Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json)
Hash identifier: NYlvsT5rgju0jTdPSilNWUo88iAncKYNZKQPJ5bqo6E=
Subject key identifier: AB:A6:42:30:BA:D5:67:76:13:D3:F9:7C:0B:7E:AC:7B:C4:D2:81:CB
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 019A23D310F4B1411FA64A03E430D9604C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
Manifest number: 12E0
Signing time: Mon 27 Oct 2025 04:00:26 +0000
Manifest this update: Mon 27 Oct 2025 04:00:26 +0000
Manifest next update: Tue 28 Oct 2025 04:00:26 +0000
Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: qA8SyC9BqH7yVY7WEuh6TDSb336nfQyXTrA6fyd+qW8=)
2: f3ZAgsX9I3hAxsDfGccuc4frEIc.roa (hash: 4M3tVBuY11wpuTelZy7jmaALqx1HzWsWmiuVNlUHSTM=)
3: m2ywJd2kQJYTADIv61wmJdARYH0.roa (hash: ZTRMQxv3ksCR8s54WLYLbJtFtPpGkhVtVd7EKUXjlqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:10:f4:b1:41:1f:a6:4a:03:e4:30:d9:60:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Oct 27 04:00:26 2025 GMT
Not After : Oct 28 04:00:26 2025 GMT
Subject: CN=aba64230bad5677613d3f97c0b7eac7bc4d281cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:14:ce:72:a8:1d:1d:d8:60:7f:3f:5d:23:
7b:2d:22:8c:23:b5:8e:31:88:6c:20:c7:ed:ec:ab:
a8:5c:ea:ef:fd:b7:9b:8b:95:39:35:f8:3f:cd:36:
54:22:8c:7c:fb:3a:15:02:0b:dd:ce:cd:80:26:09:
0c:82:6d:25:98:b8:a3:cc:cc:4b:df:ef:71:fb:ad:
00:cf:b3:63:d1:b4:b6:11:11:e1:ed:a2:e2:89:6d:
dd:2c:69:df:c9:02:7d:c4:77:db:cb:46:70:96:bc:
94:45:f1:88:0d:87:e1:a5:34:05:a5:49:2a:cb:a5:
31:4a:d0:57:0a:34:45:f1:be:83:a9:12:85:2e:d2:
2a:4f:60:96:1b:1c:fd:e3:2b:77:d6:a7:87:6b:fa:
d7:3e:da:75:84:e3:54:d5:c3:9c:7e:24:e1:f5:92:
3a:2c:b7:df:f4:26:b8:3b:55:81:08:e2:2b:42:6c:
1f:4f:9f:ca:38:04:d4:65:ff:ea:4e:9d:d6:bd:d1:
52:80:f2:da:26:50:dc:b5:89:f4:8d:c7:4f:63:9f:
db:36:b4:f5:40:73:4b:a7:8c:8c:3e:dd:90:45:dc:
fa:78:83:ec:66:82:66:f1:2f:aa:23:65:1b:1c:16:
a0:60:32:71:c5:7a:f2:14:3e:f7:16:36:4f:97:7e:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:42:30:BA:D5:67:76:13:D3:F9:7C:0B:7E:AC:7B:C4:D2:81:CB
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:17:73:e6:10:7e:c6:a5:85:e9:7a:f3:71:f6:dd:a7:9b:83:
d7:34:28:85:07:b8:14:df:83:90:04:79:97:e4:46:77:1a:e2:
04:bb:c3:55:4e:db:b2:47:66:d5:fa:33:69:ef:83:08:90:79:
ff:34:31:03:52:9a:cb:17:59:1a:0c:43:ca:f0:a8:31:ac:53:
8b:1e:f2:f9:9d:93:34:8d:f0:ad:2b:ba:21:26:3e:fc:09:82:
df:f4:11:46:cc:69:7e:51:83:0f:f1:bb:bf:45:e2:c7:42:c7:
2c:c9:da:0c:3a:6a:97:b9:c4:0b:ab:06:28:9f:a4:21:76:b6:
26:62:e0:a4:97:4a:3f:bb:c0:ef:33:81:f8:18:22:04:e2:50:
2c:1f:e9:56:98:83:63:14:c5:4c:91:4c:be:c4:61:74:69:63:
a6:33:65:2f:a3:f0:b1:aa:a9:71:a5:83:fc:c2:d6:30:10:6a:
f3:0a:94:2c:b4:b4:f4:63:4f:85:9f:ba:9b:b0:e3:cf:29:1e:
8c:4d:7a:3a:13:2c:8b:10:8c:6f:eb:63:3a:e3:66:f1:cd:1e:
cb:77:b3:ab:ca:18:bb:40:54:42:e5:81:ab:48:61:ca:25:e6:
5d:2e:51:72:f4:cc:c0:f4:d3:02:01:b6:48:0a:68:2b:cd:ee:
59:54:83:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:01:47 2025 by rpki-client