
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
File: 0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json)
Hash identifier: WF19m0G0PdFeoiJJzlr0ise/YahAyqtZ1rhB/Sb1ujg=
Subject key identifier: 30:2F:DF:DA:D6:42:AA:C3:CE:93:62:4D:24:44:77:43:02:2F:32:58
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 019A1FF6352AE29504F325EC50AB4DB7619C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
Manifest number: 09C2
Signing time: Sun 26 Oct 2025 10:00:20 +0000
Manifest this update: Sun 26 Oct 2025 10:00:20 +0000
Manifest next update: Mon 27 Oct 2025 10:00:20 +0000
Files and hashes: 1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: nhV4pcLF2Wi0Mvrn9owr1QwJcUlyibR8r+t8gzKe90Q=)
2: 1-8dBe3weDEH5lmPUfaCTy1F_iQ0.roa (hash: Usc03D+6sIRxj8MO/R5pSlLN/4nGI6YHAGwKCty72xE=)
3: 8Jtz1k-aBFN_3eueNbWN2Oh4EPY.roa (hash: fkmGxni8pzpt7FS2NVHazJRzS5r259m4KHbWlWkAsNs=)
4: POa1_1lG2fZrcfZRxbGnmzL6mIU.roa (hash: hZbXwNqNEsVBnStQz74wqfWaYd+uX0JeS3LWv9uiIFs=)
5: XhmVOxeypIhl-8QtBoFXZmkyOfo.roa (hash: NGVstEUWv/DepTwZpuQa7X5iSrpsHNmeXxcUSdEmq9U=)
6: Y8x1Dc8lYBa9pr_hu1HUt6VfoiQ.roa (hash: tNZ2tMN+vQdGUpJ50iWyGDf4dzENZz5DtzgcHTVz9wQ=)
7: dOb6T3OXGQhPHEiptZe57ohMT40.roa (hash: GPGKsltxe4+qDNQ/6wiIDNbmlS41MFY6pNidlYOqIB8=)
8: hJHifVMBaH30EqpePenT1Sqap70.roa (hash: QomOS52IIn3hGg0bKejEi6GxR/26/6+mZUMxHEwlzCc=)
9: k1JgfKb3srL6aXDXnzvzd4pJb2w.roa (hash: +LhNHAlBDK0qBIHLLIuzyw+Dk5hZ7SHq+3e02Y/fFBg=)
10: p51-PJoT-E47Il5-C4i0wMvLMrQ.roa (hash: v6b35eBQ2NIYxUqWiW7LPB2L21OTBBy59B+EGu/7XOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:35:2a:e2:95:04:f3:25:ec:50:ab:4d:b7:61:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Oct 26 10:00:20 2025 GMT
Not After : Oct 27 10:00:20 2025 GMT
Subject: CN=302fdfdad642aac3ce93624d24447743022f3258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:80:9d:c3:91:6e:a0:f2:fe:44:ed:25:bb:
f3:12:dd:78:c3:aa:29:44:95:ea:c9:34:cd:5f:25:
ba:d6:34:86:ac:6d:a6:a5:54:64:15:52:ff:6a:83:
3d:ab:a0:f1:82:43:a1:db:51:ea:2a:fd:a6:64:ff:
5e:0e:35:4f:92:e6:f3:0d:5d:94:cd:48:52:9b:14:
ad:01:be:5f:3f:aa:a5:8f:8e:53:59:b2:25:46:54:
ec:65:23:cf:84:7f:21:e6:99:5f:9d:c1:6e:0d:8d:
9c:10:44:7a:ef:15:19:52:f9:a5:37:c2:3e:f7:cc:
45:e0:8a:da:18:03:c7:a1:35:59:62:10:44:5e:07:
52:2c:65:6d:cb:2a:18:06:87:c8:38:ca:0b:eb:97:
b6:eb:1b:6d:fd:da:37:18:c7:9f:08:0a:b4:c6:b7:
d7:83:5f:f6:26:0f:a5:26:31:62:c7:a9:06:1c:0a:
95:1b:26:3f:5c:ae:4a:6b:56:d7:c9:22:64:61:7c:
6e:a5:05:76:80:90:b2:b3:2c:d5:8f:6c:c9:cc:a8:
a0:e7:4b:6b:36:f4:75:9c:e5:94:34:3f:96:ec:d6:
cc:7b:a8:b7:92:12:60:71:ed:57:3c:46:72:3f:98:
f4:b3:8c:d8:50:12:1d:6e:a4:2f:db:fd:d2:d1:fa:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:DF:DA:D6:42:AA:C3:CE:93:62:4D:24:44:77:43:02:2F:32:58
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0a:c2:d0:c8:e8:38:ef:03:66:9d:30:88:a2:b3:7c:30:84:
9b:c9:15:09:27:ac:7f:ef:b6:71:c6:78:de:53:ed:55:ba:5f:
c6:38:92:e2:0e:a8:8d:65:0f:53:a4:86:da:8e:e4:bf:8d:e2:
ac:5d:83:ba:f7:64:6b:92:66:d9:70:df:8f:93:c8:73:f7:61:
05:8c:ab:c6:ce:1c:2e:c5:a6:f7:6e:6f:66:67:e0:20:16:0a:
fd:db:43:9e:59:86:e0:44:d3:98:5f:44:73:b3:ad:3f:da:10:
60:2a:a9:2d:d7:51:e3:f6:7f:64:b1:f1:09:a0:9a:a2:a4:83:
e2:cf:e4:08:1c:da:59:7c:64:33:98:8f:d7:69:28:54:b8:12:
e6:5c:f1:1b:a9:9e:f7:ae:d3:b7:eb:5a:3d:fc:1a:d2:b1:0a:
a1:cd:c0:6b:87:ca:d5:d0:0d:35:b6:77:9b:5b:3a:ba:fd:b9:
38:1a:4b:77:30:3b:33:71:7f:bc:f0:52:f3:0b:a3:0a:b3:90:
61:07:ae:d0:43:27:a6:c7:bc:ac:f7:0b:bc:30:2e:01:7b:54:
d9:cd:01:f5:3a:8f:0a:32:b2:a1:f8:65:e0:79:1f:22:4e:38:
43:2e:09:aa:8f:00:59:93:1b:37:7f:75:0c:49:bb:47:d1:c3:
6e:e1:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:37:53 2025 by rpki-client