Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: fH5FkM9FQoHlkiybuJrxcfRwQwvzkwZAqsApOxpWJ4A=
Subject key identifier: 08:ED:25:2D:9F:90:BC:4E:00:68:14:23:D5:52:B1:69:E8:26:87:F1
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 019A15732C0B935382511E21BD11F222D8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0B50
Signing time: Fri 24 Oct 2025 09:01:00 +0000
Manifest this update: Fri 24 Oct 2025 09:01:00 +0000
Manifest next update: Sat 25 Oct 2025 09:01:00 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: 67A0LfcCpQcShgQRnjaOmGTyVNK4mSPZToMotoobQh4=)
2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:73:2c:0b:93:53:82:51:1e:21:bd:11:f2:22:d8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Oct 24 09:01:00 2025 GMT
Not After : Oct 25 09:01:00 2025 GMT
Subject: CN=08ed252d9f90bc4e00681423d552b169e82687f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:b2:0c:f8:3a:5a:cf:ab:f5:1f:a3:36:03:
57:09:0a:56:52:dc:ca:0b:a8:26:39:76:f6:6c:c5:
fa:d2:46:6e:77:3b:61:d7:fd:f3:b2:55:64:c8:4e:
1d:5d:02:b2:d5:1e:f6:69:9f:97:b9:bd:7a:c9:ba:
05:86:fe:d5:52:17:5c:8f:17:e6:68:4f:f1:d4:78:
3f:bf:e0:1f:ff:da:b9:e7:47:26:a0:9f:95:0f:f7:
56:d9:84:f2:f1:9f:1d:c9:cd:49:42:74:9f:74:1e:
c8:61:fd:20:b0:5c:d4:10:84:a9:63:e7:02:fb:13:
b1:6d:c6:57:be:8c:dd:66:b6:85:10:64:df:ad:7e:
ca:d2:21:ad:4c:c9:c3:1a:4b:00:b6:cc:e0:3b:c9:
49:23:f7:7f:8a:b0:ad:34:7c:9b:5f:13:46:0d:f4:
7f:60:3f:d4:ed:d2:fc:57:8d:1f:9d:11:b1:ca:f4:
3c:69:dd:a3:0a:8a:cd:6f:dd:55:39:a9:d1:3a:a1:
83:f5:29:be:13:ec:b1:02:f9:53:11:86:7e:4c:b2:
ed:62:d8:33:8c:ef:4b:84:3c:e6:12:d6:ab:4b:a1:
63:ee:d3:0a:cb:67:8c:fd:d9:67:7c:b9:e2:5b:5f:
1b:75:34:f9:ac:c7:41:0c:6c:68:44:a9:70:f4:e9:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:ED:25:2D:9F:90:BC:4E:00:68:14:23:D5:52:B1:69:E8:26:87:F1
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:75:0f:19:f1:e7:52:59:ec:2f:10:67:56:c2:ea:35:0e:5e:
21:ec:76:49:f7:76:d7:59:a6:a5:cd:e8:94:60:92:97:ff:c5:
e7:68:ae:1a:49:d4:bc:49:aa:35:4c:ef:31:b9:41:99:23:e9:
e3:0e:67:0f:b6:8d:11:53:83:e5:e6:71:e9:a5:5a:ae:ae:0f:
cb:80:41:8d:0c:20:1f:04:9a:8e:74:8e:da:81:49:60:bb:ce:
5c:6f:3d:07:d2:d0:3c:52:65:5c:85:ac:2a:42:e3:17:dc:e9:
8c:41:a3:cc:cd:cd:be:37:33:ac:64:49:9b:e7:a2:5b:3e:f9:
95:e1:ee:4f:33:1a:31:59:c7:4b:27:39:f5:cd:13:60:96:2e:
0c:fc:0c:91:02:e1:e9:fb:8f:57:e3:e6:9e:24:92:10:6a:fc:
fd:5f:51:30:22:50:ee:fd:f8:34:c3:44:d0:2e:7c:0b:80:30:
fd:cf:28:cc:ea:28:21:21:a3:4b:23:8b:73:e5:b8:33:7e:c4:
a5:6b:33:65:13:71:ab:dc:e9:94:e3:5c:3c:56:ab:9b:b5:87:
71:7a:ed:61:16:bf:dd:57:03:a0:29:c2:fe:1c:4a:b3:e4:d9:
be:d9:bd:af:ed:c9:0f:c8:bf:78:97:1e:99:de:54:bb:ea:b4:
23:b4:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:34:40 2025 by rpki-client