Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File: 0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier: tLmbldPfhbAd9LAcUAotpEn33z6lYOb09wz2UGgREjg=
Subject key identifier: 65:D8:D9:1D:4D:74:7F:F5:79:DD:9E:50:B5:33:7E:2E:98:BD:90:29
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 0199436144CCEB4013E9CAC3BD1C818927FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number: 1616
Signing time: Sat 13 Sep 2025 14:01:11 +0000
Manifest this update: Sat 13 Sep 2025 14:01:11 +0000
Manifest next update: Sun 14 Sep 2025 14:01:11 +0000
Files and hashes: 1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: K2252JDlqphl+/XOS8u+qAVMLZN9e7VbWL6R3qdo920=)
2: MdxC1FpXyou6qJ-H7tes_6P5FSc.roa (hash: ZUSlUkca9mxVmO+TnlseEQ+rjBytm8k8h+/zCW79zek=)
3: u73MqPatc0TpxI-ub7E_BjZdR0A.roa (hash: Va28jPu1gwk8ly85dp8PE1WNkUFlIH8BlQN3xkzDe74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:43:61:44:cc:eb:40:13:e9:ca:c3:bd:1c:81:89:27:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Sep 13 14:01:11 2025 GMT
Not After : Sep 14 14:01:11 2025 GMT
Subject: CN=65d8d91d4d747ff579dd9e50b5337e2e98bd9029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:68:c9:b0:e9:c7:1d:eb:97:43:a3:5c:2b:
dd:9f:69:85:2a:5f:7d:7b:fb:51:52:ba:de:40:b1:
2d:9a:8d:1c:a8:f1:c1:08:d4:8f:9a:e8:24:dd:12:
30:f7:6e:cc:f8:49:b4:40:c2:3d:70:ce:c8:db:49:
87:1b:ff:3b:9c:6a:38:7c:18:17:cb:24:0d:71:14:
c4:5a:ed:02:2c:12:b3:90:b7:c3:d3:f6:1c:62:2f:
da:8d:11:1e:24:63:7a:87:41:28:17:c0:7e:53:82:
f4:11:62:8a:df:6b:46:db:10:58:e1:f2:ea:db:57:
5b:9a:80:69:f2:b8:74:ef:b3:db:f7:ea:7f:24:2d:
ee:f8:73:64:4f:d9:76:98:69:35:14:27:7f:89:9e:
d1:0d:a9:2b:20:ab:54:78:d0:38:21:c0:c0:3b:4d:
ab:39:f0:22:eb:7f:7f:78:06:2b:80:e8:4a:c2:f2:
b0:28:c2:f2:11:46:e8:0e:8a:74:af:a5:ca:09:c7:
10:59:65:66:b7:42:bc:51:2d:b8:57:ae:6a:53:82:
fc:88:c9:19:bb:c6:71:47:87:5a:d2:4a:bc:49:9a:
08:d2:a2:d2:77:aa:8e:bc:2d:3d:ba:ea:76:82:e8:
1f:ef:ce:b6:be:fe:3d:93:1a:d5:f7:7b:6f:fa:64:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D8:D9:1D:4D:74:7F:F5:79:DD:9E:50:B5:33:7E:2E:98:BD:90:29
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e9:32:ee:cc:83:92:40:ff:25:71:12:d2:5e:64:16:1d:23:
20:ef:2f:06:36:13:23:14:d9:76:f9:19:6e:86:47:de:8c:eb:
fc:d1:7f:d5:d6:21:a2:7b:93:5d:4b:9a:df:74:45:07:c5:fb:
c7:95:29:69:3d:8f:ed:a8:21:38:61:55:e7:74:a5:4d:a8:e7:
67:93:1c:a8:d1:9f:7a:c8:e8:5e:58:8b:ce:66:e7:62:c8:85:
98:98:05:d6:aa:23:10:4b:41:cb:90:22:a7:04:7f:0f:ca:e9:
c3:2c:0b:e6:e5:6c:8c:60:d8:fe:cc:9b:59:4d:7c:2a:79:29:
50:44:de:14:19:2b:c3:a7:42:ee:96:ec:3f:fe:a8:f5:89:36:
cb:44:61:6c:df:64:2a:2f:fb:c2:73:9c:16:a9:20:35:2a:dd:
c2:12:bb:e0:01:fa:8a:f7:f3:73:6f:7d:14:a4:de:12:60:55:
55:84:f1:4f:91:ca:23:3e:1b:f5:68:ad:fc:d8:3a:7d:91:71:
dd:f5:fe:34:23:09:e5:23:df:61:c8:db:5f:28:b6:02:3e:27:
52:cc:23:5b:0b:3d:b0:72:a3:db:33:6d:de:c1:c5:6b:87:7e:
a6:73:92:4e:59:31:b8:39:64:7c:98:5e:61:4e:30:8d:c6:a6:
17:4d:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 15:58:40 2025 by rpki-client