Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: thGVBJfPvLkNDx34BrxBGzFclQzEZ11lJlhF6gvIPvc=
Subject key identifier: 24:72:C6:76:C2:6F:F1:E4:AE:05:38:E4:51:C1:E4:14:3B:35:ED:E4
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019A2778925F387C695E1864462C74FC0759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 11E4
Signing time: Mon 27 Oct 2025 21:00:04 +0000
Manifest this update: Mon 27 Oct 2025 21:00:04 +0000
Manifest next update: Tue 28 Oct 2025 21:00:04 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: 8haAWqsu7d3Q59/c2f8Mb0kSrNteQ7q0ayqnJygwqXc=)
2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:92:5f:38:7c:69:5e:18:64:46:2c:74:fc:07:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Oct 27 21:00:04 2025 GMT
Not After : Oct 28 21:00:04 2025 GMT
Subject: CN=2472c676c26ff1e4ae0538e451c1e4143b35ede4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:1e:2a:6d:27:da:9c:16:49:40:96:13:aa:
22:2c:d5:ad:02:84:1b:66:6f:8a:37:03:93:1c:4e:
8a:8a:f0:44:92:88:d8:7b:6d:dd:3f:e5:95:0b:ea:
81:c2:b0:d5:b0:22:71:58:54:82:4d:e4:0f:56:28:
df:59:64:15:e8:d1:24:32:8e:ca:4d:e0:81:fe:2f:
69:de:dc:b5:e2:3a:04:fe:92:f4:f0:12:dc:71:94:
39:c2:2a:c1:73:6a:44:e9:36:fb:f9:e3:87:46:a6:
79:82:08:7d:03:af:b7:c0:87:90:ef:78:d1:1c:c8:
bc:66:e8:65:8b:c9:a7:77:e5:8b:7a:04:27:a7:e5:
f3:c4:e1:e0:d8:2b:c3:15:25:c6:b9:62:0a:13:6b:
12:e9:e2:b8:8a:85:c2:19:64:b1:7c:c7:5e:0f:8e:
82:35:e7:9c:11:3e:e6:74:fc:24:3e:65:4f:38:7d:
3d:55:1e:be:c8:b1:16:10:d7:8f:c5:ae:27:79:12:
76:93:0b:d3:4c:8a:c5:b6:ba:2d:88:27:25:3e:47:
5b:aa:87:5e:bf:ae:e9:f8:50:23:38:fb:ca:54:e0:
7a:9b:9d:bf:00:ae:3e:56:aa:24:be:99:9c:b0:0a:
6a:ae:32:1c:20:c2:e6:de:82:ee:f7:a8:c5:99:68:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:72:C6:76:C2:6F:F1:E4:AE:05:38:E4:51:C1:E4:14:3B:35:ED:E4
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:d9:ba:fc:9c:90:f2:1d:8b:7d:b3:34:8e:49:8d:c3:02:
e9:8e:59:88:c5:21:e9:39:c7:48:6b:9f:9e:b7:6d:9e:ca:83:
4d:9a:20:5f:40:74:49:c7:b4:ae:55:7a:c2:80:ab:b7:00:1f:
e9:5b:d5:e9:5b:85:fc:d3:ed:e4:20:49:08:43:f7:08:62:13:
7a:86:9d:7a:0f:a0:b9:7e:1b:65:60:f1:d6:32:7c:da:bf:c1:
3c:60:e9:86:a6:46:0f:ce:64:2c:47:32:49:e6:a2:cf:3d:4f:
ca:24:a8:ab:fc:44:52:f4:42:c2:8c:79:0a:8d:62:c6:89:a4:
d8:d2:1e:d2:3d:92:e4:48:be:8e:2e:66:ca:21:c3:42:34:8b:
02:16:bd:4b:ac:80:2c:3b:63:d1:10:30:f0:06:f1:25:9a:aa:
f1:e3:b9:ab:65:dd:af:c7:23:32:1a:74:b7:fa:9d:df:0a:28:
83:77:bc:40:96:c5:63:ce:90:03:8a:d5:f4:dc:a3:4d:bb:4d:
f0:0e:88:a1:93:cc:6a:b4:7f:9d:35:4c:91:c7:ce:e3:2d:0f:
ea:61:12:9f:de:0e:db:c6:90:82:97:bd:8b:a2:83:5f:10:81:
07:4a:84:a7:83:5c:35:e4:1e:13:2f:47:53:a3:a0:8a:24:99:
58:00:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:18:48 2025 by rpki-client