Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: pMSxWO/Ow02OCC5x///v/NFzj33ApKnVX2xptx1wpsw=
Subject key identifier: CD:0B:5F:44:29:27:08:E0:49:CA:FE:CA:23:3C:5C:1A:51:4D:ED:77
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 019A28F9B31C22B5FD0FE1815CD329FD2EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 012C
Signing time: Tue 28 Oct 2025 04:00:44 +0000
Manifest this update: Tue 28 Oct 2025 04:00:44 +0000
Manifest next update: Wed 29 Oct 2025 04:00:44 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: 1h4yQgd9eDXkhsNJp3hNEbr3aPLflcmtqTff1mkqf+M=)
2: M95FjIFFe7FE8GSWYSZYw7JDajo.roa (hash: NrgUx/KwCI45z+00qu3mq53IxB/PSBwR22i9a5VwK5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:b3:1c:22:b5:fd:0f:e1:81:5c:d3:29:fd:2e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Oct 28 04:00:44 2025 GMT
Not After : Oct 29 04:00:44 2025 GMT
Subject: CN=cd0b5f44292708e049cafeca233c5c1a514ded77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:30:1c:05:35:aa:b8:e1:2f:cb:ce:6f:a2:
0e:c3:95:35:27:97:c0:b2:53:96:f6:79:8a:a3:34:
81:9f:e8:d3:f9:f6:c6:8b:4d:1c:79:20:bd:ce:04:
f9:d2:9c:b8:37:a7:11:4b:b9:d4:0f:95:70:2c:1e:
d3:71:5c:15:f7:9d:25:76:9a:dc:f5:04:57:09:96:
3c:74:de:d8:2d:13:39:b7:c4:b2:7d:08:7c:4d:78:
24:e6:25:fc:a7:c8:d9:52:bb:ca:0d:4b:4b:9c:fc:
36:1b:bb:01:5c:33:fe:8b:b4:8a:d1:47:b5:68:ca:
c3:e2:fe:fa:71:0a:78:47:9c:d2:13:4d:3f:66:e3:
58:79:78:a3:84:a3:00:f1:8a:6e:ae:81:73:94:61:
1e:7c:1b:c7:c7:7b:2f:41:be:fe:6d:14:5c:9e:6e:
f3:ad:5e:61:40:dc:32:53:bf:52:ec:bb:40:f8:10:
64:d6:85:11:86:65:53:c5:2d:4e:ce:3e:c0:ab:54:
e2:c3:62:fa:5b:d4:51:8e:80:07:ee:3e:18:7e:91:
61:e0:79:e3:4d:f5:bb:c7:ca:88:0c:05:cd:c6:f2:
33:47:54:0b:04:60:70:32:42:c1:80:ee:db:76:a8:
43:a1:77:69:15:08:7f:36:ec:5e:6f:c7:c2:97:72:
6d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0B:5F:44:29:27:08:E0:49:CA:FE:CA:23:3C:5C:1A:51:4D:ED:77
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c4:4c:73:71:92:35:e7:bf:ab:7c:ec:76:68:29:ad:05:b6:
b8:b6:e4:aa:8c:3a:0a:ed:23:8a:4b:f9:b2:8a:9b:a4:f0:24:
02:c6:fd:8b:e8:fd:ab:f3:5d:c3:8d:6e:e1:10:0f:57:26:7d:
eb:f4:07:97:eb:38:70:d3:5f:e6:8c:e5:7b:c9:26:e6:02:e4:
67:9a:8a:83:b5:de:41:02:e7:07:31:57:80:7d:15:85:82:b0:
41:9f:62:6a:6a:e7:6b:db:fb:81:f8:3d:49:d8:b8:a4:f7:d7:
97:92:0a:51:b2:fd:7c:5e:64:08:72:47:0e:f2:86:54:a3:7c:
a1:b8:de:cd:d3:d0:c5:fc:d2:4f:0a:1b:ac:32:ac:54:1b:c8:
04:6c:23:51:1d:ca:28:6a:0f:1b:fd:dd:0d:e8:af:3a:e0:06:
81:42:ef:1e:dd:d1:da:f6:bb:bf:52:e6:c6:71:43:67:8f:15:
65:69:db:4f:b8:7d:ac:83:77:34:8b:9b:03:e2:50:87:f9:c5:
d0:e2:84:87:12:94:d3:b6:4c:fc:bb:ce:18:06:4d:09:78:0f:
f1:2e:64:95:55:f6:52:84:b6:d2:e7:63:91:ec:45:b8:5c:b3:
b7:82:b0:73:5a:11:ad:5f:60:62:8d:20:f9:ec:f3:b2:a1:e9:
c1:fa:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:35:53 2025 by rpki-client