
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: cNH8AgF84i3GaZen3zUbTmpvqoBusCOK5u+BpgMd3KU=
Subject key identifier: 1B:C4:FB:A9:26:B9:BE:0E:F0:25:CA:52:36:9E:FC:83:67:ED:6A:0D
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 019A18E218110B19AB91BBD9855D0104250A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 16EC
Signing time: Sat 25 Oct 2025 01:01:01 +0000
Manifest this update: Sat 25 Oct 2025 01:01:01 +0000
Manifest next update: Sun 26 Oct 2025 01:01:01 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: 52rvaJ9je6+4A9AQakExX7QV3ri36oYs1zU4/UBy3XU=)
2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:18:11:0b:19:ab:91:bb:d9:85:5d:01:04:25:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Oct 25 01:01:01 2025 GMT
Not After : Oct 26 01:01:01 2025 GMT
Subject: CN=1bc4fba926b9be0ef025ca52369efc8367ed6a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:f1:41:a5:d6:af:56:78:87:c2:19:c1:3b:
61:6a:82:32:58:69:ac:21:c9:ef:33:1f:92:88:17:
d5:4b:59:6a:33:c4:d7:0d:a7:f8:1f:ec:fd:ab:11:
07:71:e0:7b:3e:89:a8:c4:42:85:e1:4b:82:09:8a:
a6:8c:b2:d1:dd:a3:f8:54:76:64:9d:25:06:c5:8a:
13:72:6d:b3:05:02:3b:10:15:5c:be:ef:65:90:0f:
14:4c:4a:57:6a:c3:51:fd:30:d0:d6:40:47:22:2c:
30:c7:a3:b6:9a:06:e8:ae:c1:7e:0d:97:20:fe:fe:
ae:64:bc:80:10:a8:07:13:d1:80:21:e2:56:c0:c7:
d9:c2:49:75:71:b0:0f:5e:2a:45:c7:6a:c5:a0:41:
72:8a:b8:6f:b2:ec:52:3e:ce:f8:68:f9:0d:4a:0f:
5f:c4:c0:9b:ab:43:95:6c:8d:ac:b6:00:50:b9:6e:
de:3f:8e:3e:d2:40:0b:4d:79:19:9e:c3:2a:74:0c:
f8:27:fc:cb:97:2f:18:2b:2e:d0:50:bf:d5:18:18:
87:14:34:75:5d:08:94:71:6d:ed:a6:1b:af:d3:1f:
c1:68:71:65:05:66:f4:0b:26:4f:96:07:00:c0:98:
e0:56:1c:ea:e8:8d:55:ce:49:b2:09:66:bc:eb:58:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C4:FB:A9:26:B9:BE:0E:F0:25:CA:52:36:9E:FC:83:67:ED:6A:0D
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:70:69:9d:e5:ad:f4:67:e8:0d:2e:30:d1:93:43:20:a3:8c:
22:c7:e3:e2:86:7c:c7:0f:c0:72:ae:ae:e6:33:c2:af:ac:7c:
fd:a3:e9:8a:76:e3:ef:08:4f:08:fa:57:01:c9:6c:ec:b7:8d:
6a:90:d3:88:1b:99:6e:4b:95:d2:44:30:db:4b:95:5e:34:26:
a0:30:b1:44:5e:9a:c9:9f:ad:3e:3c:95:bd:9c:53:f0:0c:2d:
9a:8c:6b:7b:7c:a8:59:72:51:89:89:de:5c:7d:f1:32:19:cd:
56:af:10:bc:3c:b4:c5:49:65:22:6c:35:b3:65:12:ca:c4:45:
d9:b7:e2:bd:0e:4b:5b:0a:c8:7c:00:22:28:a1:71:6d:98:6e:
07:4b:a5:61:65:77:9b:44:1f:80:ec:75:17:db:10:79:0f:c7:
9e:34:d9:a9:d2:4a:34:9b:0f:bc:7c:fd:6a:cf:c3:18:c7:f6:
1c:41:d3:e2:1d:57:73:3f:dc:56:3a:ed:e3:eb:da:e3:d0:5b:
4c:05:9d:63:7f:25:f2:05:90:6e:48:2c:0d:3f:b1:81:d6:98:
85:f5:51:22:d9:35:8b:27:65:09:28:91:08:22:fc:ef:62:f8:
50:f2:9d:3b:0e:8b:a0:17:69:b6:0f:53:71:f2:65:f3:bb:97:
12:0a:5b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:41:42 2025 by rpki-client