Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File: 0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier: 6spUrWsKJOfSJ1TvmnhKvgrE8VD++/NpGW3hZJQYRVY=
Subject key identifier: 9A:75:AC:47:B4:BA:7C:BC:F1:D6:62:B0:47:08:F3:97:50:F5:CB:A3
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer: /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial: 0199FBEA85F254B0D82E8CD41F7EF630E947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number: 0AEE
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: Amn+JSpLoYiOF7dtx97SugQf0B7f4b7aUOwUHiHZxGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:85:f2:54:b0:d8:2e:8c:d4:1f:7e:f6:30:e9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=9a75ac47b4ba7cbcf1d662b04708f39750f5cba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:0e:b2:3d:a8:a5:e1:a6:46:e2:6c:36:ff:
c8:6c:df:fc:2c:9a:ff:38:a0:7a:d4:9f:31:ff:ce:
f5:77:0f:1e:1f:c2:9f:1e:fa:ba:59:1d:7d:6d:f1:
e9:4d:1a:54:70:d7:e5:10:95:3f:76:0b:30:63:29:
12:7f:e4:27:46:67:ef:4e:4d:a8:19:8c:00:af:41:
ae:b2:ad:e6:08:0f:77:19:9b:83:f4:80:f9:94:52:
8f:c1:a5:d3:80:a4:e9:a3:2b:56:c4:73:c6:e0:0c:
91:49:cf:fa:f3:55:16:ba:06:cb:c3:77:d0:f2:49:
2b:a3:33:3f:22:3b:11:07:07:7e:af:f2:1f:27:e4:
44:56:55:93:21:76:fe:5b:c5:a1:93:d3:c3:1f:c4:
20:de:51:8c:93:94:bf:57:cf:ee:c9:c0:dd:1e:05:
50:67:53:7b:88:9f:cf:49:06:3b:3b:a4:70:11:67:
2c:8d:b3:20:99:65:c3:49:a8:c2:25:d3:d7:3e:fd:
44:3f:5c:7a:87:e2:f6:49:32:f4:e4:ee:dc:f3:5b:
39:17:2f:b0:97:7a:f7:86:24:b5:ce:4c:cc:23:c1:
2b:da:8a:6e:75:31:53:c9:1b:3d:99:38:8b:02:a0:
a1:52:b2:4f:80:97:a0:4a:85:d2:12:80:d8:07:1b:
80:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:75:AC:47:B4:BA:7C:BC:F1:D6:62:B0:47:08:F3:97:50:F5:CB:A3
X509v3 Authority Key Identifier:
keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ac:bf:9d:8d:bb:16:fa:6c:39:3b:a3:6b:64:63:b7:bd:3f:
e9:2d:3a:cd:a3:48:69:49:f7:b5:0d:93:03:3d:03:f6:3f:9a:
a1:77:12:27:d4:e4:86:aa:9f:80:b1:47:3a:57:78:38:09:ff:
3b:df:c8:de:20:0f:5b:64:64:1c:66:42:6c:8e:f0:ae:7f:7e:
24:77:85:12:74:4c:24:01:34:ab:7b:8c:2f:72:85:18:32:f8:
42:73:f6:21:2a:bb:4b:02:06:48:ef:be:89:e7:8c:62:40:38:
0e:8f:5a:97:1b:f8:0f:d5:83:ce:da:2b:9f:4e:61:7b:ed:77:
2a:53:d9:f2:8e:46:82:71:d5:7b:56:5b:98:54:f3:15:a2:10:
85:0f:6b:d7:e7:72:38:77:56:1a:78:07:f0:e7:8b:23:ad:d3:
a6:54:5c:84:10:4f:52:62:8e:9d:b4:e8:59:3d:71:d6:98:1f:
69:57:56:6a:18:49:b2:c0:2f:52:c1:06:b0:ca:64:4d:74:d6:
5c:0e:ac:90:b4:e3:f9:80:21:4e:8c:d6:0a:38:ed:f7:19:12:
7d:00:6c:28:1d:80:d6:5f:9b:56:40:b2:26:d8:df:e5:19:ff:
75:1e:2d:a3:c4:76:22:db:72:7f:5a:79:49:17:77:82:54:fb:
6e:78:da:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:23 2025 by rpki-client