Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json)
Hash identifier: rW4jHGww22AawA227XTRQnsipiOwxkeC+Lz1UKOvcxg=
Subject key identifier: 2F:A2:72:E7:7E:CF:6F:7A:77:5B:23:5F:5C:3F:E4:ED:01:C0:45:2E
Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be
Certificate serial: 019A24789E9D34DB3CAFB06F15D2B89CB597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
Manifest number: 1068
Signing time: Mon 27 Oct 2025 07:01:15 +0000
Manifest this update: Mon 27 Oct 2025 07:01:15 +0000
Manifest next update: Tue 28 Oct 2025 07:01:15 +0000
Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: OpNgbQD/KWncB5GphRp+zaMgmFN/wCIItRYjkx2kK0s=)
2: Ns-TL5URBIXkWjSrsIX0f-jA8r8.roa (hash: rkMxs94A3zqfZql4p2TlDjcRtvwJLskmzewtRu09cI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:9e:9d:34:db:3c:af:b0:6f:15:d2:b8:9c:b5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d103af197645a4941c6cdb08669af008b79102be
Validity
Not Before: Oct 27 07:01:15 2025 GMT
Not After : Oct 28 07:01:15 2025 GMT
Subject: CN=2fa272e77ecf6f7a775b235f5c3fe4ed01c0452e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:b4:d0:96:b2:11:0a:04:5c:e4:0b:92:90:
6f:67:b5:4a:9e:e6:e0:bc:28:fa:1f:47:05:88:c3:
94:fa:bf:f7:ec:91:98:d8:2c:44:c4:53:7f:e7:9f:
ae:22:c3:ed:b1:b9:2b:9a:d7:f0:51:67:7d:d4:b8:
fd:65:78:d9:aa:e5:89:1e:31:2e:e4:13:c2:7b:33:
f3:9f:77:37:1c:e8:bb:85:4d:4f:bf:1d:52:eb:e7:
00:e8:24:f5:e7:9a:f4:2b:dc:5c:e6:2a:05:6f:ff:
b5:9e:36:65:21:57:ff:41:ae:49:74:73:d7:bd:bd:
73:2a:32:05:c6:44:d3:bc:13:2c:84:8d:95:76:d2:
9a:71:84:fc:18:9e:3c:1b:be:fb:9e:18:74:02:81:
73:78:ff:30:d2:a5:de:d0:03:03:71:d9:b4:1a:dc:
33:b3:08:3b:74:d3:81:ee:48:d7:5e:f6:9a:ab:1d:
d3:c1:87:12:04:4c:d5:8f:1c:c7:97:40:45:1e:89:
90:ba:0c:e5:e1:6e:f6:2f:03:40:cb:d0:78:19:72:
85:11:6a:3c:02:e9:d7:ed:d4:f3:06:a6:87:fa:f2:
c5:43:da:9f:0c:b8:52:b5:e2:80:d2:7f:7d:c5:27:
f0:1a:be:f2:5d:d5:28:ec:51:72:7d:52:f7:e5:8c:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A2:72:E7:7E:CF:6F:7A:77:5B:23:5F:5C:3F:E4:ED:01:C0:45:2E
X509v3 Authority Key Identifier:
keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6a:b1:fa:25:5d:31:be:1b:c9:aa:88:33:74:19:ed:62:8a:
f4:9e:d5:3a:01:8e:6d:f0:62:52:6c:db:0b:f2:94:39:2c:fb:
ed:81:d2:e6:db:5c:ac:24:79:6f:5e:03:3f:48:e4:79:8c:7c:
f1:4b:47:f8:72:ec:58:77:f1:d4:cd:32:6f:7c:3d:f4:b8:31:
10:a6:39:8b:ea:5d:da:29:60:7c:46:9c:c2:07:2a:32:29:91:
89:99:3f:45:83:ca:46:95:2f:b2:0b:3d:b5:a4:db:31:20:81:
26:bd:5a:c7:96:33:0a:79:33:ec:ca:ac:c8:c7:5c:15:a4:84:
33:3e:9c:31:d1:01:68:2b:23:07:0f:05:11:a6:a1:d2:d2:8c:
02:1a:a3:c3:34:08:64:74:0f:c0:ec:ec:b2:bf:c5:f3:a2:41:
48:f1:61:4c:28:35:02:5b:fa:fa:95:50:7d:56:bc:05:c3:b3:
1f:30:fb:80:6e:73:ef:e6:42:0e:c8:6c:57:97:0c:4e:63:75:
3a:58:b5:bb:0a:0a:55:58:e3:7e:45:93:51:8e:af:8f:92:ae:
e0:6f:81:26:e9:08:0d:f1:54:83:87:98:b5:0f:d5:d6:a8:69:
59:4a:1b:62:17:18:73:d9:95:c6:e8:c1:c8:64:5f:38:25:7a:
85:15:2b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:51:06 2025 by rpki-client