Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: sJaUDer9Hrj/kIaVsMGm1NaD7mfddPmg0zWx/yGx7Fo=
Subject key identifier: 96:93:33:9A:26:36:F4:56:A0:D5:8F:7D:F6:7C:53:C9:2C:BA:7B:E1
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019A0A4AB1C17A7B682ED8155B50D20EF7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0A42
Signing time: Wed 22 Oct 2025 05:00:58 +0000
Manifest this update: Wed 22 Oct 2025 05:00:58 +0000
Manifest next update: Thu 23 Oct 2025 05:00:58 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: vZbu2TUIm2c9q9wjVsloNOlwnxS2Ix1ucLlqHqAp6OI=)
2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:b1:c1:7a:7b:68:2e:d8:15:5b:50:d2:0e:f7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Oct 22 05:00:58 2025 GMT
Not After : Oct 23 05:00:58 2025 GMT
Subject: CN=9693339a2636f456a0d58f7df67c53c92cba7be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:c6:b7:5b:60:e7:b3:02:4f:2e:5c:c8:fe:
18:77:f7:53:0b:2c:62:7e:c7:48:92:b3:2f:fd:d7:
f2:6d:89:e7:31:11:f3:87:ab:a3:66:68:5f:e9:40:
db:51:6d:cb:ca:0c:5f:2d:a0:3f:f2:f4:3f:03:a0:
83:3a:3e:1b:1a:ca:ce:28:99:5e:7a:e3:5c:12:3d:
37:91:f6:b3:04:11:6a:0e:10:5d:40:67:68:47:96:
58:78:e1:4c:ef:49:f1:72:9f:fd:72:3f:83:e1:a3:
e3:da:30:65:76:47:de:78:2c:6a:d0:40:2b:e7:0b:
ea:9e:a0:a7:13:92:07:1b:56:55:76:ac:33:7b:57:
be:6f:58:08:ef:dd:ce:2e:ff:c7:53:9c:31:3e:18:
ae:69:8e:64:6c:c3:eb:ec:d2:db:a5:6f:01:5a:61:
25:77:c1:e5:95:3f:c7:72:b5:2c:89:89:be:1f:f8:
5d:e9:94:34:78:00:ec:70:bb:16:cd:30:e2:c4:a0:
6b:bc:6b:d8:78:45:88:46:6d:43:75:c0:34:e3:4d:
fe:47:d4:a3:70:1e:ed:ea:3c:9e:43:47:20:b1:47:
ce:e6:da:4b:66:3a:dc:60:cd:ac:5c:a0:51:15:29:
49:26:6c:46:6f:5a:da:8c:3e:f2:7a:5b:dc:ab:1f:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:33:9A:26:36:F4:56:A0:D5:8F:7D:F6:7C:53:C9:2C:BA:7B:E1
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e7:3c:34:bc:5f:b2:02:4b:de:3f:84:77:93:d1:d5:a5:b0:
14:6e:d3:af:4b:ad:8c:2c:ee:73:1e:10:01:11:21:73:79:8a:
dc:a6:c1:e5:5b:6b:ed:69:ab:14:f7:be:3b:e0:47:47:01:6d:
58:93:d8:b7:28:ad:48:f0:c9:2b:f2:d0:84:cf:27:fa:98:cb:
92:4f:14:c8:85:03:9e:30:08:32:22:38:f3:20:dd:f7:9f:b5:
85:ab:7b:a7:6d:d8:65:ec:9d:30:bf:e7:21:45:05:12:12:b8:
f5:b5:24:0f:bd:1a:1d:38:45:6a:cc:d4:99:c9:7a:a2:c9:67:
1c:da:81:07:8e:bc:0b:14:02:ce:89:f4:ab:c6:6a:50:cf:f1:
ec:16:49:41:59:84:86:11:4d:c2:d0:3e:49:9b:a8:74:c8:f0:
4e:b2:19:19:17:33:2c:56:ac:79:fa:dd:32:b9:33:f3:c5:b3:
b4:86:c5:59:ae:b0:44:3a:81:08:32:db:92:2d:7f:80:a7:45:
c5:b6:d9:ca:7e:af:7f:80:29:5d:a5:ab:60:79:5e:dd:dc:a8:
30:02:5d:59:e1:e9:70:3a:8f:a6:46:6f:a5:78:b3:8e:20:53:
ea:5b:0c:4e:6a:28:5e:21:ff:2a:44:84:48:b0:21:71:d3:f7:
6b:46:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:07:05 2025 by rpki-client