Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: Lu6U0HD1uHgqKpiaO6Hp/mCw0NU5YR4ZB3sgXS+GE8U=
Subject key identifier: C0:D4:A2:B6:CB:77:18:84:D3:2B:99:22:66:E8:00:1E:B0:79:E2:00
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 019A53ACA5C3A4FE682EC39865F71F5C195E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 11:00:14 +0000
Manifest this update: Wed 05 Nov 2025 11:00:14 +0000
Manifest next update: Thu 06 Nov 2025 11:00:14 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: R1ADmELqek+++vm3dwJeXznyIDnyndztvv935Nduwis=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:a5:c3:a4:fe:68:2e:c3:98:65:f7:1f:5c:19:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Nov 5 11:00:14 2025 GMT
Not After : Nov 6 11:00:14 2025 GMT
Subject: CN=c0d4a2b6cb771884d32b992266e8001eb079e200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:53:2b:1d:f5:84:62:d0:b8:15:28:94:08:
ad:d5:06:f8:86:bb:b0:3b:58:91:f3:21:f4:fc:67:
dc:d9:35:f2:db:ea:16:1b:4a:ac:5c:ee:5f:b5:ca:
9e:10:b3:21:08:e9:34:0b:9c:d6:42:82:fb:a5:00:
ad:d4:e4:b4:4b:64:6c:8f:b0:5a:60:b5:fd:82:a3:
1e:52:2a:07:8a:89:26:3f:d1:14:13:49:72:29:69:
3f:d6:ad:20:80:b0:c9:ca:48:49:6e:f0:b5:26:3e:
b8:ac:17:2c:59:43:fa:8f:a4:d2:d1:6f:09:b2:b7:
69:19:a8:64:7f:d0:51:4d:bf:d1:75:cd:8a:aa:83:
5b:48:cc:76:88:09:17:c2:d2:6b:62:1a:b1:17:ec:
5a:03:0e:ef:57:4d:b5:6b:43:c1:05:26:fa:b4:9c:
63:e8:3b:ff:f2:a2:83:f2:06:13:e7:c0:cd:72:74:
1a:f1:43:27:dc:16:dc:ff:90:68:3a:53:2d:c3:11:
11:ec:af:92:91:ea:ea:62:17:8b:e2:f4:e4:ff:2f:
b6:a8:3b:fb:e6:53:66:1d:f3:40:12:6a:b9:3e:50:
08:40:a6:6d:f2:da:bd:dc:c6:b6:9c:56:da:c7:df:
0c:98:b3:98:03:9d:68:20:f0:03:a1:d5:89:8f:3e:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:A2:B6:CB:77:18:84:D3:2B:99:22:66:E8:00:1E:B0:79:E2:00
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b5:d2:6c:6e:cd:b5:98:7d:89:a3:23:90:6b:73:ed:b8:9a:
8d:25:e5:95:5a:cc:f0:c0:5d:08:3a:c5:09:3d:de:1e:45:20:
05:68:a0:9b:64:62:7c:d6:bb:1f:2e:45:64:ef:0b:71:ab:2f:
3c:af:cd:17:74:c6:87:76:ac:09:23:2f:28:44:de:d1:2b:63:
0c:5a:4a:ba:1a:ec:2d:46:4d:28:41:6f:dc:53:95:34:fc:48:
d0:15:74:88:5e:d2:7e:94:ee:bb:fc:b3:d7:75:d9:52:7c:3b:
6e:38:da:15:c2:3d:db:c1:ed:33:ff:96:8a:3d:bd:e5:fe:0a:
4a:18:0f:f9:7e:53:ea:f7:20:9f:29:43:ae:a6:80:d3:07:50:
b0:85:0f:ca:44:d3:2c:e4:6c:2c:b8:53:90:51:b2:3e:87:18:
93:af:89:f2:48:c9:f3:6f:79:a6:1d:5b:9b:4b:b6:ef:86:fd:
e3:18:a5:4f:2d:e9:41:47:43:97:2b:10:35:c3:46:c2:a1:9e:
ae:7b:22:74:0f:78:10:a7:5f:48:f1:1e:4a:bc:e0:1b:85:ed:
3c:2e:1b:cf:ff:d9:d6:91:2a:4a:69:54:02:99:8d:84:5d:f3:
6c:61:b1:67:c8:53:9d:b3:26:12:34:03:ae:d7:7e:b6:b8:82:
8f:fa:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:09 2025 by rpki-client