Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: G/6nEXO5FccIZ3iFoHBcIXJ3P/BuRL8154uAcn7RW9I=
Subject key identifier: 43:ED:C9:4C:04:14:07:B2:2B:B7:E2:7B:09:92:F5:C0:92:E3:E0:4E
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019A1EE3F5C7702EDECFE464B8A70AE3E102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 0AA2
Signing time: Sun 26 Oct 2025 05:00:47 +0000
Manifest this update: Sun 26 Oct 2025 05:00:47 +0000
Manifest next update: Mon 27 Oct 2025 05:00:47 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: M0L2R9dABZ7PcZc2Qg0b6Hq3KgV8s+Xff652Cgyd+e0=)
2: 73fgtycAM2crZ_LHwWRiB0oEU9Y.roa (hash: flrMOVA6rk3M5Itkv7RZo+kAVGvmhl0NxmnJ1f7lgFI=)
3: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
4: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
5: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
6: JfF0v8eby0BQNtVREEaJFT1Zxcs.roa (hash: OQTTsSrZcqdOC8lDs04JBaSkoqVL61gLZ8I1J00GtDk=)
7: YcTIc32XZA-ghsWcGzLeleFcTdg.roa (hash: hArIQsrZH8U5ODHNwYYROkxmUYJ8DizJuV1l/Z6DTPE=)
8: bmLTewV0kZU9bfOTKlVtrHvIMyQ.roa (hash: 1N2udKCYu0d+0ddwjQonUl6aLmfYMfYwRiupNuK5mRs=)
9: u9So4nOjetfAA9W1OFixoyvY5tU.roa (hash: cvRW0bCt24xTGsHS9amEg/tzquXgyYz0ckBw0mMHbQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:f5:c7:70:2e:de:cf:e4:64:b8:a7:0a:e3:e1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Oct 26 05:00:47 2025 GMT
Not After : Oct 27 05:00:47 2025 GMT
Subject: CN=43edc94c041407b22bb7e27b0992f5c092e3e04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:bd:b3:eb:c4:c0:da:ca:34:30:65:c0:40:
6a:76:da:43:b5:53:7f:03:6d:bb:46:0c:8b:c1:36:
d4:cf:b2:e1:c5:d6:07:33:e5:f8:ec:e6:35:58:f0:
74:12:29:92:bf:fa:11:90:c1:5a:28:2a:19:13:47:
4b:17:22:d2:0d:40:c6:3d:69:bf:4f:8b:f1:6a:02:
db:ed:5e:7f:53:08:bb:c8:f7:57:10:1b:c1:54:bb:
e6:58:38:c5:36:8e:35:37:8a:ab:09:ad:18:fb:da:
fa:d3:18:eb:f6:1c:81:1b:12:1b:7d:ce:ff:ca:41:
f6:e4:f9:65:a7:4d:2d:20:38:a5:db:96:51:b3:ff:
9e:31:07:cb:7b:da:46:6d:fd:3b:01:f4:ca:cb:01:
61:57:d3:37:34:f2:5e:e7:fb:f5:86:e2:16:d5:36:
7a:07:e9:3f:45:61:b8:ee:4f:c5:db:75:d0:7f:3a:
c5:f7:e6:68:0a:4d:1d:52:6c:72:51:2e:7b:fa:f1:
a7:74:f8:28:25:64:81:e0:8c:13:7d:23:2e:47:36:
93:61:76:ad:4f:e7:91:21:1b:2e:ca:f3:4a:62:6d:
2d:66:4b:3d:6a:0e:2b:75:9a:c5:93:9f:9c:e6:43:
5d:c9:10:b7:8e:7e:de:f3:8b:ee:22:b1:c4:ba:f0:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:ED:C9:4C:04:14:07:B2:2B:B7:E2:7B:09:92:F5:C0:92:E3:E0:4E
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cc:5d:6f:3e:14:e8:2c:14:5c:59:04:72:14:e5:5e:28:8a:
c6:2b:62:bd:c5:85:73:7d:e1:fd:02:44:70:b8:64:d7:e0:af:
fe:36:6c:5b:d7:08:63:69:b7:73:b8:bc:aa:2d:62:5f:0c:3c:
25:cb:89:91:bf:95:65:a6:19:86:dd:e0:26:a9:8d:dd:32:d3:
b9:3d:3f:28:d7:85:dd:19:97:43:9b:a9:1d:da:ff:d4:69:3a:
25:aa:cd:3c:6b:a0:c8:5f:f6:04:db:36:26:21:37:1e:02:37:
e9:fe:b9:b5:74:88:b1:4e:23:90:62:9e:df:6e:f6:fb:8c:bd:
60:21:01:a9:1c:8c:a0:36:4a:a8:61:f8:d3:77:33:a5:c8:61:
36:fa:43:c0:9d:fb:f0:a3:64:06:53:8a:da:81:8a:2a:40:7a:
c0:18:5a:af:e1:26:96:a0:8d:00:df:e4:46:55:f0:13:e6:b1:
03:e6:7c:2a:8a:80:24:c3:96:cd:19:36:c6:f6:df:dc:9c:5a:
c5:e3:03:0c:5c:bf:c8:d9:92:b2:ec:99:a1:04:d7:94:ec:38:
4e:ed:34:99:00:1f:cc:e7:12:b2:8a:bd:eb:d1:b3:96:7d:40:
5f:6c:47:af:7b:12:b5:87:62:3f:ed:44:c3:62:7b:f8:7e:c6:
67:0e:24:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:20:22 2025 by rpki-client