Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier: iVWUUtyzWTNBaA2YB2WqI0K9Pxh3tmZm8IYatvxeLps=
Subject key identifier: 91:F0:8B:B4:2F:BE:51:FB:D0:7B:39:79:4F:02:A6:4E:12:A9:38:8D
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial: 019A1CBFA3947BE987A1936462C9DB9A7D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number: 20
Signing time: Sat 25 Oct 2025 19:01:52 +0000
Manifest this update: Sat 25 Oct 2025 19:01:52 +0000
Manifest next update: Sun 26 Oct 2025 19:01:52 +0000
Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: MgZ8hlWjImyhE20yHPV1hvpTVx7OJHCq8TOpSi7/dS0=)
2: bzFosFN5ObqKTXX0o67vA-bvyEU.roa (hash: yXoWK432d1fj4jLB5fBcuqn/7QkMmdbiVvgP3kSmafw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:a3:94:7b:e9:87:a1:93:64:62:c9:db:9a:7d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Validity
Not Before: Oct 25 19:01:52 2025 GMT
Not After : Oct 26 19:01:52 2025 GMT
Subject: CN=91f08bb42fbe51fbd07b39794f02a64e12a9388d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:93:af:e4:4d:3d:7c:9c:fe:d4:b3:e0:9e:
29:9b:12:76:a4:c2:00:2c:97:c2:2f:96:d1:71:fa:
c1:c1:57:f9:bf:33:12:08:17:3f:bb:a3:7f:8c:82:
69:89:47:f8:59:47:6c:c0:83:c6:63:aa:26:04:b4:
11:64:49:cc:c6:e3:12:c6:8a:95:a7:e6:cd:de:10:
ef:f0:2b:99:7d:1f:0e:4d:81:80:c4:be:4a:05:f5:
83:82:1e:97:5b:09:6e:94:c0:7e:6b:69:38:a5:24:
7c:57:85:51:07:14:22:8a:ef:c9:42:6f:49:fd:d5:
1c:15:32:a2:a3:2b:56:c8:3d:0c:9a:4c:12:1c:b8:
c2:30:16:19:6d:44:85:1f:95:d5:b0:d2:a9:fb:6b:
08:64:5c:42:45:a8:87:bd:25:52:56:06:b6:55:11:
94:d2:67:43:a3:e4:9b:7c:53:10:c6:b2:af:ab:ba:
e9:ee:d0:52:38:56:29:b0:3b:fa:a4:be:25:16:19:
7f:04:2f:2a:39:86:b5:34:bf:13:54:f0:82:e7:84:
52:87:fb:4e:71:42:c2:32:3f:5c:28:46:0d:5e:9f:
e4:3f:e0:d2:d0:ab:b5:fc:7b:2c:ca:2e:88:be:9a:
66:2e:6e:6a:d2:f3:2f:c4:81:26:8a:b0:c2:da:a8:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F0:8B:B4:2F:BE:51:FB:D0:7B:39:79:4F:02:A6:4E:12:A9:38:8D
X509v3 Authority Key Identifier:
keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f1:ce:1a:d3:76:37:82:b4:75:2e:fe:51:2a:0c:82:93:fc:
c9:e7:29:9f:9f:ef:02:ff:2d:bc:ab:00:c0:42:fb:b4:97:36:
04:cb:77:33:7e:f2:5f:f1:ff:88:79:9f:f3:a4:45:e3:a9:dd:
5a:a0:c7:c4:ba:10:a6:76:08:5c:d6:04:1c:c8:b1:47:09:3d:
15:8d:42:cc:ee:8b:56:cb:fd:aa:3f:01:be:cd:b2:f0:1a:67:
4a:0b:4b:03:02:c5:9e:76:46:c8:7a:ff:77:be:ed:25:61:24:
82:a8:7b:fa:52:a9:75:db:8a:5a:3b:92:33:26:0e:c0:ac:d6:
9a:2c:e6:fa:48:9f:c0:c8:c4:7d:17:54:ab:52:a5:e0:f9:44:
34:68:6f:63:b9:d2:18:54:d1:f5:ca:b7:b5:78:84:48:20:d8:
73:a2:d7:c8:9e:0c:72:62:3c:b4:27:95:f7:5a:08:ed:4e:67:
41:2a:a0:fd:51:9d:14:0d:e1:9e:63:a5:30:67:34:58:76:d4:
07:58:5a:99:f6:56:31:c5:50:14:3b:d5:13:e7:84:fa:8b:79:
ab:e7:6f:6c:fe:26:9a:dd:45:09:f8:34:90:3b:21:15:c3:24:
d2:16:98:b0:04:7d:39:0f:f3:92:f7:d4:20:f0:39:e2:77:a0:
41:fc:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:46:07 2025 by rpki-client