Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
File: 0ubd2kDXglWe5l5Q-QjhaJplqAA.mft (raw, json)
Hash identifier: 9CxflmGQF2kwnLp/DT1JY5wX7eBjOEFRHFxUfUdsVzc=
Subject key identifier: 09:8B:F0:2F:64:C6:F5:1A:5E:97:AE:8E:67:F7:05:1E:2E:59:C9:30
Authority key identifier: D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
Certificate issuer: /CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Certificate serial: 0199FD34140838389EF36634AF9E5565B91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
Manifest number: 0C5A
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: 0ubd2kDXglWe5l5Q-QjhaJplqAA.crl (hash: RRDb3EeZslEfe3nfIO4s/tZLWqgB6fggJu6ZcgpUufI=)
2: 2Bx_ZuBj3ywzIO5mlvk2Okv22hQ.roa (hash: guPg5C9izx8vPW7Ld4+sGxeIZUZPSLOzjQE1liVIecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:14:08:38:38:9e:f3:66:34:af:9e:55:65:b9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e6ddda40d782559ee65e50f908e1689a65a800
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=098bf02f64c6f51a5e97ae8e67f7051e2e59c930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:4e:4e:88:b2:36:ed:15:bf:49:eb:c6:a3:
e9:e6:d4:51:2b:e2:b5:62:cd:15:e0:63:5a:fa:32:
61:57:cc:37:da:cd:49:61:0d:30:1d:64:78:63:b9:
ab:22:2b:52:9d:11:44:68:e9:0c:8c:cd:67:b3:11:
5d:67:8a:f0:b9:61:52:4d:e7:45:c4:c5:3c:79:4f:
7a:98:54:15:f0:45:10:b5:e4:7c:c0:b2:10:10:e3:
e7:67:73:6d:07:67:2c:cc:c2:5b:a2:2d:21:65:1b:
d6:a5:aa:ec:8a:32:07:e5:62:6a:2f:d7:06:16:4f:
61:bc:e2:11:46:c1:76:57:d3:14:9a:61:f4:c3:84:
52:1e:8d:d9:1d:50:c4:46:8e:23:66:6e:42:a3:43:
4d:01:6f:a2:8c:cf:2f:10:ff:63:87:03:ce:6a:5e:
62:dc:35:cd:2d:52:0f:59:c9:2e:a4:fa:eb:82:d3:
92:bb:de:e6:17:b9:b4:ef:e9:f0:27:b9:94:dc:8e:
d2:ef:13:5b:10:1f:f1:e1:35:f6:c5:3e:54:c0:1b:
ea:02:4e:3b:b3:a6:a1:88:62:7f:e3:15:0b:41:9b:
3f:96:07:1f:15:e4:2f:ee:7e:c8:86:1d:d7:32:49:
41:79:2e:4e:0e:58:e7:71:2d:8e:92:36:9a:c7:ce:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:F0:2F:64:C6:F5:1A:5E:97:AE:8E:67:F7:05:1E:2E:59:C9:30
X509v3 Authority Key Identifier:
keyid:D2:E6:DD:DA:40:D7:82:55:9E:E6:5E:50:F9:08:E1:68:9A:65:A8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ubd2kDXglWe5l5Q-QjhaJplqAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7335d2-3c3f-4fca-8000-ccf9b89e22e2/1/0ubd2kDXglWe5l5Q-QjhaJplqAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:49:50:37:c9:b4:42:7f:c2:d6:fb:31:3a:ee:1c:dc:d5:22:
14:d9:93:63:16:cf:b8:b7:0f:33:89:14:26:4b:f4:f2:98:de:
ee:8c:1c:97:8a:55:c2:b0:ac:93:f2:2f:f1:26:ab:5f:94:06:
31:34:e7:57:eb:c9:bf:31:26:23:ed:a9:36:21:3e:c6:3e:ee:
72:8b:2d:54:94:28:15:49:51:57:a1:14:81:8a:46:65:0b:32:
5a:e1:af:c4:55:b0:5e:1e:f3:71:e7:8c:e1:bd:74:e8:f4:89:
c9:1b:d4:43:3e:e1:44:72:d3:fa:70:97:49:00:9d:e9:7e:2b:
f3:14:f2:fb:df:35:9d:af:65:4b:2e:3e:ac:0d:94:57:ed:00:
ac:51:fc:62:82:4b:5d:61:78:b0:b0:30:6d:80:29:a7:05:c8:
f7:f6:f0:09:e5:e0:86:c5:58:db:e2:88:da:88:0f:4a:a7:14:
67:28:73:96:db:f4:43:55:93:77:c2:29:ab:61:16:2f:f4:62:
ca:0b:35:12:8a:16:ff:fa:35:a9:ac:c3:a5:82:13:51:fb:b5:
73:95:d3:e4:77:a7:5d:fe:26:a3:ef:ec:5e:1d:27:f8:de:23:
2b:e7:25:0a:fc:f1:cc:ab:72:ad:ef:80:49:31:9f:ae:c4:ee:
ba:59:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:59 2025 by rpki-client