Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier: FPeDHGJTN6lMjL0/7VZRzvCWFLBIGh1cF7//cjxiAIQ=
Subject key identifier: B0:44:C5:7D:75:63:D9:09:9A:3B:D4:EF:10:0B:3E:0F:7B:EB:1E:ED
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial: 0199FF5946E3CBB69F04B3825433C1D60621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number: 10BA
Signing time: Mon 20 Oct 2025 02:01:04 +0000
Manifest this update: Mon 20 Oct 2025 02:01:04 +0000
Manifest next update: Tue 21 Oct 2025 02:01:04 +0000
Files and hashes: 1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: m+frw7uk8cHSBXHtEF5cTf+vxEPjUVeZiBGvmOuyuzE=)
2: MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa (hash: 0qwECbWF3VMGBC2LqqWsoaxdyHvDL7eVoZEYdOt0I84=)
3: NibkP4WwhFNgZ640yvtXLfFiJrg.roa (hash: a/esbL59f+nmLVH7R2fnAmETOkLcHJ2GIe7zJ0dWkJ0=)
4: rUM43ISndw5pYAQLWf2KHIAwsfw.roa (hash: KeqCps5BUoZfWz/djUGV6w2EVQtKO+PPXxPc78g2vTo=)
5: xi9oGHAZGsjdKybpmWD7Ku8W0ZM.roa (hash: 5sRqk+0ypVIu7UFoyuyrbtTdv9EciH6vt3GDL2ydd68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:46:e3:cb:b6:9f:04:b3:82:54:33:c1:d6:06:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Validity
Not Before: Oct 20 02:01:04 2025 GMT
Not After : Oct 21 02:01:04 2025 GMT
Subject: CN=b044c57d7563d9099a3bd4ef100b3e0f7beb1eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:ab:13:ca:0e:60:a7:98:af:f5:25:8e:78:
7c:7c:3c:89:94:04:46:9e:7e:06:74:90:f9:7e:00:
27:59:0d:85:8d:18:bb:10:82:ae:e0:98:9e:c9:8c:
1c:12:34:67:36:55:2c:3d:85:7d:86:d6:a6:b7:46:
cd:d6:bd:19:57:21:c4:d4:06:3b:50:dd:1a:2c:ed:
5e:a4:eb:66:f4:32:75:e7:ce:ee:cf:4c:18:fe:fc:
0f:f1:74:0e:cc:74:3d:d8:dc:ea:dc:af:ad:3b:0b:
a2:eb:cf:aa:c0:57:b6:61:39:c4:d0:1b:0f:ac:eb:
ec:e0:8d:01:fc:85:ec:3c:02:19:12:e0:fe:50:eb:
00:e6:00:13:29:ea:ef:51:ed:44:1c:37:07:6e:da:
6d:08:41:81:9c:bf:02:b5:3a:ad:53:ee:8b:80:85:
99:ce:24:eb:af:16:43:99:aa:a3:ac:72:86:2f:8d:
05:97:49:8f:10:b3:a8:bc:26:22:dc:88:d4:b4:ac:
1e:6b:ba:76:5e:16:0f:11:f0:97:74:c0:a5:f2:19:
12:fc:36:ad:e8:77:7f:9f:b5:3f:17:27:de:df:92:
a6:1c:8a:90:3b:4b:1d:97:1c:fc:34:97:9d:ec:f1:
ef:57:05:11:1a:10:8c:38:de:66:63:b5:24:6b:79:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:44:C5:7D:75:63:D9:09:9A:3B:D4:EF:10:0B:3E:0F:7B:EB:1E:ED
X509v3 Authority Key Identifier:
keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5e:20:e4:2f:af:27:a8:7b:b0:d8:01:7c:19:0b:1a:a4:28:
2a:5f:62:63:e8:dd:86:0e:d8:ee:54:4e:cd:3d:7c:2f:9c:4a:
33:3a:a3:b0:17:a8:95:32:fd:ba:70:cc:f1:cc:e2:22:48:86:
70:3a:bf:94:5b:bd:28:42:79:3a:a9:a6:40:e0:72:7a:1a:b2:
6e:c6:bf:38:47:8d:be:13:23:b6:72:e9:a0:0b:c9:a4:13:8a:
9f:92:c4:ea:7d:a4:33:ae:e1:67:da:33:24:24:21:45:30:b4:
77:e5:57:57:26:5b:a5:02:b7:95:42:80:a0:fb:de:4a:61:34:
2e:98:e7:36:47:36:a5:49:1b:77:dc:ab:a1:5b:8c:96:a7:53:
d4:df:f4:79:38:2c:35:cb:4e:46:d6:7b:73:99:c0:26:c6:bc:
b1:eb:82:ef:6d:df:2d:1d:4d:4b:66:79:92:92:cd:00:e8:27:
eb:1e:18:85:99:ee:ac:c7:de:57:fa:ef:10:ba:4c:76:aa:da:
72:9b:9d:e4:64:81:96:b4:72:00:88:f8:16:57:90:5f:b0:81:
6d:97:e1:0c:f6:13:6b:c6:fa:fe:5a:0d:67:05:ae:48:5d:64:
3c:26:53:08:46:81:ba:17:76:55:2d:1e:a0:79:ce:79:0d:10:
ea:e0:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:20:04 2025 by rpki-client