Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
File: 0d9IA-VLCEqZy3uwRL95EydZS3M.mft (raw, json)
Hash identifier: MUX8oNznqzryBPrfAsmVS71Sj2onzRmINWJgXDzLjxQ=
Subject key identifier: 5D:3C:CF:35:AD:A1:F1:F0:93:FB:17:0A:88:95:32:4C:5E:B9:7F:86
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 019A16F3F2B6BCA656DABA449D1499CE2071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 16:01:17 +0000
Manifest this update: Fri 24 Oct 2025 16:01:17 +0000
Manifest next update: Sat 25 Oct 2025 16:01:17 +0000
Files and hashes: 1: 0d9IA-VLCEqZy3uwRL95EydZS3M.crl (hash: WtuECYHhWr0AwzVkhlRwGgdGvzd7AOKV0H+AMJpYPzs=)
2: TOONOy5Q_RT0Xdkv1KFKuSIfrvU.roa (hash: TXGZC4gRCS30Z/KLMEQnuIwYUvM4xeHM8tIdbYo8vlk=)
3: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (hash: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=)
4: uruDYSjJsQHtgQsmkfxJYvrLAmA.roa (hash: ugK90f7lpLYbl+ftnhcqa/fEdcHq1apLzUka+OcYLBc=)
5: xhEX51qp0YGYG_1Xjcz1FIDptho.roa (hash: S68nwmQ0GGVwMdWpSzCa8wmg/ndTObvviSDOIpAfn2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f3:f2:b6:bc:a6:56:da:ba:44:9d:14:99:ce:20:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Oct 24 16:01:17 2025 GMT
Not After : Oct 25 16:01:17 2025 GMT
Subject: CN=5d3ccf35ada1f1f093fb170a8895324c5eb97f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:0c:3a:af:60:fa:5a:aa:8c:63:7d:f1:47:
91:37:dc:f2:f3:a8:d2:f7:ec:10:c6:79:dc:1c:9f:
bb:3e:e5:e3:70:51:4b:2c:a9:f2:3c:c4:06:64:8f:
ec:14:45:79:2d:f0:99:f8:51:ac:cd:72:f1:f6:01:
74:38:77:9d:b0:4d:b7:37:69:29:70:84:07:cd:9f:
a1:15:37:69:c4:6f:32:e9:f5:22:22:4c:a0:6d:18:
1b:5b:ee:fb:e1:4f:12:b5:30:0a:9a:36:04:f2:ac:
b9:6f:7c:b5:39:34:58:2e:cf:b0:cb:2e:78:56:d3:
88:80:34:6f:38:63:7a:4c:92:28:47:ad:13:5c:60:
d8:e4:12:3f:58:53:48:0d:3e:47:6f:9b:7a:99:7d:
9f:e5:7a:12:e1:fe:25:51:99:37:43:c4:b9:7c:80:
63:ac:7f:21:89:ae:17:d5:36:5c:ba:91:4b:5e:76:
95:3b:f8:ef:95:cb:f5:60:0a:47:60:86:f5:3a:1b:
c4:2e:cf:de:5d:ff:70:92:9d:f7:6c:f1:9d:96:08:
6b:3e:68:af:e4:71:31:dc:77:eb:13:77:d9:e5:9e:
75:ba:3a:f4:2d:ec:54:0a:09:b1:11:13:8e:21:e8:
88:82:5c:b3:d4:b1:64:de:69:ce:c1:79:f2:42:11:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:CF:35:AD:A1:F1:F0:93:FB:17:0A:88:95:32:4C:5E:B9:7F:86
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:97:22:20:e8:e6:be:3c:f1:cc:f7:b3:be:7b:39:31:40:a1:
0d:0c:c8:00:a4:91:c9:ee:5e:a1:20:d0:6b:13:7f:53:21:65:
3c:71:60:20:13:07:3d:25:7a:9f:f0:58:3c:87:e1:62:81:ec:
06:9c:74:19:e3:9e:68:1d:6c:8c:65:f3:84:44:a2:e9:de:36:
97:42:0e:01:ac:96:84:6a:4d:d4:52:30:79:d9:e4:01:ac:9a:
78:16:49:30:3f:f5:08:16:af:ee:54:ea:81:d9:d6:e1:da:83:
b6:6b:58:37:d0:24:b6:b2:4a:8d:16:df:81:9c:dc:97:63:08:
a9:34:ed:d4:d9:ce:da:f2:04:bf:1f:ec:b6:ed:b2:e0:d0:ea:
62:47:71:eb:b6:e9:8a:31:71:87:1d:86:bf:4f:04:f6:9e:1c:
db:41:50:79:ad:04:03:cb:a1:4b:bf:cd:65:50:02:48:79:6a:
95:10:19:96:60:43:35:ae:9f:15:08:e3:02:c1:d6:ea:a8:bd:
26:20:2e:47:2b:0c:ad:a7:41:b7:28:84:42:94:fc:2c:7e:54:
8f:fb:2d:a0:bf:e5:88:34:0f:5c:bb:ff:be:4e:fd:92:b9:f9:
7f:b8:2a:cd:8c:1a:92:6c:bd:a1:e8:2a:33:7f:63:56:0a:59:
56:8d:bb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:16:46 2025 by rpki-client