Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier: BrlSuKYfZI3sjuwJ2ZzddAMGhGZaieuO4FPHhu4wq/Y=
Subject key identifier: BB:95:EC:56:1A:B2:E8:20:F4:F4:1E:DB:BB:87:65:87:93:C0:8E:64
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 019A1D635BA87094ABC3F5204A70200C660B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number: 030F
Signing time: Sat 25 Oct 2025 22:00:42 +0000
Manifest this update: Sat 25 Oct 2025 22:00:42 +0000
Manifest next update: Sun 26 Oct 2025 22:00:42 +0000
Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: p/df1PTSRg3OzHXjZAS65lv935pZVURTtt1O74lmy9w=)
2: 2mOIvyxqACEFmIkGDLPkH-bc67w.roa (hash: a5V4lxFeCQH7YtlBbiNtuF1rDDvq1OPE/o43ZTFdAYQ=)
3: BPcKYotNA4ZeZvm82W73v75zPQs.roa (hash: oHpWOGTj/PoKbHsHCYFs8uXPSnbHGEoV8KY7k9zJBk4=)
4: GkxGrjdz0A7AWmifnWDimQZWI38.roa (hash: tHXJR2KGAG4wHE8bdFOYoF9Jdtd+4jQD2aXhMHJzWK8=)
5: ief4j2bb-cAvwzzS1T0xB8OgxGk.roa (hash: cv2vWMrY2M65pVapU15+XFEE8tVsd4Na8PnjBxEQRuA=)
6: wkwsgzJc2eo9ng8QQ8kvMc3qjbc.roa (hash: +iuoTytPo6r5GmeijHeI4hmWR8iJmhnqPLAkE9k79sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:5b:a8:70:94:ab:c3:f5:20:4a:70:20:0c:66:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Oct 25 22:00:42 2025 GMT
Not After : Oct 26 22:00:42 2025 GMT
Subject: CN=bb95ec561ab2e820f4f41edbbb87658793c08e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:9b:33:aa:59:a8:ab:27:cd:95:27:77:5b:
be:fe:26:45:4c:2c:9b:c3:72:a0:e1:99:a8:a0:f0:
90:60:75:e5:b6:00:e5:db:56:69:9e:10:2d:be:18:
84:d9:ce:fc:1e:e6:ff:bc:af:8b:c7:0a:a6:cd:19:
85:e3:ba:06:cc:d9:35:c3:92:77:2c:1d:73:34:5d:
fc:33:d6:bf:49:85:18:07:d3:eb:3c:16:87:04:eb:
59:1a:53:4a:e3:34:49:2b:ec:44:11:a0:9c:83:7d:
ae:b1:10:0f:05:e2:18:0e:57:07:b3:cd:cb:e1:79:
8d:fb:82:39:f7:62:4b:7f:3f:eb:6a:8b:fe:0e:88:
3b:58:eb:e9:59:7b:67:a6:a9:fe:c8:a1:c7:1f:ab:
36:8b:4f:4a:88:4f:c4:01:e7:b6:17:3b:6f:17:8c:
0b:65:1b:8d:50:10:26:4e:14:95:b6:b1:0f:58:20:
37:21:0d:fe:4c:34:c7:0a:35:4e:d6:42:a5:9d:c9:
8f:7e:a6:19:bf:1a:39:a9:ec:ee:38:36:2b:0b:f9:
ec:61:80:13:6e:32:d6:c2:52:38:35:17:d0:df:45:
af:c7:36:f0:8f:4b:43:f8:23:38:d9:b7:e3:f4:ab:
7b:c4:dc:e2:6c:53:22:ec:2b:8e:df:47:3e:0a:96:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:EC:56:1A:B2:E8:20:F4:F4:1E:DB:BB:87:65:87:93:C0:8E:64
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:36:99:c1:53:ac:d8:17:97:75:27:5f:ac:6e:f3:5e:bb:4b:
93:c6:c0:39:16:9f:97:93:c1:19:45:02:6f:1a:1d:56:b7:06:
7b:fe:83:59:e3:d3:34:c1:9d:e1:88:fe:68:ef:8b:65:a8:02:
bf:6e:56:f3:9b:77:f3:e2:3c:b3:7d:0b:40:d8:d1:06:26:6b:
11:05:bb:6a:ff:7c:88:71:58:17:19:0b:1b:9d:53:2f:4f:71:
b9:cc:14:3b:bf:ab:ac:21:ef:5c:de:ad:10:bb:a9:64:93:93:
30:00:3a:b6:c5:06:38:dc:f5:c0:2b:57:62:49:9e:1e:ea:ff:
11:8e:e2:6b:74:2f:26:f9:6c:84:92:0a:e1:1a:a9:f4:72:62:
08:c3:c4:6c:29:e0:89:ef:f5:39:fc:6c:82:ae:f2:c8:f6:33:
23:53:ca:29:6e:d7:ee:ae:10:a9:65:df:00:94:e9:8e:cb:e4:
ba:8a:c6:a7:b5:14:f0:a8:10:45:11:34:d8:ea:28:4d:a3:b4:
3c:dc:ba:1b:8e:42:32:db:33:35:1c:7c:1d:83:05:97:e8:6f:
68:e4:fe:be:28:0d:03:3e:75:f2:e1:61:6a:17:e2:1c:b6:6b:
9e:8e:00:37:54:00:82:2a:59:9e:cf:89:af:c7:d3:f3:78:a1:
14:ba:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:17:27 2025 by rpki-client