Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier: +kZKkM5M64WQb7/Ez/LCDobAg8o+mmllOcp8XUJA6EA=
Subject key identifier: 0D:96:F9:4E:5A:0D:21:E5:A2:3F:77:05:90:25:8F:F4:2F:C5:8D:D4
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 019A13F274F7CF36E99F6E36B29B505726D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number: 0A32
Signing time: Fri 24 Oct 2025 02:00:48 +0000
Manifest this update: Fri 24 Oct 2025 02:00:48 +0000
Manifest next update: Sat 25 Oct 2025 02:00:48 +0000
Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: D0oswiTXSxN7IzuOeDabnKVQNxv+G0kFHm7iuxPnV30=)
2: jQGsEYW9nQYMqDgRdjHs5yh307o.roa (hash: ZPgtlYS7YpDV/s/35ryF75mYWk1md56zE0UQWzxn7Gk=)
3: wBQJvFifdoJgqtUNKdp3wlo8l_8.roa (hash: 5Lsfd9g+UNfdFLBlgH3vEAe0fksX3TCnFsgxtR55Zwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f2:74:f7:cf:36:e9:9f:6e:36:b2:9b:50:57:26:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: Oct 24 02:00:48 2025 GMT
Not After : Oct 25 02:00:48 2025 GMT
Subject: CN=0d96f94e5a0d21e5a23f770590258ff42fc58dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:a4:db:ee:19:a1:62:1c:8b:78:f1:eb:aa:
b7:35:7a:30:e6:23:cb:c3:5d:93:11:c0:75:d2:96:
ea:5a:6c:88:3f:59:4e:9d:c1:8e:e1:0e:a6:76:9e:
30:c0:dc:0f:43:5f:46:f8:e2:b0:23:04:3c:5b:13:
ff:24:6b:06:05:2c:76:4b:f6:7c:3c:48:10:02:e9:
74:53:5b:91:85:cb:1b:2c:40:30:a0:f1:9d:e3:43:
f8:81:d5:3c:d5:10:50:ae:e9:73:4e:36:2d:e1:7e:
12:94:9d:20:65:d6:83:a4:59:18:98:58:cb:c8:74:
b0:ee:33:e5:52:73:29:62:1f:38:0c:d1:69:e4:76:
e0:e4:7a:44:db:63:0d:50:04:6a:78:64:73:ed:3c:
ee:54:f2:7b:42:72:64:a3:ae:35:0b:f2:33:de:46:
d2:b9:8f:1c:b2:1c:81:e1:3f:bf:dc:6e:1e:94:02:
95:6a:3d:05:df:71:72:0f:c8:de:64:9d:55:2e:79:
20:bf:d4:52:20:7d:15:c7:7b:c8:05:a9:e1:25:3e:
b9:16:cb:31:72:23:73:1a:ec:83:78:7d:91:26:e5:
f8:dc:22:e0:55:03:bb:4f:5b:ff:9e:94:c5:41:28:
de:41:11:bd:ea:38:8b:05:d0:2e:d6:d1:95:08:d6:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:F9:4E:5A:0D:21:E5:A2:3F:77:05:90:25:8F:F4:2F:C5:8D:D4
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9e:21:65:0c:b1:3a:b4:d1:eb:6c:9d:7c:9b:3d:00:15:ce:
e5:4c:76:38:22:5e:9d:79:26:6b:c4:f9:00:2d:aa:ff:d6:32:
a7:ed:0f:c1:9c:9f:01:58:5d:df:a8:fa:21:1c:da:20:40:21:
78:17:a7:40:71:d8:b4:9c:ec:4e:cc:dd:c0:ef:da:17:6d:82:
e7:f5:eb:95:23:f3:6a:3a:cb:fb:8a:16:20:05:75:e2:22:7d:
3b:42:f7:27:8b:1d:30:c8:26:30:24:a0:77:c0:22:cd:ad:1e:
18:09:8f:e6:90:88:cc:0f:61:62:21:5b:8c:3d:f6:90:3a:6d:
c2:40:59:6f:75:00:04:e7:9f:fb:18:b3:8a:a6:d2:49:63:d3:
64:b0:19:17:4f:e7:b1:0e:01:da:4f:21:ff:41:bb:9c:0d:5b:
c2:80:86:e9:51:cb:01:67:8e:42:b8:f2:9e:eb:34:d7:2a:08:
bc:8e:10:7f:d4:0d:d3:be:0b:0a:be:ba:4b:b5:88:60:78:45:
53:ac:92:21:be:2b:0d:35:94:17:77:01:95:fd:70:d1:de:9f:
09:cc:6d:bc:d7:05:4b:4e:8c:23:d8:dc:b8:50:48:68:cc:33:
bf:17:e2:86:86:8e:bb:14:73:cb:23:2c:40:5e:4e:18:b9:12:
8f:55:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:09:53 2025 by rpki-client