Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: /3rJAvpyKCay93buZfTKzf1YxCeTAItfksMS9r4sbtE=
Subject key identifier: 37:AA:97:CF:10:79:EB:66:05:FA:53:25:93:91:F9:9B:65:3D:83:01
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 019A1E085279F51CE2F14F7D93CE1B201633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: 010E
Signing time: Sun 26 Oct 2025 01:00:53 +0000
Manifest this update: Sun 26 Oct 2025 01:00:53 +0000
Manifest next update: Mon 27 Oct 2025 01:00:53 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: tLZUsXSs/4w27aDMJuCC0yrToXWmZucpFZkBuI3YLuo=)
2: L3NuWTe_ZTmjBo-VlxbB6Itqb5c.roa (hash: 1CPUHzNqQbUf2XOYArYRqgpqG1Ievq6YnuLxsGd4YuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:52:79:f5:1c:e2:f1:4f:7d:93:ce:1b:20:16:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Oct 26 01:00:53 2025 GMT
Not After : Oct 27 01:00:53 2025 GMT
Subject: CN=37aa97cf1079eb6605fa53259391f99b653d8301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:de:11:0b:6e:85:40:b5:e6:e7:1b:14:c4:
43:7a:e1:d7:21:bd:51:c7:5a:cc:65:54:da:6e:16:
8e:f4:3a:c9:58:11:4b:76:a5:e2:6e:c5:58:24:c2:
90:5c:c1:96:0e:8b:44:1c:03:15:e9:21:ee:16:81:
2e:3b:f4:4f:cf:52:a5:1c:f0:f7:05:ba:17:98:39:
54:dd:ec:fd:2e:00:f2:54:e1:c9:5a:60:f8:64:be:
b2:ce:63:e5:22:9f:04:65:eb:85:d5:14:36:83:f8:
e5:a8:08:9d:93:2d:5a:f8:9c:3e:66:c2:d9:f2:15:
92:b5:4a:26:36:0d:e2:57:a0:89:a2:19:d3:5a:e6:
39:b7:1a:54:32:db:3f:6f:68:ae:23:9d:3c:18:ce:
fb:3f:b2:25:3f:ec:a2:02:f2:33:8d:86:5f:fa:f8:
b6:19:63:1f:98:6c:85:13:8b:53:3a:60:69:73:8e:
23:6a:97:7f:64:9f:b3:44:e8:0e:f8:d6:98:b4:e6:
3d:3f:3c:e8:e2:73:fd:16:d3:f5:0a:d0:d8:6d:dc:
6f:9f:50:71:bd:b8:e1:b8:b7:12:03:73:43:94:f5:
5a:cb:70:ea:d6:42:db:62:9f:25:82:94:17:b9:5b:
8d:23:30:98:fd:e6:17:13:e5:70:ec:3b:46:45:a2:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AA:97:CF:10:79:EB:66:05:FA:53:25:93:91:F9:9B:65:3D:83:01
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a0:52:24:2b:91:5a:64:82:13:c5:5f:d6:7e:b0:cf:0a:4b:
dc:73:dd:ce:3e:a9:56:e6:c0:81:22:db:8a:c6:08:71:c2:89:
e6:a3:cb:4a:34:83:47:e6:79:10:01:d9:77:37:18:29:81:af:
d8:26:6c:bb:e4:08:4d:9c:32:86:5b:2a:f7:c9:64:5b:df:87:
30:a1:f4:91:3c:cc:b7:7a:3a:50:8d:13:52:e5:1e:16:11:49:
94:45:a1:ad:65:1d:1a:3c:6f:47:1d:11:af:68:b4:ca:20:f1:
40:d7:7e:67:1c:2a:39:44:10:4b:0e:1e:bb:81:fc:d4:c2:b7:
79:ed:f5:a9:28:2d:40:c1:94:5d:3e:90:2e:aa:ae:fa:81:bb:
01:24:9e:37:66:7a:cc:9d:3c:c0:4c:07:7c:76:4d:b7:bf:16:
bb:fa:2e:fe:62:ff:e6:9f:ca:bd:60:c5:db:e7:f6:d2:84:18:
62:7d:20:6d:93:5a:e0:23:41:d4:24:01:e8:b2:e5:c2:bf:e0:
e8:2e:4b:33:3a:70:b3:e7:ee:6e:44:b4:0e:6b:79:71:76:0e:
2d:a2:4e:87:04:98:3a:13:39:09:14:fe:e9:a7:e3:19:f2:3e:
3a:5a:37:b2:63:d3:54:ec:04:8c:b8:b7:ce:46:70:c4:95:c9:
c6:0e:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:43:20 2025 by rpki-client