Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier: nfuRcc2e1rbR2TOaH0VShH7kmN6+0tUqqNfqBiMfHNI=
Subject key identifier: FE:75:A6:10:7A:C2:9A:2F:60:4F:74:C3:B0:BC:44:D0:15:E5:F5:24
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019A06A40BBAF59DC74B5C07460BAE72BC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number: 1701
Signing time: Tue 21 Oct 2025 12:00:05 +0000
Manifest this update: Tue 21 Oct 2025 12:00:05 +0000
Manifest next update: Wed 22 Oct 2025 12:00:05 +0000
Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: uMNJ8sHMHDCSYtVBCw++kpgZ40mMjGruPjM97CmKUQE=)
2: IbNwOiJ1le6Y53Nfy_nDXLnu_e8.roa (hash: WT+RMze0r66BHerB43Jku9h5V4DbQETjQUbfL1+hc8o=)
3: PE9TZdJ8-Lln6kf9d9axXJAbp-c.roa (hash: L+Px9nqboU0pthFP3MQiGwoS0A274PGNuMWfIopTQcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:0b:ba:f5:9d:c7:4b:5c:07:46:0b:ae:72:bc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Oct 21 12:00:05 2025 GMT
Not After : Oct 22 12:00:05 2025 GMT
Subject: CN=fe75a6107ac29a2f604f74c3b0bc44d015e5f524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:c0:8a:b0:68:48:17:8f:a8:26:0f:8b:0c:
44:28:5f:21:0e:09:4f:99:11:a3:99:1a:5e:8e:00:
07:c0:c8:36:37:07:bb:45:f7:1e:e1:8f:84:fc:ea:
e2:0f:a4:87:f0:db:3b:0e:9e:c8:04:87:03:ff:f1:
84:c1:35:34:a7:26:bb:0a:cd:4b:09:7f:c9:52:5b:
ee:26:af:76:de:48:51:c6:c2:e8:f3:a5:0c:db:ab:
a7:de:60:ff:39:88:b0:b3:ff:20:9d:12:22:1b:7f:
19:29:01:a4:e6:0f:63:24:8b:bb:c9:c3:5a:f6:9b:
a3:b8:ea:d8:ae:85:58:51:72:e2:e1:a1:21:e4:16:
42:e8:27:33:ba:13:84:60:a2:2f:b5:33:cd:ec:3c:
74:b6:db:2e:f0:8c:61:4f:20:f9:bf:67:62:3b:03:
99:78:d3:03:88:e4:51:ac:ed:37:47:08:26:2f:e6:
7d:4d:bc:ce:95:a6:0f:37:ff:d4:55:fa:d9:72:8d:
57:92:26:23:a5:5a:c9:9a:a6:6e:60:64:9e:97:36:
24:67:a7:ff:7f:54:0c:f0:0a:27:e1:20:1c:82:5f:
36:70:ca:f4:56:22:2f:c8:53:7f:61:c8:67:13:a9:
02:45:ea:c5:07:41:1f:f6:7e:d2:a7:de:b0:35:99:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:75:A6:10:7A:C2:9A:2F:60:4F:74:C3:B0:BC:44:D0:15:E5:F5:24
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:71:f1:67:c0:f3:6d:af:a0:7a:f2:09:4b:65:af:d4:76:56:
4e:19:27:83:ab:20:5c:a1:3d:2d:c3:4a:a1:c5:39:e9:e7:a8:
1e:4c:cc:a9:6b:32:51:a3:24:0a:99:46:fd:13:cd:c3:21:47:
72:29:5b:d5:34:be:cf:6f:1f:2e:ac:7c:e9:5c:0c:ca:7f:09:
5a:ee:b4:d5:e5:e8:3b:ac:c0:d7:59:ae:40:1f:45:7c:b6:a7:
e4:e1:89:8d:57:e3:36:f7:5c:ea:9b:c2:d4:05:30:a6:b5:8f:
72:b3:35:64:40:da:09:d7:82:c3:89:fc:b1:93:86:82:70:ab:
25:5b:7d:ef:b0:d4:f3:54:43:61:bb:d7:ee:d6:71:5b:4e:69:
3d:ba:d3:16:4c:1f:c4:ab:60:89:9a:81:6e:8c:25:f1:ff:f9:
12:35:7c:61:e0:fb:3e:a4:5f:13:54:90:b6:2c:ac:ef:9e:a2:
9d:b6:d7:9d:2f:32:49:c2:fe:d2:ff:be:2b:e8:b0:45:c9:3c:
82:1a:65:8c:19:8f:19:c2:43:fe:33:b6:9f:3c:4b:05:d2:cf:
e4:2c:f5:ef:72:0d:b9:54:54:65:e0:f7:49:06:78:f3:ba:81:
7d:50:7d:f3:9a:25:a2:e5:cd:69:c5:ca:bc:1b:85:25:bb:3c:
fb:d6:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:13:04 2025 by rpki-client