
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: AGeLKyOs6V7CLNuyjKlJJBufvK9bh12cDOXLUpiJPN4=
Subject key identifier: 4D:8B:0C:46:D5:FC:FF:78:D0:08:53:77:24:D8:8B:AD:E5:7D:EE:94
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 019A04116252F4C38DBC68D74414E2206AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 16EA
Signing time: Tue 21 Oct 2025 00:00:39 +0000
Manifest this update: Tue 21 Oct 2025 00:00:39 +0000
Manifest next update: Wed 22 Oct 2025 00:00:39 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: 8rljmUhk2UhYF82A0pX4yjwRX71Ge3J9I6tpcqSv+Kw=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:62:52:f4:c3:8d:bc:68:d7:44:14:e2:20:6a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Oct 21 00:00:39 2025 GMT
Not After : Oct 22 00:00:39 2025 GMT
Subject: CN=4d8b0c46d5fcff78d008537724d88bade57dee94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:e8:33:96:50:57:1c:9f:01:ba:87:80:cb:
b2:0e:50:35:c1:e4:fd:a6:76:23:9b:1d:74:0d:87:
4c:d8:ea:0a:33:67:d2:09:6c:73:e9:30:39:e2:bc:
5e:3f:53:a7:75:e3:39:ec:cd:97:ec:2f:99:bf:32:
bd:d9:84:1e:fa:8d:48:9d:fb:83:3d:a4:f2:2a:c1:
ad:fb:29:8d:4f:71:b0:e4:93:11:c5:09:48:24:5c:
f4:a0:b5:f1:3b:47:f3:c5:7d:79:74:ce:ec:7e:ab:
85:e9:d1:05:a5:6a:c5:f5:68:65:46:74:9b:37:5d:
82:02:9e:92:90:73:00:80:c1:fc:60:bd:e7:3d:7a:
90:bd:40:1b:4d:87:9f:fd:c7:4d:eb:67:18:f2:ad:
eb:84:c2:bf:be:8b:76:36:27:8a:52:1e:94:5a:3b:
c5:fe:af:28:2a:20:02:e6:4f:4d:c4:0b:82:99:70:
00:a6:17:24:e5:46:53:c9:52:66:c8:76:5f:df:b9:
0c:b8:0f:d2:ac:71:3c:52:b5:be:79:4e:68:16:18:
a1:8c:88:97:70:15:6e:f9:f3:9c:6f:fa:f7:ba:af:
1b:f7:91:db:26:e0:e9:2c:4a:e2:43:7d:7c:5f:b3:
25:03:51:34:11:bb:77:10:3e:81:5c:02:c1:6a:27:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8B:0C:46:D5:FC:FF:78:D0:08:53:77:24:D8:8B:AD:E5:7D:EE:94
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d6:65:69:d3:63:94:aa:06:5e:c0:30:64:c0:fc:8d:f4:4a:
90:68:07:3e:ad:a0:32:e3:be:ac:b9:f0:eb:a6:98:d2:95:82:
f1:88:90:25:e9:eb:a3:cc:27:f8:fa:1a:7c:f0:f6:77:a6:61:
e4:27:fb:24:9f:ac:c7:cf:fd:6d:cf:d1:a0:2e:7c:6e:f3:d5:
5e:70:77:e4:b4:c9:41:db:a1:3f:18:ad:78:0e:a9:22:89:2c:
5a:d2:93:e0:59:16:8c:63:c5:e9:f6:91:da:f8:fc:ea:ec:90:
0c:4e:0a:f8:ae:4c:53:b2:e1:09:5c:22:d4:b3:25:63:34:8c:
43:64:b1:81:76:f7:3e:5c:76:1c:27:24:66:8a:1f:e8:b9:38:
a2:2f:72:20:c3:6d:47:8b:2e:b0:4e:4a:80:00:b2:fe:5f:5a:
cf:a0:90:e4:46:f4:c1:18:ea:5d:95:40:d8:4d:56:ea:04:62:
6a:90:7f:63:85:e8:04:76:41:ba:47:ba:79:3d:90:14:7d:fb:
ea:d1:e3:a7:e5:90:a6:6c:d5:a0:7c:b8:20:09:7c:4f:b8:bb:
a2:be:b3:9f:4b:90:40:be:10:e0:26:23:90:d5:05:f2:cf:55:
8d:0d:42:c5:e1:a8:f2:f9:3b:4c:be:d8:3b:b3:87:30:1e:d2:
02:be:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:40:01 2025 by rpki-client