Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: XNPaevmRAIIvZyC3FD/Bpm4bDT7ALpFnY5K3W6fMNKY=
Subject key identifier: A5:C2:C4:2B:DF:52:04:8F:BB:56:4D:3F:E1:2D:73:D3:ED:BF:DE:2E
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 0199FDD975E88EB117C038F5546CC471C515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 15BC
Signing time: Sun 19 Oct 2025 19:01:51 +0000
Manifest this update: Sun 19 Oct 2025 19:01:51 +0000
Manifest next update: Mon 20 Oct 2025 19:01:51 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: PFJlmqoY/wvXY9jFLkRmXE7ptO5HrSShuPhcVExd30I=)
2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=)
3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:75:e8:8e:b1:17:c0:38:f5:54:6c:c4:71:c5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Oct 19 19:01:51 2025 GMT
Not After : Oct 20 19:01:51 2025 GMT
Subject: CN=a5c2c42bdf52048fbb564d3fe12d73d3edbfde2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:cc:78:2d:92:92:b3:11:55:14:04:70:da:
25:84:4e:4f:16:e1:0c:92:ef:48:48:13:ee:18:06:
01:37:35:c1:85:b6:13:a1:93:d1:04:de:8f:af:e6:
4a:f8:6c:5d:8d:45:02:17:db:a9:d3:da:5f:cb:aa:
5c:8f:0f:8f:03:c8:b1:db:77:fc:79:93:0b:33:78:
61:ae:e4:fa:cf:07:d0:bd:97:d9:84:69:0c:ce:22:
dd:71:bd:af:d4:be:e7:e9:fe:c2:23:c0:8d:14:da:
d0:fa:6f:e6:34:c6:34:d1:bf:98:5d:e9:18:74:d9:
e0:33:8b:fb:8f:f2:db:8b:a1:6f:f9:03:37:a9:da:
10:f8:e6:79:21:51:f9:36:b4:d3:58:22:ed:a7:57:
8c:c7:53:97:40:6f:fb:c8:ff:8e:71:3a:91:25:bc:
2a:72:e6:bb:cb:1f:34:3d:14:91:87:ee:bd:6f:b1:
9c:22:a4:78:15:18:96:a5:78:c5:60:7f:cc:84:86:
45:3d:6a:bd:59:9e:8c:2a:cb:d1:cf:5d:cc:94:7b:
c8:81:f1:8c:1e:d9:f1:d2:b7:81:e8:12:11:c2:d0:
97:4a:21:21:00:62:00:ba:6d:ba:87:6e:0e:00:a3:
b8:45:50:12:f9:30:a2:69:b3:b9:f5:39:83:15:a9:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:C4:2B:DF:52:04:8F:BB:56:4D:3F:E1:2D:73:D3:ED:BF:DE:2E
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9f:1a:3b:cf:dd:66:1e:b8:51:bb:a7:d4:7f:52:d5:6a:0a:
1f:d1:e8:4b:b8:fe:67:ab:b0:f8:88:9d:b6:17:9b:e0:5b:9c:
90:c2:d1:d3:84:d2:7d:1e:ec:9b:c5:0a:8c:89:59:99:fd:84:
49:48:c8:ff:1f:ca:bd:57:3b:e2:2f:91:84:90:f9:08:9e:50:
25:a5:39:1c:b3:06:9b:ef:fd:c4:b0:d7:97:85:f5:87:d1:a5:
83:95:fd:d9:e7:3a:86:72:b2:b5:6a:65:af:64:cc:12:28:51:
97:d6:a2:19:e1:85:66:f5:d3:2b:c1:4c:62:b6:10:3e:45:84:
98:7a:d5:73:14:3b:56:7a:33:4e:07:5f:09:d6:b4:50:06:e7:
a3:ba:5d:a2:92:94:95:c5:91:e0:35:06:1f:a8:39:28:83:e7:
45:db:a2:66:c4:ba:47:c5:bf:41:3d:2a:ae:b4:24:20:51:52:
0a:97:96:40:c6:0c:bc:6a:69:de:c8:f6:a8:bd:f2:e5:6d:8d:
48:9e:04:1e:31:46:e1:06:24:33:c7:53:21:83:7d:63:c2:29:
f8:72:15:c9:94:3e:2b:6c:7d:35:93:ea:1a:eb:69:ba:87:34:
50:0b:c3:77:d9:0d:77:2b:89:72:e3:e0:5c:a3:24:95:3e:7e:
95:d4:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:21 2025 by rpki-client