Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier: dVo3VdzTpQriheVitDnQAwMANnwqOMu0HVzHnRSB2iA=
Subject key identifier: 1C:31:96:E0:6F:55:84:2E:41:C5:1A:B2:41:C4:F5:07:03:DF:7B:89
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial: 019A2778A7D523F8A2E3FCC7AC1499F37885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number: 04E5
Signing time: Mon 27 Oct 2025 21:00:09 +0000
Manifest this update: Mon 27 Oct 2025 21:00:09 +0000
Manifest next update: Tue 28 Oct 2025 21:00:09 +0000
Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: MAMVv+nHFgEQD5js0DeNEGEFeiswRKqBcQYqv/DYjEQ=)
2: yAFTVipgzUq2JehlyXdlgvk4lGA.roa (hash: 4JLBxrRXaq9Ej5PAfStMaFMw5Cw8Ln+aMWKMUmNE/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:a7:d5:23:f8:a2:e3:fc:c7:ac:14:99:f3:78:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
Validity
Not Before: Oct 27 21:00:09 2025 GMT
Not After : Oct 28 21:00:09 2025 GMT
Subject: CN=1c3196e06f55842e41c51ab241c4f50703df7b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:4c:11:34:0d:cf:98:f3:8c:f7:c4:70:f3:
a9:87:63:db:ab:3e:43:93:bd:b1:0a:fd:4e:56:71:
34:39:a2:70:6c:36:98:12:02:3b:b9:3b:59:7e:16:
5f:8f:85:c4:e7:19:3c:33:41:e2:b2:80:83:e3:c0:
d2:e3:5b:38:dd:31:b1:17:c5:e6:02:8c:94:18:14:
00:e6:ba:97:ec:ca:0e:e6:bf:27:4d:d7:12:69:84:
ae:4f:07:94:f8:e3:f7:67:6a:29:5b:46:38:0d:35:
05:ab:81:36:de:e3:e3:de:3a:29:28:22:17:ae:95:
27:49:ad:69:12:1e:5d:2f:8b:ec:62:01:27:78:8e:
22:e9:78:24:9d:3e:75:18:b0:50:43:b4:5d:5c:31:
07:a8:37:45:5e:88:5c:3b:f5:76:ab:05:d6:d1:7c:
44:7e:92:a3:7d:5e:b5:12:dd:71:21:22:c0:10:ae:
43:fb:bc:01:89:14:54:56:14:12:96:25:82:8b:05:
8d:13:f9:71:4d:61:82:57:e5:ce:8e:c1:c8:9d:3f:
f3:f7:9d:d5:e5:36:63:c8:5a:30:6e:6a:5d:95:6b:
f6:64:e5:ee:09:d9:fb:b9:b2:6d:f0:38:22:49:bb:
eb:09:f4:01:a9:c5:bb:62:60:f7:5d:f6:cf:d4:19:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:31:96:E0:6F:55:84:2E:41:C5:1A:B2:41:C4:F5:07:03:DF:7B:89
X509v3 Authority Key Identifier:
keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cc:1e:37:a5:8f:70:e1:aa:9c:05:9e:b0:24:7a:94:98:23:
39:74:c6:ad:2a:95:c0:c9:63:50:c0:ca:15:a3:8d:95:c2:1f:
91:e2:ae:61:d2:fb:df:3b:7c:82:51:08:39:c1:fd:cd:b3:a6:
6f:60:32:15:d4:3f:44:f0:2e:f5:c6:f8:cd:ab:47:61:50:d8:
13:4b:99:4e:ac:25:d9:a0:e7:a6:f1:e0:e1:9b:f4:2e:1d:05:
c0:de:df:bf:40:ce:a0:1b:6a:56:bc:a8:4f:6c:56:0c:99:ae:
03:d5:bb:b1:21:df:b2:da:b2:d4:e7:4a:5d:6c:af:8d:05:d2:
ad:b9:dc:62:7d:bc:90:24:76:0c:46:c3:a7:35:0c:4b:40:c8:
93:7c:c5:3a:81:f3:4f:57:68:f1:60:27:1e:be:ed:75:78:ca:
3e:bd:e7:e2:d6:6d:d0:a4:12:b5:74:2f:fb:b9:a1:f7:f5:15:
d6:89:c2:d8:88:94:97:2f:81:2b:16:72:21:a3:27:4a:59:1c:
2b:82:d8:f2:2c:b0:ba:8a:31:c1:d5:b8:fd:54:77:23:c1:94:
96:61:2c:8b:b6:0a:d0:80:53:23:32:89:f7:e1:4e:63:ab:ff:
23:9c:86:79:e5:25:66:13:67:0f:a0:af:9f:89:be:3b:e8:40:
d5:49:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:40:03 2025 by rpki-client