Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: foW/OpAB/BIBlXDPNYyLe8zRyVeYTRs3PU6qgM0JofY=
Subject key identifier: 62:52:D9:20:DD:BB:F7:D6:F7:48:51:99:4E:08:D0:F8:D2:EB:10:B2
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 0199FD3461CECD385694FE6CF5080222E00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: wo99bZZxKfKK5qmLurwMwOchJE2q9jkbicWly1a3WdE=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:61:ce:cd:38:56:94:fe:6c:f5:08:02:22:e0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=6252d920ddbbf7d6f74851994e08d0f8d2eb10b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:7c:be:7b:97:c7:09:cb:8b:bb:88:5c:dd:
a1:88:04:61:f2:a9:c7:8b:d3:f6:f9:4f:f4:84:39:
e5:ff:57:2d:c5:bd:de:50:fd:fe:88:a1:23:7c:8b:
99:3b:75:dd:45:28:99:b8:c0:e3:0d:e8:90:f5:ee:
3b:ae:71:09:8c:33:46:cc:0e:8f:50:21:fe:6c:33:
f1:50:f2:6e:d0:67:0e:c6:20:32:d7:30:36:e0:0a:
3d:1e:96:ca:11:25:64:81:90:d1:5e:43:c9:db:76:
b7:32:9c:6a:dd:14:d1:2c:bc:92:94:99:95:77:cc:
b0:89:f3:3f:59:01:df:91:b6:79:6c:f6:e9:b6:1e:
5b:d6:09:61:d3:28:50:8e:8e:2b:dd:9f:eb:26:8c:
46:08:9f:ec:73:75:7c:b4:b5:0f:a6:80:7e:1c:bf:
9d:9f:37:a5:7d:95:40:f7:64:d4:f4:fd:00:78:cd:
04:df:fa:a2:6b:31:4a:df:0c:ee:4b:97:0b:75:23:
55:32:7b:4d:b2:20:e7:56:1d:44:24:ed:2b:bf:08:
b6:e3:91:fe:2e:29:61:42:ec:a4:d1:89:c1:95:52:
32:36:f4:a2:02:8b:9c:15:4e:64:d6:c8:ae:e6:80:
e9:a1:19:7d:56:74:5b:5c:11:b8:77:22:92:94:76:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:52:D9:20:DD:BB:F7:D6:F7:48:51:99:4E:08:D0:F8:D2:EB:10:B2
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4d:07:db:0d:69:ff:ce:9b:de:30:2d:82:16:05:3a:a6:31:
11:55:89:d6:4b:a2:24:00:a6:13:be:42:93:6d:c6:c8:c5:48:
64:77:4f:8f:b6:6e:45:cd:ef:75:97:cd:41:5a:06:41:2a:c7:
31:68:28:02:5f:4b:31:8e:59:bb:c1:cf:36:5a:48:91:7e:2b:
a1:0e:cf:19:13:1d:27:fc:31:98:4b:31:2c:00:97:95:44:74:
8d:d3:e7:2a:7f:66:c2:45:6f:af:fe:75:68:74:f1:62:b9:17:
a1:79:6c:99:de:1c:2a:31:4e:bd:ee:90:75:7c:0d:a9:4b:93:
c2:71:7e:f0:d9:4d:94:76:c0:6b:70:98:54:db:73:8d:aa:6a:
1e:1b:f8:30:3e:de:d0:88:43:dc:f8:82:e8:37:a8:89:22:ab:
fd:ff:b3:4f:08:75:65:26:a6:1d:bf:2c:c6:fc:d7:bb:42:a3:
81:54:ef:91:b6:91:39:1f:2a:56:6d:38:52:f0:b2:f3:59:15:
cc:27:5e:72:0a:10:ca:8a:50:68:8c:5a:93:7a:b8:50:35:70:
2a:11:9b:c8:1d:14:01:dc:6d:fd:6a:bc:97:a6:8a:2a:fe:ac:
a3:9d:47:1d:97:12:24:65:a5:9c:60:73:b0:b3:af:17:9b:f9:
15:c3:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:32 2025 by rpki-client