Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier: +oCE6rn1mKippIrR0hlm1nLlHWg7SctcozDOa9uPWy8=
Subject key identifier: 19:CF:F3:71:75:5E:BA:51:C5:A3:0C:25:E0:0B:03:DC:54:40:CD:D7
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 0199315AA1A27DAB1F56FECD8B04A5CB2AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number: 0FBA
Signing time: Wed 10 Sep 2025 02:00:47 +0000
Manifest this update: Wed 10 Sep 2025 02:00:47 +0000
Manifest next update: Thu 11 Sep 2025 02:00:47 +0000
Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: PLbedVMrmlxbUcX3GQLdw2LJIwaRejptJ1W9Rvb+4xE=)
2: gbK6DHiZq7AYAmJhGhegTd1JJGM.roa (hash: 3ZhInyD7W5kRDFPCm7P1BZAvCR0mhPTykPk/poLoSao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:a1:a2:7d:ab:1f:56:fe:cd:8b:04:a5:cb:2a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Sep 10 02:00:47 2025 GMT
Not After : Sep 11 02:00:47 2025 GMT
Subject: CN=19cff371755eba51c5a30c25e00b03dc5440cdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:9a:4f:bd:67:5d:e9:79:2a:6d:d0:a8:e2:
04:44:e7:be:09:7b:67:93:aa:3d:1c:ca:7f:22:35:
31:5b:0e:08:1c:d8:80:78:2b:68:cb:aa:19:4a:81:
77:30:b6:81:32:cb:c3:f1:1c:9f:2c:22:ce:9e:26:
ae:af:ab:2e:21:5c:38:f0:96:3c:7f:a3:42:06:76:
df:fa:73:5e:69:76:fc:92:79:21:39:a7:d7:3e:17:
aa:92:1c:d0:35:74:ed:93:cb:07:ef:94:a0:96:43:
94:43:6e:3d:f9:36:ee:45:be:94:7b:5f:20:a2:6c:
f8:4e:93:ba:02:f4:45:89:1d:f0:8c:30:00:77:3c:
d7:da:79:62:48:9b:d1:f3:10:84:b3:bb:ff:48:ae:
99:55:77:2b:8c:c6:89:77:8a:56:75:df:71:e7:5c:
c1:6c:bb:1a:ff:b4:cf:05:3c:37:22:54:72:0e:d4:
df:ac:e1:4f:b4:45:85:49:35:87:e6:b0:4a:bf:9c:
c7:3c:52:d5:3d:0d:15:9a:3d:34:b5:4e:2e:55:4d:
f0:ea:7c:25:8b:65:d0:76:05:79:01:51:f7:bd:8c:
b6:03:ee:b5:8c:f7:4e:1c:df:12:3a:ef:c5:8e:4f:
33:93:fb:14:69:f2:a7:1f:b0:6d:a0:b1:f2:53:41:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CF:F3:71:75:5E:BA:51:C5:A3:0C:25:E0:0B:03:DC:54:40:CD:D7
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:20:56:3f:24:96:b3:3c:5f:78:94:2b:bc:97:9d:d0:42:39:
87:7f:10:99:2c:18:2a:bd:83:6c:8f:8b:7b:92:b9:28:81:2c:
f6:1d:5b:5a:25:cd:3d:c0:bf:fe:ee:24:18:a5:e2:ff:19:79:
06:23:3f:41:f3:88:8a:96:32:a7:37:8b:3c:0f:64:48:60:90:
e7:69:4c:6b:3d:03:da:97:ac:47:b6:24:3b:0c:a2:74:05:e8:
ee:f1:91:82:7e:79:e9:36:2b:b7:03:79:11:26:4b:f7:71:ce:
d1:42:8b:e5:51:dd:e2:06:7a:dd:0c:af:c7:1a:67:71:49:27:
31:f3:e7:e6:89:54:7e:17:00:3c:e1:a5:dd:e1:a7:b4:93:f0:
03:81:96:de:e9:33:2d:b1:18:ec:d3:7f:aa:ca:fe:b7:79:d8:
ae:33:62:e9:47:9e:c1:62:1f:33:f3:b3:29:c8:ef:3c:a7:4b:
4d:54:18:58:fe:3b:06:2b:ad:30:34:98:86:90:a1:e3:bf:cf:
06:a9:27:cc:cd:fb:e7:7c:a3:bd:72:ad:aa:64:ff:e1:a1:0f:
e4:bc:90:de:7a:06:d3:f3:2f:4d:b8:b3:47:d5:a4:da:3c:89:
94:f1:ec:38:51:19:4c:6e:5f:50:65:90:95:39:5f:ff:0c:bb:
81:92:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:02:22 2025 by rpki-client