Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: AYEUDKeqCYcVY5rXVICHjN3xZyjTHy5Rh7eJu279+9g=
Subject key identifier: FC:99:C8:ED:61:9A:0F:4E:01:97:70:B8:EB:4B:1B:56:1D:65:CE:B4
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 019A71133CFEF67136150FCF76961B4C11BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 1366
Signing time: Tue 11 Nov 2025 04:01:17 +0000
Manifest this update: Tue 11 Nov 2025 04:01:17 +0000
Manifest next update: Wed 12 Nov 2025 04:01:17 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: 08bQ33iM8DEfBM8jqv5MfzJzbeIKMl41UKQrEVDtGC0=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3c:fe:f6:71:36:15:0f:cf:76:96:1b:4c:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: Nov 11 04:01:17 2025 GMT
Not After : Nov 12 04:01:17 2025 GMT
Subject: CN=fc99c8ed619a0f4e019770b8eb4b1b561d65ceb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:1d:a7:c4:c9:6b:e0:5e:7f:3e:34:07:4a:
1c:02:59:bc:ff:7a:49:08:d7:a5:1c:96:e7:1a:6c:
12:a9:ce:c8:5d:dd:54:c2:42:06:65:29:f9:0b:e3:
0d:9f:6e:a9:22:e7:8e:0a:dd:d0:2f:99:a6:d4:66:
bf:f2:eb:f9:2b:da:57:6a:0c:f9:41:50:70:97:cc:
64:bc:f4:b7:dd:3e:9c:c3:97:e9:59:bb:e1:76:e0:
41:6a:3c:d7:ba:ef:37:71:67:1f:0d:a4:8a:cb:a0:
d9:9f:77:cb:f9:df:1b:48:db:31:fb:4f:f7:b9:60:
4c:06:8f:90:97:13:e0:2a:b8:20:4c:ec:84:40:29:
66:96:8a:75:23:4e:e3:71:b9:19:ca:1f:56:ea:42:
a1:d4:74:6e:80:2b:22:0f:92:35:bc:9d:1b:0d:af:
d3:96:39:ce:ad:a4:b8:2a:58:c3:f0:65:6c:db:41:
a0:fa:8c:d1:81:b7:57:c4:0d:33:48:de:40:c5:3b:
83:7a:d0:eb:9d:7f:45:32:a8:c2:90:50:5a:52:6b:
00:f5:ed:87:61:de:51:c5:c0:d0:c2:19:b7:cc:99:
a1:27:4f:d0:9b:be:6c:9e:b7:08:2b:ed:e8:8c:94:
d9:3b:e1:18:6c:21:69:98:e5:5f:70:c3:77:8a:83:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:C8:ED:61:9A:0F:4E:01:97:70:B8:EB:4B:1B:56:1D:65:CE:B4
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:58:9f:41:bc:67:0e:bb:a6:e1:9e:c1:79:6d:7b:9b:cf:f9:
eb:dc:52:0f:9f:20:1c:91:ef:ec:0a:f7:5c:b2:af:36:b0:19:
22:08:6b:dc:fc:a2:31:91:bb:90:c4:f4:d6:62:e5:3b:57:7f:
e0:be:50:99:50:47:d8:ed:4f:67:00:34:fc:41:6f:a5:50:27:
2e:5f:91:83:80:1b:5b:93:be:57:07:eb:0a:51:ea:50:b1:b4:
c1:b4:d3:99:c3:6a:53:b6:b6:5c:9e:58:03:1f:a0:c6:28:43:
2e:de:16:a5:0e:f5:e1:a4:37:e5:da:06:61:0c:f6:ce:3a:3e:
e2:c8:97:97:2a:43:5d:df:0a:95:dd:32:e5:69:41:db:bf:70:
10:2e:70:08:b7:9b:8b:3f:c8:e4:32:4a:b4:40:11:f7:ba:1d:
c2:a5:c8:a6:2b:2c:09:66:96:23:10:79:2e:70:4a:32:66:55:
46:a9:3a:f5:f1:b0:71:48:49:60:b2:f7:6b:e1:4c:fa:c4:e5:
10:f0:87:39:5f:8f:0a:dd:67:da:a7:7b:8a:9b:1f:a6:c3:07:
7a:14:34:b2:e0:e4:8e:e0:53:b9:96:b1:99:f2:7d:2a:fa:86:
08:7e:95:a8:0f:6c:69:ed:43:36:b9:cd:2b:02:3b:32:39:b2:
3a:c2:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:06 2025 by rpki-client