Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier: jPhts9ATAN6fzrKIM9TtkzYJxNIlB9+xPzYna+G9geM=
Subject key identifier: AE:2E:7E:B6:CB:51:95:8C:52:69:D7:98:02:86:A4:04:23:5F:6E:4F
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer: /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial: 0199FBEA97430C3C7B900AF7E5E73AA0E09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number: 13B1
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: 2cwnnInenISgFUb08fXczR+B4bwJSxGnQmeE17/8Jk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:97:43:0c:3c:7b:90:0a:f7:e5:e7:3a:a0:e0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=ae2e7eb6cb51958c5269d7980286a404235f6e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:0d:30:1d:3a:ed:bc:dd:68:15:e5:e4:d9:
77:c2:a0:b2:cb:6a:40:1d:81:58:14:8b:c3:f5:1f:
c9:fc:a2:4d:67:4a:8c:a0:89:d7:83:d7:db:fa:dc:
88:49:44:69:a6:f5:5e:c2:7a:44:93:e5:81:aa:eb:
99:ce:ba:72:c0:ab:e7:93:74:dd:68:84:b7:87:9c:
da:8c:51:e4:c9:91:4f:6a:e0:15:68:2b:1d:b6:7a:
68:eb:98:ac:f7:fe:59:bb:7e:0f:de:17:c8:6a:96:
61:4d:72:f3:e3:c8:5a:fa:c6:cb:39:fb:9b:41:87:
1c:f6:9b:a2:63:c4:52:5a:4f:8b:18:bb:87:01:d8:
7c:b9:07:86:d6:c1:fb:20:67:03:2f:25:55:55:d4:
55:cf:5b:f4:d5:fc:00:8f:e1:01:81:c3:ec:d9:02:
08:b6:1b:41:75:7c:53:3f:c6:62:bb:14:f4:52:f8:
28:ea:ea:bf:8b:b8:13:6c:0e:53:e9:dd:1a:ce:69:
9d:21:cc:e2:f6:68:cf:7d:47:48:98:fd:ed:71:cc:
f1:2d:a5:b3:de:7f:ba:6f:73:05:36:95:28:86:47:
00:fc:8f:29:18:71:37:ab:0e:65:6a:c8:13:6e:44:
03:c7:e1:66:f4:44:45:3e:e6:6d:97:53:17:5a:b9:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2E:7E:B6:CB:51:95:8C:52:69:D7:98:02:86:A4:04:23:5F:6E:4F
X509v3 Authority Key Identifier:
keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e3:87:7f:ba:26:a3:57:52:ac:b8:25:00:3f:e4:bb:a5:f0:
a6:1d:d3:88:37:08:25:ca:4e:22:9e:76:eb:28:8c:5c:da:29:
24:18:34:19:8a:47:e9:a1:1f:aa:e9:05:9d:0a:6f:fa:cc:a4:
80:27:02:2c:dd:0f:d3:87:d3:1d:5e:9d:14:a4:ae:88:a6:df:
18:6f:5c:fe:b0:a8:a7:24:e8:3f:c1:d9:65:b9:d7:c4:f3:4d:
b3:ad:9d:25:28:e6:f7:7f:e5:4f:23:2d:ac:4d:30:41:bb:08:
af:01:e2:8f:4c:4e:87:55:fd:e9:67:e8:b6:e7:70:31:d2:4d:
b7:1c:c3:44:f7:1c:ef:b1:b4:32:00:5f:fc:92:1d:dd:01:5a:
5e:c3:c2:16:06:77:8c:43:76:4e:53:38:77:6d:48:3a:47:2c:
a1:57:76:1f:5a:c7:88:bf:a3:39:79:9c:82:df:52:11:27:71:
03:70:d4:a4:ee:bd:54:71:f8:06:e7:06:87:94:37:dd:f5:5a:
ba:59:4c:a2:a5:58:a9:fe:aa:32:7e:f9:bb:aa:d7:58:67:ec:
36:eb:57:aa:ed:75:d8:57:d3:c9:e4:17:50:85:cb:8a:e2:77:
71:ce:3a:68:b7:a7:de:bc:9b:f3:d1:6c:24:eb:80:da:a8:fa:
51:bd:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:45 2025 by rpki-client