Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
File: 0gsI5gdmjgYFAITuN5KKHAsDVJI.mft (raw, json)
Hash identifier: 7GHhD1Ji+KUz3utxllBrMisx+gjnBe3A0TEP9ZuxQTw=
Subject key identifier: 46:82:D9:E8:69:ED:DD:71:0E:42:AB:7F:C5:0B:B2:E6:47:12:39:55
Authority key identifier: D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
Certificate issuer: /CN=d20b08e607668e06050084ee37928a1c0b035492
Certificate serial: 0199FE0FEE743738DBDAE79FFE2CB6F3CD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
Manifest number: 0412
Signing time: Sun 19 Oct 2025 20:01:20 +0000
Manifest this update: Sun 19 Oct 2025 20:01:20 +0000
Manifest next update: Mon 20 Oct 2025 20:01:20 +0000
Files and hashes: 1: 0gsI5gdmjgYFAITuN5KKHAsDVJI.crl (hash: f0rK9JdrNeuXAgZJHuiu6EE+U39rHPKabR8gegEM+ns=)
2: 3bcszB4ipjOyzxEmMRx3Cb2Frg8.roa (hash: VCt09RErcTdOo8fIexLlVqTQrbVLMl5U72RInG7+sVI=)
3: QT2bGKmHREGB3-sqEAhjlcIYXXI.roa (hash: lsIhMN9LkDQx5Xr58fqlkjIVmBAb+8AMBjPiPSb4cQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:ee:74:37:38:db:da:e7:9f:fe:2c:b6:f3:cd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20b08e607668e06050084ee37928a1c0b035492
Validity
Not Before: Oct 19 20:01:20 2025 GMT
Not After : Oct 20 20:01:20 2025 GMT
Subject: CN=4682d9e869eddd710e42ab7fc50bb2e647123955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d5:e4:56:47:42:91:4a:0e:5b:d1:00:8a:fc:
6b:4c:56:27:d3:6d:81:59:df:51:82:09:81:83:3c:
b8:5a:f4:24:76:04:2a:31:e0:87:b2:31:2f:63:bd:
a0:f7:fd:7c:62:66:9b:67:91:0e:e2:f6:e4:ee:09:
5f:fc:ca:53:11:d7:a0:89:87:3c:a0:13:91:77:fc:
ee:ec:06:b1:58:af:80:49:f8:7b:98:b6:b8:38:ac:
07:44:d4:72:43:b8:2a:1a:2e:cf:6e:e1:d5:7c:d9:
97:69:dd:e2:17:cb:bc:01:71:5e:b3:bd:57:d0:c4:
6a:d8:94:8a:f5:60:98:2f:0c:72:d3:0e:c2:17:b6:
e1:c3:c2:8c:6a:e6:a5:29:4f:3b:81:15:a3:b6:65:
24:a6:bd:6e:b9:96:0f:42:1b:49:85:2d:dc:a7:0e:
c4:62:5f:d6:6b:46:7c:0f:ef:91:c0:26:a2:ab:09:
02:dd:ca:95:1a:7d:d8:c7:70:5e:96:7d:13:00:02:
5c:5d:fd:f1:e0:32:4a:f0:d2:f9:cc:fb:52:7f:9f:
dc:ed:b8:a2:6f:b8:e8:48:a4:b4:d5:50:17:ad:45:
ba:8a:72:23:9e:a0:6e:6e:bb:58:16:ca:17:e4:96:
01:cd:b6:91:ac:e1:56:6c:5b:a5:a6:92:a3:d8:1c:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:D9:E8:69:ED:DD:71:0E:42:AB:7F:C5:0B:B2:E6:47:12:39:55
X509v3 Authority Key Identifier:
keyid:D2:0B:08:E6:07:66:8E:06:05:00:84:EE:37:92:8A:1C:0B:03:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gsI5gdmjgYFAITuN5KKHAsDVJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/217aaf-3b3b-4d9c-a2ca-062c8882ba71/1/0gsI5gdmjgYFAITuN5KKHAsDVJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5b:08:18:74:bf:a1:cc:3e:e6:89:07:dd:4e:5c:ba:17:2c:
84:9d:27:81:b4:6d:88:69:ab:cd:e1:51:ff:8d:14:5d:f5:58:
ff:bd:a5:34:d9:37:a8:c0:1b:1b:fa:b4:ab:8b:21:99:36:e3:
76:ce:15:6d:a0:6d:3f:2a:c0:c1:5e:37:55:38:9c:d7:cf:08:
74:9b:52:3a:d3:7c:3b:88:e0:af:46:b2:94:0d:00:30:ca:24:
67:ca:0f:8e:55:10:60:cf:35:83:6e:31:6d:35:1c:da:f8:6a:
54:c6:16:8d:3e:6c:56:9d:00:54:0c:18:4a:31:da:8a:22:df:
fa:77:df:92:90:ed:f2:d4:1f:22:5e:be:e3:3e:34:8c:77:4f:
0d:55:d9:1f:65:df:7e:46:a1:51:b8:99:33:9c:ed:8d:a3:ac:
4b:67:67:09:8c:fb:e4:77:09:f0:ed:c7:13:29:8c:d3:1f:c4:
52:77:fd:7c:da:0a:1d:b9:e4:88:63:c8:83:15:88:45:87:f8:
7f:5a:82:93:98:c6:ea:55:32:58:cc:81:98:0e:17:32:cc:ed:
db:ee:9e:59:1b:6b:fa:7e:d6:bb:46:09:80:22:82:8c:71:2a:
51:39:d0:3a:d6:54:af:15:29:3e:d1:cb:0d:68:47:f3:92:80:
bd:13:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:00 2025 by rpki-client