWZ0k4XHBn4o3K4AoUH4=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:fe:81:87:f6:34:10:65:ae:15:94:d4:7f:05:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Oct 26 18:00:42 2025 GMT
Not After : Oct 27 18:00:42 2025 GMT
Subject: CN=85c2ee17b9cf4b0c624994dbe065e388f6d76089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:94:fd:94:e3:2c:1a:6d:3c:d4:72:5d:56:
83:e2:a4:90:fa:59:66:1c:a8:85:ab:d9:d1:97:22:
67:95:06:99:ad:49:c5:5e:32:a2:22:a4:7d:0b:b8:
34:11:34:b0:b2:bf:67:84:b1:2f:7c:94:79:de:6c:
d4:fa:c0:c0:08:a5:be:78:8d:47:da:8f:d2:c0:a6:
61:c9:95:97:93:3c:45:68:19:01:87:ae:46:6b:60:
8e:4a:e4:48:28:b5:9b:67:44:0b:03:f0:42:17:63:
4c:d8:1b:97:8e:35:f6:38:27:92:a9:9a:16:45:e1:
1c:d9:e0:5a:f1:6f:63:c8:df:aa:53:b8:b4:06:bb:
ae:84:fc:16:87:4a:12:6c:ab:49:7d:73:4f:a3:0e:
97:22:ee:81:27:c6:83:8c:94:86:af:77:5e:4d:04:
ac:e1:71:92:c7:ef:c6:e1:06:c3:1c:f8:b0:16:c5:
cc:58:43:01:7e:39:56:23:43:2f:cf:79:8a:c0:e4:
35:85:c4:ca:57:d6:45:65:56:35:87:54:98:4e:5c:
8e:c1:fc:af:46:3b:01:da:7f:a0:c1:f7:c0:2e:81:
0a:41:99:e0:c2:41:6f:45:3e:ff:ab:17:fc:cd:c2:
02:31:5e:92:cd:8b:a4:b3:3a:89:e8:73:c9:59:c3:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C2:EE:17:B9:CF:4B:0C:62:49:94:DB:E0:65:E3:88:F6:D7:60:89
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8f:ef:c6:5a:f3:c1:bc:5d:94:7c:c7:26:31:47:cd:ee:d4:
dc:d9:83:f3:a0:89:8b:80:21:2e:c1:84:6a:a5:5d:61:7e:87:
8e:70:9d:90:41:24:6f:f8:99:af:ab:c3:75:29:b1:e3:34:4b:
cf:c5:e2:48:ed:0e:01:03:10:4a:f3:fd:40:0a:89:09:60:70:
e1:30:1d:cf:ff:0a:a2:06:56:dc:3d:df:e0:d2:70:7e:35:78:
8a:2f:ea:45:71:d8:32:df:55:43:c0:df:a3:45:52:36:d8:d3:
cb:e2:a1:89:6d:b4:d7:66:1a:77:98:43:ea:d7:d5:8a:28:d1:
69:86:d7:d3:f4:8f:dc:5d:41:a6:37:19:ce:6c:ee:a9:dc:19:
85:93:e9:49:f3:6a:a1:72:e7:96:6e:35:25:37:80:b1:a4:14:
e3:2b:d6:72:a3:0d:1a:9a:8e:d7:29:94:80:fe:fd:cc:d5:5c:
5d:40:ef:f2:ac:b1:75:b8:4b:0a:ab:96:c9:f2:1d:87:1d:2a:
19:bd:fe:c6:b7:0a:69:ef:ea:5a:3c:53:63:87:d3:54:91:df:
4f:3b:cf:97:eb:27:88:78:9c:c8:dc:d8:f9:1f:37:7a:9e:77:
9c:7c:21:38:39:e8:21:67:66:c6:80:71:0b:f2:eb:81:76:c8:
4d:eb:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:28:04 2025 by rpki-client