Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.mft (raw, json)
Hash identifier: ntXRuDUhxPFKS4vmvqy2VTpLiXwqxhH0DWslW3LoP0A=
Subject key identifier: A8:7F:A9:A9:C5:A1:E5:B4:BD:2F:FA:D8:5A:23:F2:1D:53:1A:38:32
Authority key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Certificate issuer: /CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Certificate serial: 019A1DD127B86B764F43B3150205D7BDE951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
Manifest number: 05EC
Signing time: Sun 26 Oct 2025 00:00:37 +0000
Manifest this update: Sun 26 Oct 2025 00:00:37 +0000
Manifest next update: Mon 27 Oct 2025 00:00:37 +0000
Files and hashes: 1: 0cpnYQKGq3OPhs6TX99e1iDwLZY.crl (hash: Ga4VBhRHcmr9BW9Fmh5ricBS9j3vD/EUrnU9W7LoEQw=)
2: oFJn2DbPMhZS_Tmm-DmxNkpMyhE.roa (hash: Y5qFxScEcaicbV90jLVdvKg9QlaEEdGk/0uix/Osd6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d1:27:b8:6b:76:4f:43:b3:15:02:05:d7:bd:e9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Validity
Not Before: Oct 26 00:00:37 2025 GMT
Not After : Oct 27 00:00:37 2025 GMT
Subject: CN=a87fa9a9c5a1e5b4bd2ffad85a23f21d531a3832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:de:2e:72:9e:63:fd:db:78:bd:a9:e4:8f:
2c:ed:81:16:69:25:01:cc:9a:a7:c2:e4:3b:9b:07:
d5:65:c0:90:04:7d:3a:e9:e5:43:fc:e5:dc:68:69:
cc:5d:4e:ee:34:a8:1e:79:45:4f:18:d0:90:74:f5:
37:db:cf:f9:7e:19:83:34:9c:aa:ed:07:85:18:3b:
25:8d:16:09:3d:54:d4:6d:54:5e:7a:8a:9b:1a:6f:
a2:5b:ca:57:20:d3:eb:67:a9:ce:9f:84:15:9b:dd:
9e:47:68:7c:76:f8:5b:5f:fa:d9:41:3d:ac:dd:c6:
12:89:75:5f:07:68:47:ce:9b:37:a7:70:87:8a:76:
0c:e9:a4:58:09:6d:6f:eb:e9:70:b3:1a:d4:99:cb:
30:8d:b0:23:e0:0f:c3:e1:81:02:2f:aa:3e:59:62:
31:78:7d:8f:b4:88:e1:df:8f:e2:55:87:4e:7b:2a:
59:33:dd:19:a8:1e:35:f1:97:8d:eb:d9:a4:5e:fe:
09:ea:11:7f:3c:b8:d9:25:5f:69:20:73:43:21:ba:
55:e1:2e:be:72:7b:b3:d2:78:0e:30:43:db:69:da:
06:b9:22:12:2d:75:94:1c:19:7e:54:28:47:1f:71:
59:e5:aa:fc:ee:47:4e:4b:b5:a6:29:3b:0d:06:47:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7F:A9:A9:C5:A1:E5:B4:BD:2F:FA:D8:5A:23:F2:1D:53:1A:38:32
X509v3 Authority Key Identifier:
keyid:D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6b:1c:a4:c4:1d:cb:e5:6a:3b:19:b2:61:41:d4:4d:d2:42:
a0:e9:df:91:9f:66:6a:33:cc:2a:15:e9:b1:9b:54:9c:a6:82:
71:0f:1a:c7:54:99:ff:e9:d4:2f:e8:59:50:27:4b:16:ac:8a:
2f:6a:be:f0:dd:c0:d7:18:77:d1:38:5c:a2:5d:bf:55:e3:b5:
06:c6:97:c1:43:2e:d1:fd:4d:d7:df:34:55:70:7e:b3:be:ac:
a7:60:64:63:3b:5e:f1:f1:d0:a8:9a:f3:d6:54:e9:ef:9f:75:
c2:f6:e1:7a:3f:6d:46:a3:c6:36:f7:b7:44:22:25:ab:e1:55:
12:ed:f0:bb:b4:00:06:14:e4:4a:ca:49:1b:df:36:82:fb:bf:
8a:04:c9:d3:95:a6:59:45:1e:84:ec:e0:f5:83:4a:5a:c4:95:
16:36:17:c7:fd:34:0a:84:85:01:73:ca:e4:9d:0d:fa:3a:5f:
19:5b:34:f2:4d:8d:f7:bf:e0:4c:fb:58:ca:23:de:2e:7e:0b:
e4:79:b7:da:ba:d8:8c:ad:d7:49:d7:af:78:6e:d1:eb:de:d4:
8f:0d:9c:12:f6:5f:d6:30:47:2c:06:70:5f:45:ed:5f:d3:37:
b3:65:c5:68:bb:17:b2:a8:3d:ca:ca:e0:e8:55:c2:7d:cc:ea:
40:8d:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:36:36 2025 by rpki-client