Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: xcmF2DZ63N96URD1+WfFG2rCh5kEqYX1TyJBFuyCzR8=
Subject key identifier: A9:F3:6A:15:D4:E4:F1:6B:83:A6:25:EA:09:E5:12:62:85:2F:1B:0F
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 0199FE104B15ACFADFEA5D3C4CB4BE80BDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 09D5
Signing time: Sun 19 Oct 2025 20:01:44 +0000
Manifest this update: Sun 19 Oct 2025 20:01:44 +0000
Manifest next update: Mon 20 Oct 2025 20:01:44 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: /t5TogobzaOrZsZQwcW3ipTZEMufBikM31Lc7G85Lg8=)
2: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (hash: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:4b:15:ac:fa:df:ea:5d:3c:4c:b4:be:80:bd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Oct 19 20:01:44 2025 GMT
Not After : Oct 20 20:01:44 2025 GMT
Subject: CN=a9f36a15d4e4f16b83a625ea09e51262852f1b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:57:0d:71:46:04:6b:0d:71:04:7b:5c:1e:
52:2a:e5:54:2d:70:69:e0:30:6c:33:e5:1e:47:cd:
2d:2c:ce:20:d1:91:a1:09:7b:bf:76:69:a4:cc:8b:
4b:ee:1e:3d:a7:e9:cd:ab:e4:af:5d:17:33:c2:b6:
1e:7b:36:4d:b9:f3:87:e0:e0:ff:c7:b5:3c:88:81:
55:a2:8f:49:8d:d6:7b:f8:a7:44:fc:6e:c5:da:63:
8f:ed:e1:38:46:ed:cc:fb:cb:b8:6a:45:17:85:84:
57:97:3c:1e:69:90:e4:d7:a8:f3:ba:b8:68:7e:85:
83:8b:5a:a3:21:8d:2f:d3:82:d3:f6:3a:fb:de:ec:
a1:b7:21:55:0b:8c:2d:16:ba:5e:e0:2b:6f:6c:91:
4f:8d:3a:9f:6a:f7:ed:ea:51:d8:f5:ac:1b:15:51:
99:1f:89:65:ce:1c:4a:13:0b:57:ac:49:6b:5e:05:
db:24:c4:0f:c3:b2:5e:77:e0:71:28:b4:23:37:5b:
53:83:37:19:6e:90:8d:fb:57:9b:71:b5:1c:22:db:
01:8e:9d:96:37:4d:da:a7:9b:af:33:59:d7:4f:43:
4b:12:6c:12:3b:ca:ca:74:a8:98:0a:d1:ce:71:af:
68:06:56:cc:cb:3f:da:71:3d:f8:bd:d3:10:48:14:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F3:6A:15:D4:E4:F1:6B:83:A6:25:EA:09:E5:12:62:85:2F:1B:0F
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ed:9a:fe:dd:c3:cb:0b:97:29:77:23:85:da:5e:03:40:da:
c4:31:43:2f:2e:4c:78:01:d8:52:1c:31:d5:35:d9:1d:60:1d:
50:74:33:94:1b:93:7e:95:26:25:da:52:27:8d:c6:3e:10:62:
83:39:37:51:6a:b6:c6:16:6a:3c:9d:57:9f:d5:5d:4d:fa:24:
16:8c:6f:81:b4:1f:36:f6:63:db:86:57:87:7d:ad:22:65:e4:
de:fd:df:7d:00:ad:e1:0e:4b:10:87:e4:cb:ba:6b:07:17:6f:
6f:55:44:64:ae:d4:b7:a3:ad:a0:2f:a6:e9:e1:a2:69:08:01:
1d:4e:b9:28:88:9c:d4:9d:e3:f2:42:3c:dd:37:ec:a3:ef:c6:
ce:b9:3d:1d:9c:7f:3d:62:59:5e:06:69:ae:cd:1b:be:bf:8a:
f6:f2:e5:0c:84:43:db:54:9d:07:72:22:38:f7:34:3b:2d:91:
db:df:ef:a2:75:26:04:aa:b7:88:87:26:dc:fc:4d:01:e6:50:
df:3a:94:c4:f2:f6:5b:9b:82:15:b0:f1:30:17:13:e1:f6:3c:
5f:bb:33:b1:d6:77:e6:79:9c:d5:13:a7:5b:dc:d1:21:7e:41:
50:88:5d:06:a5:1d:02:bc:14:cd:23:32:28:a1:bd:e4:d9:cf:
e1:9e:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:31 2025 by rpki-client