Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier: Z/rr2WtLhQ/OBS1N/lgsbVOCZsa8iXq0FZBr1/l9iLE=
Subject key identifier: 58:E2:E6:77:98:D6:65:E3:B2:C4:70:A8:A0:FF:A1:69:80:49:20:97
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 019A2F32ABBF11D7BBFB7E00772FC6FADE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number: 0E78
Signing time: Wed 29 Oct 2025 09:00:41 +0000
Manifest this update: Wed 29 Oct 2025 09:00:41 +0000
Manifest next update: Thu 30 Oct 2025 09:00:41 +0000
Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: xnm9bRpxKpqEdbGrjblmy3mYID8TUxszfjv6I2tILRY=)
2: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (hash: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:ab:bf:11:d7:bb:fb:7e:00:77:2f:c6:fa:de:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Oct 29 09:00:41 2025 GMT
Not After : Oct 30 09:00:41 2025 GMT
Subject: CN=58e2e67798d665e3b2c470a8a0ffa16980492097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:9e:79:7f:0d:e5:31:3c:4f:da:33:40:81:
9f:6c:7c:ee:f1:fe:a2:c3:e1:64:a6:6d:7e:cf:0e:
75:8a:f7:af:55:da:82:dc:93:f6:06:f3:05:46:24:
35:4f:63:c2:09:23:ad:c4:20:f6:7b:4e:2c:58:f7:
91:d1:2b:4e:bb:8f:1f:eb:41:47:3b:d2:a6:bc:26:
b6:7b:3c:7a:07:06:25:0e:62:aa:d6:de:23:2a:21:
f5:f1:13:eb:97:42:de:8d:ed:f9:3c:71:51:f2:11:
89:32:12:6b:0e:e4:a6:f4:a3:30:2e:88:49:d3:fd:
40:a5:7c:e0:f6:b6:29:5a:88:18:9a:a3:24:3f:61:
49:e4:5e:b5:ae:30:d7:1f:8f:b1:b0:ce:74:7e:28:
66:d2:cc:26:04:8a:0c:20:d1:bb:45:84:5f:92:db:
9c:42:b8:95:96:4f:7e:e0:f4:3d:a9:8a:80:d0:d2:
df:b8:f5:89:88:9f:dc:a6:4a:fd:74:16:e7:3f:90:
49:46:43:13:f1:13:6f:d7:dc:b5:0d:4e:0b:11:e6:
ca:04:f6:57:d3:17:38:a6:6e:59:cc:f2:32:eb:b4:
ec:98:f9:c8:cd:13:dd:c3:38:3a:6b:1e:df:5e:c6:
16:2c:d1:00:4d:ee:86:b9:87:27:79:5b:d2:f4:b2:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E2:E6:77:98:D6:65:E3:B2:C4:70:A8:A0:FF:A1:69:80:49:20:97
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:05:56:25:1e:dc:36:2b:d7:49:9a:05:d0:a5:5f:54:18:
ec:0f:cc:c2:62:9e:56:bf:4d:11:1b:fd:79:90:8c:cb:cb:22:
f2:ff:4c:e6:57:51:d5:03:cd:dc:0f:a4:6c:9c:3e:c1:ab:11:
c6:71:9a:2f:4a:6a:c9:5b:af:82:9a:89:4f:93:82:d4:20:ff:
8b:8a:f7:46:f1:79:08:89:ba:df:b0:fe:b6:e1:1b:00:45:87:
35:89:63:0a:81:8a:3c:c7:10:e6:02:9f:3c:c0:43:51:e9:ae:
6a:77:2e:13:14:2a:d7:d0:7c:0f:c2:11:cf:ab:5f:12:9c:44:
93:8b:c2:53:22:2b:3f:ec:ce:a2:c0:4f:a6:d8:cd:e3:1f:35:
a2:e0:f2:7c:59:1b:f9:4f:35:5e:4d:fa:07:db:6d:b7:7b:97:
4c:d6:7c:b0:d0:4e:2e:11:f2:be:31:26:27:a2:36:32:cd:5d:
c5:45:ee:52:a2:ea:81:17:b2:d7:bd:67:5c:e0:99:8b:5a:9d:
3d:fa:a6:1d:46:d9:0f:24:a3:35:63:05:52:e8:dc:b3:f7:5b:
02:45:1c:96:75:43:45:f3:ee:13:73:0d:79:fb:d8:f4:86:29:
04:2e:81:1d:4a:ac:11:1b:12:07:00:51:1d:38:42:34:70:3b:
e1:e2:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:33:31 2025 by rpki-client