
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json)
Hash identifier: RN1NSJ2bzjlIPT96A4k8izVsHkXZu4czW1z6EXyOWVQ=
Subject key identifier: 7A:C4:4C:F0:4F:9F:BB:D4:CE:34:6D:26:5E:51:DD:42:D3:9E:96:6A
Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Certificate serial: 019A236552AF9E714D1611E78B73CAE4CA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
Manifest number: 16CB
Signing time: Mon 27 Oct 2025 02:00:34 +0000
Manifest this update: Mon 27 Oct 2025 02:00:34 +0000
Manifest next update: Tue 28 Oct 2025 02:00:34 +0000
Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: vBcHgdWR/o+h2nQn2+y1UVADpnZg6Akic49ZuTOktVo=)
2: PRL7sgUPxAooAgpR2OCFKktRv4I.roa (hash: 7EnjkpMFrtIGkSxH/V71N/Yi8O1F+vC6f4Et13UAYFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:52:af:9e:71:4d:16:11:e7:8b:73:ca:e4:ca:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7
Validity
Not Before: Oct 27 02:00:34 2025 GMT
Not After : Oct 28 02:00:34 2025 GMT
Subject: CN=7ac44cf04f9fbbd4ce346d265e51dd42d39e966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:14:fd:1b:a1:df:af:17:3c:b3:aa:eb:9f:
33:62:a2:ce:83:85:7a:4f:c6:0c:71:04:c2:ce:23:
bf:ef:c4:43:08:fc:c7:90:4c:ff:af:66:0f:e6:94:
9f:0d:70:26:11:e1:09:b4:62:1e:10:47:89:17:70:
75:48:b1:4b:e7:de:ad:16:75:3d:00:42:4a:92:c3:
41:c4:4c:1a:b2:76:be:21:c3:cf:62:ba:82:dc:19:
de:99:f2:41:6f:60:9e:f2:ff:44:3e:a2:24:fa:9e:
04:b6:e3:13:8e:36:a8:59:5d:50:d9:56:08:9f:50:
16:44:82:8e:dd:bd:43:5c:51:0e:9f:91:61:4d:97:
3d:26:67:30:8b:5c:22:cf:46:4d:43:8f:83:ed:6a:
cc:f2:26:05:4b:e7:8e:67:2c:fe:fc:3a:a8:54:e0:
51:3b:af:11:bb:f6:c7:ac:59:56:c7:a9:47:b8:1d:
3e:ea:45:62:09:58:23:2b:ae:47:03:09:4a:e7:0a:
32:9c:d3:c7:b5:e9:8b:08:3c:72:6a:7a:11:07:56:
15:39:52:94:0c:1c:85:57:5e:53:29:9a:99:be:03:
c2:f8:4b:53:9b:7d:e3:3a:c1:f4:72:16:85:7b:73:
8e:a2:73:ad:e7:05:64:d5:51:a6:5b:c8:bc:b5:75:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C4:4C:F0:4F:9F:BB:D4:CE:34:6D:26:5E:51:DD:42:D3:9E:96:6A
X509v3 Authority Key Identifier:
keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b1:90:7d:c2:37:72:d4:e7:5d:86:8e:7b:97:25:f9:ae:31:
15:84:8f:51:a1:09:62:2c:49:96:18:20:79:48:90:3e:ad:5b:
72:1c:f5:97:45:c6:86:24:16:c0:93:c8:4f:35:23:eb:44:be:
f9:27:84:e0:6c:c3:6e:65:3a:97:c2:e6:b4:a9:37:0b:a5:af:
0c:0a:6d:e0:69:c6:ce:07:85:79:c6:8e:ed:fe:37:97:67:f3:
9a:a5:76:ce:c1:bd:37:16:f0:41:30:13:63:70:c2:6f:bd:e8:
eb:9f:82:b7:34:a2:ee:9b:05:03:dd:16:78:a2:42:4b:af:9e:
9e:c5:1e:de:d2:59:ed:d9:eb:a8:fe:eb:8e:dc:3b:86:d0:e8:
37:21:a8:b0:16:fd:b9:88:5a:c2:bf:b9:0b:3c:ad:12:55:32:
df:c4:03:76:7a:6f:1e:fb:1e:27:d3:30:b9:f2:3e:7d:97:9d:
71:b4:c0:94:26:c7:f3:d7:46:18:68:0d:a0:b9:b7:d2:78:92:
36:56:c4:69:0a:ac:c8:f5:23:1a:91:ad:9d:dd:32:9a:aa:f4:
6d:5e:28:db:05:42:0e:fd:9f:1a:f8:4b:ed:37:ce:07:12:55:
3e:fc:d2:be:3f:1f:05:b6:c4:39:1b:8a:de:36:90:d7:9e:a9:
61:d0:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:19:00 2025 by rpki-client