Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
File: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft (raw, json)
Hash identifier: LWpc4fP8ua8xjJeV6AN6+wQ5jU+IRXpYxNEzNUeTkUI=
Subject key identifier: 29:2F:09:23:61:DF:E4:61:F9:17:EF:2A:5E:9C:DF:A4:EC:05:13:71
Authority key identifier: D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
Certificate issuer: /CN=d276c41a2176254f236d23d391fd56090619670d
Certificate serial: 019A21ADCCEB684BE15A5CEB9E0B159B9777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
Manifest number: 01F3
Signing time: Sun 26 Oct 2025 18:00:29 +0000
Manifest this update: Sun 26 Oct 2025 18:00:29 +0000
Manifest next update: Mon 27 Oct 2025 18:00:29 +0000
Files and hashes: 1: 0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl (hash: MTcYJo0zDrrBf1js2UvPKfcwNrPHUueCIboVqsT+8Cw=)
2: zLfUqXqKYrDSmOI3zuAuH7VW9AQ.roa (hash: ooYWSL91Gfinkq+JOzjVpKfIwzWfTooJXNIHzh0/MJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:cc:eb:68:4b:e1:5a:5c:eb:9e:0b:15:9b:97:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d276c41a2176254f236d23d391fd56090619670d
Validity
Not Before: Oct 26 18:00:29 2025 GMT
Not After : Oct 27 18:00:29 2025 GMT
Subject: CN=292f092361dfe461f917ef2a5e9cdfa4ec051371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:1b:e5:23:0a:3e:2e:3e:87:00:fe:8f:f0:
c7:54:d8:34:e3:57:b3:64:f2:97:f9:81:3f:36:9d:
15:f3:ac:42:04:86:02:cf:25:29:88:2c:82:88:de:
b1:cd:52:d1:71:8f:ee:7c:fa:57:5d:f7:59:71:0f:
a0:7c:61:71:55:0c:e3:93:7d:d0:46:37:5e:e3:44:
bd:00:ec:e9:9f:df:3c:91:67:fa:c7:f2:da:85:ff:
27:b2:12:4e:9e:b8:95:2e:4f:7a:ba:8a:08:c3:cf:
0b:0f:22:21:1e:1f:00:b9:7f:98:66:f6:0a:a6:ab:
2e:c2:16:b3:20:37:31:f4:9b:3f:71:10:dc:f2:9d:
fe:1c:09:0c:c5:14:e4:3c:ee:83:b6:bd:1a:23:b9:
9b:46:82:07:03:7c:52:8d:1c:2d:25:cc:34:81:fd:
66:05:27:d4:56:eb:13:d7:fb:a2:e8:c6:f6:83:99:
3a:c7:19:10:63:1e:5e:23:39:48:61:9e:88:6f:be:
8d:cd:e2:24:bb:06:c4:40:0e:71:b2:84:e1:38:04:
68:f7:34:b3:a3:78:b1:3d:42:aa:d2:d7:59:10:b9:
92:84:15:2b:ca:62:f6:5e:04:5a:25:71:45:66:08:
85:e4:5e:f0:11:93:4c:bd:f5:d3:68:ed:69:55:37:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2F:09:23:61:DF:E4:61:F9:17:EF:2A:5E:9C:DF:A4:EC:05:13:71
X509v3 Authority Key Identifier:
keyid:D2:76:C4:1A:21:76:25:4F:23:6D:23:D3:91:FD:56:09:06:19:67:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nbEGiF2JU8jbSPTkf1WCQYZZw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53c3e2-d335-4a82-a790-0d6bcd0148bf/1/0nbEGiF2JU8jbSPTkf1WCQYZZw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5b:08:06:a7:54:74:28:4d:00:57:1f:4e:8d:4c:cd:fc:82:
da:3a:fb:c8:8d:13:59:57:91:67:9a:f5:a9:19:7e:75:ca:15:
24:1a:25:7a:a8:f6:f4:9e:09:71:6f:15:54:19:60:ae:22:bf:
3f:ed:75:62:07:47:39:61:c8:82:5f:eb:fd:c3:14:40:8f:a5:
99:2b:de:3c:55:76:c3:a3:e8:d7:ba:e2:e1:f3:e9:26:7a:6d:
a4:50:fe:7c:87:24:0e:97:b4:2d:11:0b:0b:d2:cb:b7:41:0c:
83:d7:73:a4:41:2c:c4:91:d1:1f:0c:e7:12:76:29:6f:f9:54:
90:83:9d:c2:76:9b:00:5c:42:6f:f4:f4:47:4a:47:00:da:1f:
43:c0:30:ba:49:40:9e:d4:25:ed:06:57:88:9d:d6:66:d1:00:
49:d9:dc:95:fa:30:d3:3e:30:2d:9b:74:81:b1:01:bf:9b:56:
b7:d6:4a:9e:61:76:59:0d:da:a0:24:0b:1c:5c:44:65:b8:dc:
1b:22:13:17:a1:36:8d:00:f0:c9:40:ae:a4:05:63:1d:65:ff:
55:fc:95:a9:88:a9:c4:b7:0c:97:24:47:93:8e:c8:06:e7:2d:
2d:03:bb:6e:60:34:fc:0b:78:6b:69:a0:6a:77:76:6f:b3:a4:
ec:33:71:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:49:53 2025 by rpki-client