Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: VUrhS4ib8SUVrzJnS4762kvAwq/X7uTdlDYi+qrCioo=
Subject key identifier: 7C:2D:42:47:3C:F2:78:AE:6C:BC:9B:5B:B9:63:20:BF:B7:FD:3A:CD
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 019A3045088C92E19E89DB6DD04250092798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 042C
Signing time: Wed 29 Oct 2025 14:00:21 +0000
Manifest this update: Wed 29 Oct 2025 14:00:21 +0000
Manifest next update: Thu 30 Oct 2025 14:00:21 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: ymHIAYBlSCy3S2aTM66FBJvXfSres5bWZG4NqGvLC4k=)
2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:45:08:8c:92:e1:9e:89:db:6d:d0:42:50:09:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Oct 29 14:00:21 2025 GMT
Not After : Oct 30 14:00:21 2025 GMT
Subject: CN=7c2d42473cf278ae6cbc9b5bb96320bfb7fd3acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4f:ee:2a:f4:40:78:30:e9:8d:45:47:c3:3a:
8c:fa:8f:16:0a:48:d5:06:06:0c:63:79:72:3b:5c:
79:01:5c:60:86:81:a8:34:5b:81:9f:fc:db:7b:f8:
1b:b7:78:17:b5:26:6a:0b:9f:01:46:e3:46:f5:5c:
bd:4f:6a:fe:57:61:fd:15:41:9b:69:88:bb:e5:df:
cb:dd:64:3e:a4:75:25:38:fe:0e:95:c0:3c:13:bb:
62:bb:c3:41:08:bb:b2:be:99:a8:2e:64:35:7a:6d:
03:f9:30:6b:31:49:f8:7c:e4:6c:c2:bc:77:18:25:
2f:72:38:45:6e:89:c0:78:79:25:cd:bd:05:e4:cd:
29:2c:f2:0a:68:ec:f3:97:d3:22:04:d3:bd:d3:86:
7d:e7:34:1b:d9:0b:4a:b8:65:32:ae:11:e1:75:22:
79:c9:c3:59:f1:e0:51:c5:19:48:5c:a2:33:97:2b:
da:b9:d2:b3:fa:ba:8c:95:c4:1b:f9:9d:c6:ba:42:
09:e5:5a:be:0d:7c:12:8f:a8:d8:77:8b:48:06:49:
48:d3:90:b9:a3:b0:50:dc:f3:ae:3f:37:df:08:ac:
70:52:a5:a2:38:b4:c9:30:f1:00:a3:d3:22:f0:ff:
21:a3:c5:55:06:4b:32:f5:53:35:b0:fe:3a:c7:81:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2D:42:47:3C:F2:78:AE:6C:BC:9B:5B:B9:63:20:BF:B7:FD:3A:CD
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:48:c8:18:80:a4:5a:a7:9c:65:d3:54:e3:16:01:bb:e3:f0:
66:bb:9a:5a:04:82:e4:f7:13:1f:92:8d:dd:7c:37:f1:6a:65:
c2:1a:e2:1b:ff:46:c8:6e:09:06:03:45:2d:58:9b:f4:80:e0:
4b:b8:a3:17:b3:20:c4:71:e0:07:49:4d:58:05:01:8c:4b:29:
ac:c3:16:97:0a:e9:95:47:0f:2a:a2:c4:d3:ef:02:33:54:00:
fe:3b:a2:55:cc:b1:b9:ef:e6:11:79:6f:da:4f:60:83:85:b1:
37:47:20:0a:23:da:8e:a0:43:48:dd:ef:e2:d4:1a:d2:ab:18:
03:ce:04:86:b2:c7:72:f0:1f:e9:bd:f5:9e:ed:09:66:36:5f:
1e:92:9a:ca:3f:49:37:11:4b:60:a0:86:00:89:a8:28:ba:fc:
31:ad:7a:26:26:0a:8e:f2:5a:34:c4:04:a2:d8:db:75:c5:ad:
13:56:88:c0:a0:3d:98:7c:a6:d0:bf:6d:27:77:0d:bf:c6:6a:
8d:de:39:52:14:41:16:31:44:37:b6:4f:ad:30:98:fd:5d:2e:
6f:4d:3d:f1:a9:e1:cf:42:2a:cc:6c:59:b8:2f:0d:1d:de:f6:
f1:6f:04:22:eb:2a:08:13:0a:33:7f:be:cb:8c:09:dc:bc:17:
23:66:b6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:36:17 2025 by rpki-client