Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
File: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft (raw, json)
Hash identifier: +3yxK/MAcJfGms/E0BDSfRIYN+5r91XMc7/aRrm8WOY=
Subject key identifier: 86:ED:B0:43:99:10:BD:EC:33:87:23:28:21:FC:25:00:B7:82:2F:DE
Authority key identifier: D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
Certificate issuer: /CN=d05b2623a39d556c50b7046d36447fb621af974a
Certificate serial: 0199FCFD42A3F74F19DC782913DCDA4D0A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
Manifest number: 141F
Signing time: Sun 19 Oct 2025 15:01:20 +0000
Manifest this update: Sun 19 Oct 2025 15:01:20 +0000
Manifest next update: Mon 20 Oct 2025 15:01:20 +0000
Files and hashes: 1: 0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl (hash: uj8Ous0gl8hD6j7ScX4j7HQQmC2VszPgYJkDyC8yIGc=)
2: YV4mxnesnEqsoXEgOeVxrXzaM2I.roa (hash: cQ3+oKEwuuiKGHKe3AeYP28TBOd1C3qmRH0uqKxLNb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:42:a3:f7:4f:19:dc:78:29:13:dc:da:4d:0a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05b2623a39d556c50b7046d36447fb621af974a
Validity
Not Before: Oct 19 15:01:20 2025 GMT
Not After : Oct 20 15:01:20 2025 GMT
Subject: CN=86edb0439910bdec3387232821fc2500b7822fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:e7:f7:e1:80:d8:2b:c7:4b:ec:fa:21:64:
a1:f3:1f:bc:3a:f6:1f:31:ea:19:5b:95:b6:bd:8b:
17:ff:6b:09:1b:9a:27:cb:cd:f3:dc:7e:79:2e:ff:
9a:e2:be:af:38:3f:36:0d:8f:6f:29:7d:22:68:8a:
8e:ab:84:47:8c:7d:f1:f3:64:78:64:11:e0:5b:af:
58:61:4b:57:8b:fd:9f:cd:d6:40:e2:77:8d:d7:c2:
a5:f5:ac:db:33:e3:8e:2c:a3:90:71:5c:51:90:1d:
63:1f:9d:90:99:2c:b9:47:85:f5:d2:e9:77:ab:91:
cc:65:4f:52:36:7a:74:6a:76:3b:e1:b9:6f:b4:35:
ac:be:21:34:29:c4:d4:52:75:eb:fe:ce:48:aa:b5:
ec:0f:1a:fa:15:55:23:6a:9d:2b:1f:99:c9:3a:cd:
3a:ca:62:7b:b9:a5:3c:81:99:da:e7:6f:2f:49:39:
c7:bd:dd:e5:81:cc:a8:e5:0a:e2:21:a4:46:9b:48:
2f:34:4f:d6:21:79:56:d5:21:d4:dd:6d:bf:74:bf:
e3:55:2c:93:b7:bb:06:2d:fd:c9:8b:d7:8d:3b:35:
97:f8:da:2b:e6:39:22:bd:bd:81:f1:56:5c:42:53:
03:be:93:f1:ee:b1:d5:da:9c:43:cf:66:92:c3:ad:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:B0:43:99:10:BD:EC:33:87:23:28:21:FC:25:00:B7:82:2F:DE
X509v3 Authority Key Identifier:
keyid:D0:5B:26:23:A3:9D:55:6C:50:B7:04:6D:36:44:7F:B6:21:AF:97:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FsmI6OdVWxQtwRtNkR_tiGvl0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a0ca76-e264-40f1-9d8a-065ca1f36310/1/0FsmI6OdVWxQtwRtNkR_tiGvl0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1f:31:7e:e8:1b:b8:b9:98:91:dc:37:ef:99:1a:3d:11:51:
d1:73:ff:0b:60:c5:c6:22:75:d0:a4:5c:e9:3b:a2:46:d3:54:
d0:2e:3d:bb:9b:41:ed:31:c1:48:71:87:d9:36:d8:d5:09:da:
03:ce:c2:fb:41:e7:3e:e7:10:4d:18:85:d2:ee:d4:fd:f2:50:
da:19:5c:8a:fb:22:5a:bd:50:23:86:bd:ba:38:cd:ee:fd:d9:
bd:6c:46:37:dd:aa:4c:3f:e6:0d:f2:1f:3b:19:25:a3:1b:2f:
bd:33:39:b9:02:27:42:82:44:6a:cd:b5:40:bd:c0:00:94:59:
48:88:5c:a7:00:8e:0e:1d:70:fa:db:1d:28:a7:f2:40:8c:9b:
34:c0:e7:ac:ab:b6:c7:cc:12:dd:f3:91:93:be:32:7c:1b:e8:
16:e5:15:ea:30:17:79:d4:7c:5a:5e:6d:8b:ec:9a:9c:df:be:
3a:4e:68:ec:69:2f:fd:71:cb:a5:b4:04:af:e5:90:28:e8:ec:
4d:ed:50:5f:6e:b2:60:73:48:3e:ed:61:f9:6b:a9:6c:7a:8f:
98:19:e9:ac:67:ee:55:30:b5:be:28:ec:b7:47:b4:a4:b8:73:
55:a6:0d:d6:35:e9:ee:0c:e4:59:15:d0:6b:0f:09:c5:cd:ad:
cf:9c:df:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:26 2025 by rpki-client