Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: i5FldWorY5ZGpHhd1DIgqrUrSihrUjk73tQ0YFS/Fqc=
Subject key identifier: 8A:27:78:29:17:6F:6D:74:CF:18:85:87:9D:AE:8E:B1:A4:82:7E:AA
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 019A07B716F553DDFA70F98675F85A9BE2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 09DA
Signing time: Tue 21 Oct 2025 17:00:30 +0000
Manifest this update: Tue 21 Oct 2025 17:00:30 +0000
Manifest next update: Wed 22 Oct 2025 17:00:30 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: DOoLXnOJpUf9GXeRkMyvnU8E4QNmNjh+SlXIKSjr3Uk=)
2: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (hash: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:b7:16:f5:53:dd:fa:70:f9:86:75:f8:5a:9b:e2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Oct 21 17:00:30 2025 GMT
Not After : Oct 22 17:00:30 2025 GMT
Subject: CN=8a277829176f6d74cf1885879dae8eb1a4827eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:64:df:70:14:ee:32:1c:7e:8f:5f:40:93:
1e:26:53:87:a6:65:40:c6:53:02:a7:c3:a7:4d:8c:
5c:77:44:e4:6c:cb:9c:86:65:35:97:a8:2e:83:8d:
d7:c1:39:bf:c6:84:b0:5a:a5:03:b7:1d:78:f1:e2:
4a:c6:f4:70:8e:d8:02:44:0b:f2:46:4d:08:f1:41:
a5:2b:13:b0:bd:79:d4:b1:a7:c4:65:8b:b3:ee:1f:
5b:24:58:8f:50:df:f0:0b:84:fe:6e:96:60:9a:43:
ff:f5:3e:6a:b9:1b:b1:b8:ca:5d:ff:7b:72:07:2e:
52:a1:f9:25:0b:64:b5:64:fb:e6:cc:96:6f:2a:79:
e5:5b:cd:12:39:89:ff:96:12:67:71:ce:a3:77:20:
d9:05:fa:56:10:31:98:b4:ff:7d:30:fb:05:0c:aa:
09:61:7f:9d:60:be:ae:46:6b:d4:5c:9c:d5:27:67:
5a:77:11:3e:0c:85:05:41:50:84:33:61:43:46:88:
c1:e4:60:0c:cf:85:42:dd:04:cf:1b:c7:37:77:35:
6a:ee:06:7f:86:8e:16:47:93:cd:fa:2d:57:c5:f5:
52:0e:2f:74:08:bb:d3:b7:05:29:13:f8:c0:50:50:
0b:d6:9a:2c:c7:e4:84:83:cf:a1:bf:9e:1e:ae:ee:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:27:78:29:17:6F:6D:74:CF:18:85:87:9D:AE:8E:B1:A4:82:7E:AA
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b9:4c:5b:70:17:e6:d3:23:7e:96:ec:22:e5:74:ef:8c:5a:
64:87:2d:81:2a:c3:3f:cf:2c:12:0b:f0:30:fa:f5:33:2a:0d:
ff:6f:70:bd:58:d6:70:d2:ef:ae:82:d7:ca:62:a9:7a:48:d5:
67:02:91:7b:6e:04:b2:c4:04:c0:54:d8:17:4c:49:6f:bd:59:
e5:2d:c2:7a:eb:21:09:f2:8a:97:ab:50:ba:8a:4c:05:c2:da:
3a:b7:e9:be:e9:3f:74:18:c9:f1:b3:e1:a0:83:b0:0b:5b:41:
8a:80:86:01:a2:da:ec:3e:d6:29:c0:02:b3:a1:ff:00:c7:36:
74:12:e1:1b:5e:a3:79:b9:6b:44:18:e6:a7:4c:cf:77:22:7d:
1f:60:d3:c8:6d:00:98:cd:04:b0:3d:78:dd:b9:00:9f:75:59:
df:a8:74:76:fa:3b:1b:98:97:9b:fb:3d:3f:aa:22:76:f3:fa:
28:4e:2f:2f:c5:74:e3:cc:b9:a4:00:e1:af:1b:f1:a3:70:22:
45:14:79:b8:00:1c:37:e6:e9:57:11:3b:27:79:d3:44:88:a5:
7b:46:ed:f4:9b:3c:50:27:ef:11:a5:7e:ad:6f:30:ae:3a:76:
14:bc:57:1c:8b:15:41:51:9b:f8:58:9a:03:c2:b7:9f:0a:f7:
d7:2a:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:00:41 2025 by rpki-client