Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: Yo53Gi9QDhn8SoHeOW3i7ZT0gxWHuoWj9GKdDH843d8=
Subject key identifier: 79:D5:45:0B:A0:8F:A7:2D:27:A1:0D:6F:36:18:5E:89:86:44:38:24
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 0199FEB4E79AD94FE184FB71BB74556ACE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 0F95
Signing time: Sun 19 Oct 2025 23:01:32 +0000
Manifest this update: Sun 19 Oct 2025 23:01:32 +0000
Manifest next update: Mon 20 Oct 2025 23:01:32 +0000
Files and hashes: 1: 0E7XqwXvQw8zGg6cfEDvAxEUfw4.roa (hash: GEurlnwNp4FPEWbJDU+gHsQep+536ZgKzEj3iyCeYrM=)
2: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: uQswzlRY6FKK3u10eEbIKC0e75nSYOhe15kHIGNhy5U=)
3: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (hash: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:e7:9a:d9:4f:e1:84:fb:71:bb:74:55:6a:ce:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Oct 19 23:01:32 2025 GMT
Not After : Oct 20 23:01:32 2025 GMT
Subject: CN=79d5450ba08fa72d27a10d6f36185e8986443824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:84:f2:01:99:12:b7:1e:a3:b2:5f:40:71:
85:19:75:50:fd:8b:01:89:51:3d:bb:8c:9c:05:50:
3d:a0:08:d3:68:39:0c:87:40:32:64:1f:7a:4e:65:
c2:6b:27:c9:9c:29:72:db:d4:b1:3b:37:49:34:c7:
66:d1:bf:99:01:46:53:00:eb:f6:b2:09:28:d9:4e:
1f:8c:8c:fd:54:0c:40:48:b6:bb:02:c4:57:ae:26:
16:ff:1b:f3:68:00:62:92:16:be:50:b2:6a:82:c2:
e7:7d:77:00:e4:9a:ed:42:75:43:1c:67:2f:d6:2a:
e4:67:20:49:29:4c:57:9b:e4:3f:2b:c1:26:a9:b6:
89:4a:9e:eb:df:47:7c:3d:6c:c3:f1:ca:d3:c9:50:
20:78:36:6a:2a:d5:e2:8b:b2:29:81:59:e4:09:ad:
12:2c:b3:c5:15:63:24:f5:4f:d1:c6:1c:f6:18:5e:
d1:5a:f3:72:cb:83:35:23:62:7d:e1:0b:38:55:ad:
ab:04:9f:c2:ea:e9:b5:a0:b2:8a:4e:e4:d2:b7:0b:
99:5a:0a:b2:b0:fa:ed:84:e1:58:73:5e:8e:94:5c:
db:85:70:f0:46:69:ca:4d:e6:22:fd:c4:73:db:8a:
fe:31:be:27:d7:dc:46:9a:39:2b:72:a6:a0:10:c0:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D5:45:0B:A0:8F:A7:2D:27:A1:0D:6F:36:18:5E:89:86:44:38:24
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b8:80:df:5c:a0:d5:50:d8:a2:ac:0e:8e:d5:41:3d:8f:d7:
a5:7f:0a:20:0e:f5:78:b9:bb:cf:f7:c2:a0:08:29:fd:6a:eb:
29:59:d6:8f:ac:65:b0:48:a9:45:0d:06:85:38:e7:c6:f3:af:
98:7b:a9:8c:25:31:71:18:1b:53:0c:30:b4:d1:0c:1d:5a:4b:
9c:c6:ea:88:92:57:a9:f6:e9:f8:80:53:37:9c:bc:97:47:30:
53:9c:3b:55:bb:cc:05:ad:37:bf:44:9e:d2:45:74:6c:a7:be:
11:eb:3f:bc:5e:83:26:22:a4:cd:a4:a4:37:a7:fd:c3:cc:77:
02:91:10:17:db:b7:2b:c3:53:0d:72:dd:dc:5e:50:19:80:88:
20:84:33:ee:15:97:cb:94:bf:8a:8d:80:1c:e2:6e:3e:49:ad:
e6:e4:58:d8:dc:66:0c:c1:36:a5:e9:19:10:83:6c:f9:89:1a:
10:8c:9e:c0:cb:66:1e:73:ea:5d:3f:24:9d:60:a8:09:2e:1d:
1f:6a:63:0b:96:2a:25:c3:14:c6:67:14:7a:40:79:12:cf:b2:
b6:5d:6a:69:4f:a2:af:e7:17:bf:b1:17:76:42:3d:c3:69:18:
a3:a8:27:3c:c0:a6:42:a4:80:81:55:75:60:47:f1:54:56:d6:
00:2a:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:46 2025 by rpki-client