Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: AEPjT8pcNFO+zBIZUapS4dR6zEqXxbxtNh2AOcAm0r0=
Subject key identifier: 9C:D3:7B:5E:75:E5:77:2D:23:B6:44:86:4E:32:AF:D7:CF:1E:FA:DD
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 019A1CF54BAA9E9C357B73102748BFF8B856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 0986
Signing time: Sat 25 Oct 2025 20:00:28 +0000
Manifest this update: Sat 25 Oct 2025 20:00:28 +0000
Manifest next update: Sun 26 Oct 2025 20:00:28 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: lHfDAKdjwBSnGq5BUOphCrdbL23PgxVBeslpNyHDbvc=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:4b:aa:9e:9c:35:7b:73:10:27:48:bf:f8:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Oct 25 20:00:28 2025 GMT
Not After : Oct 26 20:00:28 2025 GMT
Subject: CN=9cd37b5e75e5772d23b644864e32afd7cf1efadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:0a:16:05:de:33:d0:f2:31:3f:91:ab:b2:
8e:15:b4:43:59:97:45:92:db:2b:13:4c:1e:16:8b:
bf:3f:fc:ca:23:58:ff:0a:d2:9c:ed:36:05:df:af:
f1:20:84:4b:91:15:cb:3c:07:08:fb:94:88:53:37:
4f:a1:c8:b6:8d:9a:84:b7:d0:5e:50:1a:34:75:8c:
f6:19:79:23:9f:14:1d:d8:bd:f5:e6:96:45:3f:41:
aa:13:2f:5b:20:9e:c0:80:47:31:89:e0:c7:03:df:
7b:21:9d:52:c6:6a:86:bb:08:d8:16:45:af:97:93:
d8:0b:69:82:95:7e:48:78:df:f3:7a:5d:60:98:d5:
ce:68:5e:b6:24:74:23:c0:3f:1a:e0:87:55:7f:9d:
91:26:29:f0:c2:b5:37:3b:76:f3:d1:96:dc:f6:29:
ef:87:10:49:e0:72:fd:79:92:4c:7b:14:10:54:31:
73:0d:77:63:c3:f3:ae:1b:dc:85:32:97:e8:b5:65:
d2:36:5d:ca:70:09:97:6c:d6:ce:65:fe:64:bb:12:
59:73:1a:f7:ee:19:b4:b4:a3:4f:59:d2:1e:9e:f6:
0d:8c:1b:4c:5f:43:24:2f:f4:da:37:3f:32:46:ce:
4d:e0:69:6d:cf:10:63:61:52:58:93:59:d2:3b:be:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D3:7B:5E:75:E5:77:2D:23:B6:44:86:4E:32:AF:D7:CF:1E:FA:DD
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:eb:ab:e9:ab:9f:e5:44:df:d9:7f:4d:ea:f0:d9:fc:88:31:
c2:4c:2a:54:af:fc:32:eb:0f:38:98:29:b6:31:1f:47:a0:23:
5b:aa:10:da:9a:fc:a3:a9:14:4c:64:40:75:46:55:23:79:41:
33:f7:ea:a8:50:01:3b:2e:a5:45:a3:85:4b:fc:00:34:53:ca:
1e:14:37:bc:fb:52:f7:b8:4e:65:6a:02:a4:89:81:7d:2b:a8:
31:0a:50:72:5b:af:49:f8:00:e4:2a:03:b3:6e:e5:2d:1c:c2:
2a:71:57:74:77:6b:6e:d8:8c:cd:35:14:76:9d:b9:5f:75:cb:
39:2b:65:d5:65:40:ab:2b:69:cb:6b:4f:17:02:de:f1:4e:7c:
97:71:3f:ae:e3:61:88:32:62:42:31:3a:ad:78:7f:62:1c:39:
56:57:32:6d:53:e2:77:f9:49:3c:97:25:70:4d:20:d5:dd:ea:
4b:e9:72:97:a8:10:ec:83:77:99:74:66:92:98:22:b7:51:c3:
39:f7:3a:6d:13:98:f6:f2:2b:9b:6c:26:99:a4:d2:81:75:cd:
2d:f3:46:f6:4c:0f:80:17:00:7b:76:9f:5d:72:c2:34:c9:d2:
64:b1:af:84:e0:74:79:9f:79:4f:69:ff:38:3c:f2:6f:2c:c0:
18:a5:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:11:57 2025 by rpki-client