Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: 9IkPVCAsWBcA9Yl+3Cl1ur5AqBqXm+p4y3uNJaZRNPo=
Subject key identifier: BE:F5:F3:FD:5E:59:88:DD:BD:5A:BC:DD:85:21:D5:40:31:39:45:28
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019A24E5A0DAEA40956DACC7604EE6BEFA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 1688
Signing time: Mon 27 Oct 2025 09:00:19 +0000
Manifest this update: Mon 27 Oct 2025 09:00:19 +0000
Manifest next update: Tue 28 Oct 2025 09:00:19 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: LydQVitnfc7MCD6kVmwGw+/0NOI4y8E0nvet5QHS/g4=)
2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:a0:da:ea:40:95:6d:ac:c7:60:4e:e6:be:fa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Oct 27 09:00:19 2025 GMT
Not After : Oct 28 09:00:19 2025 GMT
Subject: CN=bef5f3fd5e5988ddbd5abcdd8521d54031394528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:01:dd:51:4a:06:93:f5:7a:45:03:5d:15:6a:
65:5c:b8:8b:25:fc:44:5a:89:60:d4:83:5c:00:2f:
23:82:bd:84:3d:cb:25:51:74:62:d5:2c:22:6d:b2:
37:ee:8d:22:5b:33:3b:a0:4e:87:d5:6d:5d:fc:05:
96:89:4a:1f:05:03:dc:80:93:da:10:3f:19:b6:5f:
77:dd:a6:02:2f:5a:84:80:45:5c:ea:18:26:a6:8d:
fa:63:52:a4:c8:2e:55:da:89:88:0f:76:f9:f8:96:
01:d8:96:3a:f1:c6:00:24:e1:a3:63:a8:76:85:9a:
3a:db:96:6c:ca:f8:71:72:45:3f:e1:66:df:01:12:
09:d7:01:ec:7f:34:02:3e:29:1f:82:d1:68:d8:f8:
72:78:e5:29:56:09:a6:b5:07:bf:9e:13:d5:7c:d8:
03:d9:c6:f3:e2:20:30:b1:f6:a9:83:b4:61:9a:30:
27:01:ab:14:38:4a:f1:74:93:33:9a:c2:82:22:5c:
90:fd:f1:79:d4:aa:c6:74:34:58:3d:eb:1f:eb:f7:
6e:a1:af:c9:ba:3c:40:17:40:21:42:e9:6e:ef:54:
dd:3c:48:fc:2c:b3:73:53:5e:1d:c8:89:df:7a:00:
03:18:c3:6e:b7:61:08:d2:6e:cd:1c:ad:27:c0:e8:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:F3:FD:5E:59:88:DD:BD:5A:BC:DD:85:21:D5:40:31:39:45:28
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:98:f1:a4:b1:3d:f9:c2:56:37:a4:9e:62:af:30:e7:2f:4e:
80:3b:21:7b:2c:4f:a5:64:5d:ff:29:37:0a:6f:ee:d5:3e:27:
59:14:68:69:76:0d:11:b6:4c:bd:c8:f4:4f:96:03:88:fa:ad:
59:97:cc:51:e9:0d:ed:74:c8:ab:41:ec:ee:55:a6:dc:fc:d3:
e2:6b:bf:75:fb:ef:e6:82:95:5c:2f:2b:0a:b1:98:ef:9a:18:
4a:cd:ff:27:27:2e:0a:aa:10:f5:5e:6b:9c:46:e0:85:0c:ec:
85:a0:7d:1a:8a:b0:a8:41:dc:33:8b:2e:10:11:07:36:10:a0:
a5:82:24:9f:97:72:38:17:d1:36:5b:34:44:4a:84:6b:24:94:
ca:e4:44:cf:32:53:c2:08:06:5d:ab:8f:31:74:7d:a0:91:31:
e0:be:b5:75:41:c0:2d:cd:c7:52:61:cb:66:5e:de:2b:cb:e3:
47:1f:9d:fc:a5:96:10:b3:f3:e5:57:d6:9d:8d:e7:88:47:01:
3d:22:10:2d:ff:a7:50:71:cb:5f:63:27:85:35:f2:14:a7:be:
8c:b3:b7:14:fd:a4:eb:85:3b:ed:b8:31:b7:eb:5b:8e:2d:91:
fd:93:f2:8e:d2:9e:0e:a3:fd:30:7d:24:f8:fb:6e:ec:bd:87:
2b:3c:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:15:48 2025 by rpki-client