Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File: 0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier: Xvth/1EaV/JcK7ULUg5QnRi4SU6ztTHMKDVfA0Qx4jg=
Subject key identifier: B0:2D:1B:C2:54:A4:F8:3A:E8:A1:D4:8D:28:12:55:A0:A8:37:FC:2C
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 019A209BED8AC668E33A685C86693380900C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number: 0ED6
Signing time: Sun 26 Oct 2025 13:01:21 +0000
Manifest this update: Sun 26 Oct 2025 13:01:21 +0000
Manifest next update: Mon 27 Oct 2025 13:01:21 +0000
Files and hashes: 1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: R0QIBMnOApbt20xcaSkkiqrjgDFhM9wMThvpNwGHiN8=)
2: ffPM5tOijzqMCvBgVLZrulDjr9M.roa (hash: mjTFPQvjm3YGXdJ50ci8rDHwA1GVzk1mURHKwSEJb1M=)
3: v6hAmhwF5zdYx8dEgkzg5dcM3po.roa (hash: WVX44j02BF26OexloZBarRA/wYQhTTWNJB3y+NBHmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:ed:8a:c6:68:e3:3a:68:5c:86:69:33:80:90:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Oct 26 13:01:21 2025 GMT
Not After : Oct 27 13:01:21 2025 GMT
Subject: CN=b02d1bc254a4f83ae8a1d48d281255a0a837fc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:75:e5:32:be:46:c0:6d:b4:53:4c:76:1a:
c0:22:60:d6:02:64:73:a7:cf:7d:41:98:45:15:47:
a2:02:59:98:eb:7f:6d:b7:26:1f:9b:c9:83:8a:59:
76:99:cf:ca:27:32:b4:7f:91:11:bc:8c:cb:06:89:
76:c7:d3:ba:ad:27:05:e7:7a:92:02:60:4c:54:ce:
a6:c3:ce:08:a9:67:96:cc:0f:d7:d6:07:71:dc:46:
fb:e6:89:ec:c3:67:fc:3c:d4:8e:d8:c2:df:64:96:
4f:77:2f:62:82:19:ff:e4:88:7a:48:a8:32:7f:c7:
63:44:0c:b1:3d:a0:a2:7d:80:a2:bd:1b:ab:32:ae:
24:80:77:80:00:f6:57:bf:1a:39:e4:d5:30:ee:f9:
a2:d8:5c:ef:72:c6:6e:40:56:01:c9:25:e3:aa:58:
48:19:78:66:1e:5e:20:8f:58:19:69:73:bb:71:55:
7b:88:aa:43:a1:40:60:44:62:d2:72:21:64:95:a6:
59:b4:c7:24:fa:6d:65:09:1e:6b:29:f8:45:8b:ad:
28:93:87:f3:48:69:eb:84:b0:1d:47:ed:8f:0a:87:
d9:c7:b6:b1:bb:bd:6c:ea:b5:35:c3:13:66:c9:78:
f2:54:55:f1:61:2a:be:00:7e:c0:08:e4:5e:ce:d2:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2D:1B:C2:54:A4:F8:3A:E8:A1:D4:8D:28:12:55:A0:A8:37:FC:2C
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:74:7e:7f:83:83:aa:92:1d:e4:ee:ef:27:6d:5e:ee:ab:73:
2c:5d:50:e6:1e:f7:7c:cd:58:89:07:23:82:90:e2:9c:3d:15:
f6:50:ad:59:e8:6f:8b:e3:23:d0:14:7a:1b:b4:8e:98:cc:ba:
e2:9d:86:94:b7:01:e0:7e:dc:9e:07:43:5b:53:ef:89:41:5a:
91:8b:d0:e8:45:b2:a8:ee:5e:4b:b8:39:1f:41:fa:13:f3:47:
19:f1:e8:5b:a7:33:04:9b:9b:ff:ba:f9:35:fc:fe:8b:68:37:
49:d8:b4:37:bd:3d:76:6a:71:ee:79:46:5e:87:25:63:62:3b:
5e:81:c4:97:73:45:d0:3b:81:c1:8a:e8:88:db:ba:bc:f9:67:
0d:46:c8:21:d5:25:ec:af:21:f3:3b:34:f2:0a:ec:84:1d:de:
01:37:a5:02:d8:d7:8b:a7:7f:07:5b:93:87:b0:9f:7f:49:74:
4f:c7:86:1e:0a:0e:91:4d:15:63:f6:29:b0:09:25:d1:93:8e:
92:77:b9:ed:c1:b1:0b:ef:c9:9e:d1:df:24:b7:c2:44:20:cc:
27:49:27:20:1d:09:be:6d:e0:b5:f7:5b:31:1a:7f:49:f3:79:
23:6b:28:84:2c:f9:90:7e:ba:f8:48:f5:f2:4f:77:1c:7f:0d:
69:eb:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:06:43 2025 by rpki-client