Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json)
Hash identifier: y9ybMFwnTL5Q1gj04e/GxvFZIg78ppe0BDPG/R5UjF0=
Subject key identifier: AD:AE:3C:61:C3:7E:67:FE:C2:4A:76:5F:29:90:B4:98:B3:8F:18:CB
Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Certificate serial: 019A00DA628F99C15FB5B66E69F5C5692F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 09:01:43 +0000
Manifest this update: Mon 20 Oct 2025 09:01:43 +0000
Manifest next update: Tue 21 Oct 2025 09:01:43 +0000
Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: UGNxsj7SYE1u9XfmI3Ds4U7O5UBnnqwppOUBP371D+s=)
2: FtQX4tz2PfNS1jDZrdtbiPoNYSU.roa (hash: M4MM/hQp8qhWYBPYsVJLPE9nJhVevNigPOSWligASH4=)
3: xpbeDPeraC0lsT88_DSzZTcvzFU.roa (hash: 7vANxALGvUHJgNJxUW1TqxLJ7J9U0tCgO5zgV2ERDWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:62:8f:99:c1:5f:b5:b6:6e:69:f5:c5:69:2f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7
Validity
Not Before: Oct 20 09:01:43 2025 GMT
Not After : Oct 21 09:01:43 2025 GMT
Subject: CN=adae3c61c37e67fec24a765f2990b498b38f18cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:75:a7:8b:8e:f2:e9:66:d1:06:aa:b5:f4:
53:fd:a8:9e:65:fa:82:7f:c3:d5:44:b3:bf:59:c0:
45:11:12:2f:3b:10:20:26:b9:be:7e:64:f8:3f:d6:
57:1b:20:bd:c6:bb:62:b0:02:05:8d:e0:10:b6:5a:
0c:fa:9d:04:1a:c4:dc:81:05:f3:cc:19:19:82:e1:
f3:40:c2:de:ba:08:cc:6a:12:c1:d4:98:6d:38:05:
0e:92:ba:86:91:f4:06:10:a8:f0:ab:38:2e:0f:67:
c9:7d:75:6e:16:89:1e:3f:48:02:aa:c7:ed:d0:24:
94:fa:17:e1:cf:a6:aa:04:31:e1:d6:d4:5a:4f:27:
f0:3a:22:b3:0f:b3:db:fc:5a:22:f8:0d:30:5a:b8:
bd:a4:b7:88:df:56:b5:66:a3:fd:cc:2e:8b:b0:8e:
7d:c7:6b:d6:d6:e2:19:e2:6a:a2:cd:3c:95:ca:52:
c4:a6:6f:72:aa:1f:16:e3:f7:bd:1b:82:4d:9b:bf:
99:34:b9:b5:47:ab:84:9d:26:f4:38:fa:01:b3:3c:
68:16:b6:f9:bb:b8:08:e2:80:66:b5:b2:87:51:96:
05:24:97:3d:b4:c6:e1:09:d9:d2:3e:fd:07:e0:d8:
95:c7:00:5d:66:f2:ca:16:53:a3:83:28:18:ee:75:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AE:3C:61:C3:7E:67:FE:C2:4A:76:5F:29:90:B4:98:B3:8F:18:CB
X509v3 Authority Key Identifier:
keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cf:bc:88:af:4d:ec:5a:67:ae:94:c5:de:89:07:da:ea:d8:
7a:f1:bb:2b:a8:63:59:ce:17:1f:d6:9d:d0:02:7e:5e:24:f9:
54:cc:37:28:83:2f:a5:ed:a4:65:06:29:7d:9d:8d:cd:aa:02:
de:90:08:a4:c5:c8:3d:1a:f3:86:24:49:81:47:2a:01:d1:ec:
ec:7c:11:c5:2f:79:40:d6:4b:1e:82:68:68:29:03:ba:d3:be:
e6:e5:06:56:82:7b:41:e5:84:3e:00:f1:68:b1:dd:21:1f:4d:
b9:8c:d9:c3:4a:d7:b5:05:60:28:95:c5:cc:86:74:6e:c8:89:
2c:0e:b6:3f:1a:53:82:2d:4e:21:84:c0:53:a4:f0:f5:a6:46:
1d:b9:84:6b:65:2a:35:42:04:91:b9:00:a2:0e:7b:38:d8:ff:
88:12:ff:ae:9b:19:7c:ee:ef:b8:51:ad:13:4c:4f:c3:09:99:
d9:f0:cd:a4:23:d3:b9:f8:34:2b:65:22:f7:05:6a:55:40:4d:
82:39:3f:3b:12:dc:7d:af:47:f5:5c:49:8d:c8:e4:4b:5b:79:
6a:76:06:0b:1c:8b:27:66:78:90:ac:74:7c:a5:98:83:7f:f3:
8f:46:b5:b6:27:ed:df:ec:79:53:fd:41:f6:16:ce:60:bc:8e:
8a:7d:93:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2mKPmcFftbZuafXFaS+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw
OWJiYjcwHhcNMjUxMDIwMDkwMTQzWhcNMjUxMDIxMDkwMTQzWjAzMTEwLwYDVQQD
EyhhZGFlM2M2MWMzN2U2N2ZlYzI0YTc2NWYyOTkwYjQ5OGIzOGYxOGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL51p4uO8ulm0QaqtfRT/aieZfqC
f8PVRLO/WcBFERIvOxAgJrm+fmT4P9ZXGyC9xrtisAIFjeAQtloM+p0EGsTcgQXz
zBkZguHzQMLeugjMahLB1JhtOAUOkrqGkfQGEKjwqzguD2fJfXVuFokeP0gCqsft
0CSU+hfhz6aqBDHh1tRaTyfwOiKzD7Pb/Foi+A0wWri9pLeI31a1ZqP9zC6LsI59
x2vW1uIZ4mqizTyVylLEpm9yqh8W4/e9G4JNm7+ZNLm1R6uEnSb0OPoBszxoFrb5
u7gI4oBmtbKHUZYFJJc9tMbhCdnSPv0H4NiVxwBdZvLKFlOjgygY7nXpZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2uPGHDfmf+wkp2XymQtJizjxjLMB8GA1UdIwQY
MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt
Zjk4YzdmZWMxOTRlLzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl
LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8+8iK9N
7FpnrpTF3okH2urYevG7K6hjWc4XH9ad0AJ+XiT5VMw3KIMvpe2kZQYpfZ2NzaoC
3pAIpMXIPRrzhiRJgUcqAdHs7HwRxS95QNZLHoJoaCkDutO+5uUGVoJ7QeWEPgDx
aLHdIR9NuYzZw0rXtQVgKJXFzIZ0bsiJLA62PxpTgi1OIYTAU6Tw9aZGHbmEa2Uq
NUIEkbkAog57ONj/iBL/rpsZfO7vuFGtE0xPwwmZ2fDNpCPTufg0K2Ui9wVqVUBN
gjk/OxLcfa9H9VxJjcjkS1t5anYGCxyLJ2Z4kKx0fKWYg3/zj0a1tift3+x5U/1B
9hbOYLyOin2Tsw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:30 2025 by rpki-client