Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: FtValSeUCK04vOqBxGYoJPfig/cYsZiKQ//DngM6meY=
Subject key identifier: 8F:F0:07:C0:96:D5:6B:01:8C:86:D6:06:72:61:65:72:8A:C6:B4:53
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 019A13176688186CA32C5BC5AE0CE72E8432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 0A33
Signing time: Thu 23 Oct 2025 22:01:31 +0000
Manifest this update: Thu 23 Oct 2025 22:01:31 +0000
Manifest next update: Fri 24 Oct 2025 22:01:31 +0000
Files and hashes: 1: 9h0IDYCPr58Ccxg81AcMZ_13oWo.roa (hash: l+FTuWjUD+EZ0mXchVkunlX52jPEdy8UaVQG+ZcxDvM=)
2: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: VTSornuDamLyUhWyuDDTBj2ZpOKhB6oaYVR6Y1W9LX4=)
3: w89P4aOYJSIpjxXH3F1qUwrYwG8.roa (hash: VwwE3O0gcp61cCcoyzXJgH2L9ssH8GuxbE9nzSsokkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:17:66:88:18:6c:a3:2c:5b:c5:ae:0c:e7:2e:84:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Oct 23 22:01:31 2025 GMT
Not After : Oct 24 22:01:31 2025 GMT
Subject: CN=8ff007c096d56b018c86d606726165728ac6b453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:bc:10:ca:21:8b:28:df:df:57:8f:8c:e8:
20:99:81:65:0d:30:1b:30:07:5e:a9:0a:ac:42:f9:
02:01:6b:12:f9:72:7c:40:30:fc:c0:b9:75:ce:cd:
af:d4:24:2b:58:0b:71:ac:e6:49:f6:38:a2:28:40:
7d:03:e4:c1:e1:53:08:7c:6f:a0:7b:59:c4:4e:a7:
00:8e:7f:19:1f:ae:9c:7d:b3:35:ab:51:93:15:f1:
6a:96:a0:68:31:f2:17:3f:fe:51:27:c8:a7:cb:13:
8a:f1:21:34:23:84:fe:76:1a:28:43:7d:91:2b:a9:
67:11:64:b5:ae:a8:77:b5:f2:40:d7:d9:40:32:48:
e6:06:00:00:46:58:96:45:cb:f3:b8:f9:3d:e7:0c:
be:6e:4f:4d:89:64:fc:24:75:44:82:25:3d:8c:80:
b9:50:76:d7:5f:46:81:d5:c2:44:25:e1:2c:79:25:
5f:f7:62:f6:3f:fc:5d:64:0d:ef:c0:dc:49:72:bf:
bc:3e:7f:b2:41:6e:b0:e3:cd:6a:b3:a1:9d:c9:c2:
6f:4f:de:33:b2:b5:fe:b8:fc:59:26:a8:b7:67:67:
37:4c:f8:25:61:56:29:f3:0f:a6:dc:b3:a9:48:44:
24:e8:33:82:a6:58:69:2d:b3:4f:8c:53:44:87:10:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F0:07:C0:96:D5:6B:01:8C:86:D6:06:72:61:65:72:8A:C6:B4:53
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8b:d3:f3:fc:95:03:1e:90:1c:00:91:3b:f2:b9:19:98:0b:
ff:02:5b:7a:c1:81:61:be:eb:38:42:68:92:b1:7b:c9:b1:3b:
6b:63:1e:dd:e4:00:3a:c3:eb:61:d2:b6:6f:b4:2b:51:86:9b:
36:4f:8b:53:ad:b4:eb:04:8f:a6:6c:5c:0c:44:35:7a:dd:9d:
1d:a6:18:6e:c8:82:72:9b:4f:07:df:16:76:8e:0a:8f:82:0b:
a5:ef:53:17:21:27:5e:73:38:45:ab:a1:5a:4e:67:29:04:96:
56:6b:56:0b:f9:19:70:07:3b:be:0d:b9:d0:62:e7:2d:fd:45:
bb:60:3d:a0:a1:7e:4b:ad:8c:e3:a0:26:ea:62:dc:72:06:f2:
69:5b:3c:41:41:2a:5c:fb:3c:bb:70:c2:cb:73:93:87:e0:57:
b3:5b:43:13:3e:82:6f:95:fe:9e:4b:c9:02:3e:fd:42:38:61:
a5:11:5e:be:30:4d:d2:00:79:f0:4b:7c:c4:21:23:6c:b7:c9:
a7:6c:27:92:4d:f9:eb:48:c5:25:01:31:0b:35:7b:65:15:3e:
f0:21:0e:a3:7f:e5:90:42:8e:d5:22:2d:6c:3b:aa:9a:b6:58:
1a:ff:92:c4:34:76:cb:5b:c0:1e:11:59:bd:4f:6c:01:e0:85:
e8:e3:09:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:01:17 2025 by rpki-client