Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
File: 0vONSutNAojbuFTR6uC9itP4Qfo.mft (raw, json)
Hash identifier: AykWhdYKFfXMg86AcjjjPI6ul3IeRbvtLelnqAbJWf8=
Subject key identifier: 32:E1:A6:CB:DA:F4:3F:19:EE:2E:AB:CA:74:D0:12:06:7A:9A:C1:65
Authority key identifier: D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
Certificate issuer: /CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Certificate serial: 0199FAD83E3B6118B34736537E3912403FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:39 +0000
Manifest this update: Sun 19 Oct 2025 05:01:39 +0000
Manifest next update: Mon 20 Oct 2025 05:01:39 +0000
Files and hashes: 1: 0vONSutNAojbuFTR6uC9itP4Qfo.crl (hash: eHnnQvylUIRclA6gpvJjrhLIv16t7Iz5e2oVlJyHeas=)
2: ERnL-2TcZrO4tJF-sDDaVNlMYnY.roa (hash: +H0qLZUs9MIqoA3GO45JQCdAhU27Z3D/QbaTtfRGmIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:3e:3b:61:18:b3:47:36:53:7e:39:12:40:3f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f38d4aeb4d0288dbb854d1eae0bd8ad3f841fa
Validity
Not Before: Oct 19 05:01:39 2025 GMT
Not After : Oct 20 05:01:39 2025 GMT
Subject: CN=32e1a6cbdaf43f19ee2eabca74d012067a9ac165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:74:4f:66:f2:d7:e6:97:d4:13:75:d3:7c:
6d:cb:6d:5d:53:b3:3c:8b:43:b7:ed:c4:0b:05:c6:
27:f9:37:55:fc:d3:7b:25:88:a3:65:05:6e:87:16:
b2:09:86:ed:ba:1b:95:b0:44:49:db:3a:8f:a2:d3:
7e:40:59:e3:c4:c4:1c:7b:17:b3:02:c7:30:9d:6f:
d5:96:db:5b:dd:f6:f6:cf:e6:ee:d3:e1:87:8b:cb:
a7:e6:16:66:d1:46:f6:46:6d:fd:47:30:cc:13:7f:
e7:6a:eb:68:a8:ff:09:52:b8:f0:b9:63:8c:ba:1c:
76:14:eb:af:a7:2f:6b:54:17:53:28:d8:08:04:9d:
0d:c7:29:fb:29:52:88:c0:0f:5a:a5:5a:3b:3a:72:
a9:3f:3a:fb:19:a1:fc:89:cd:95:d0:da:38:c5:a3:
28:d1:1b:50:9c:15:d5:72:89:0d:64:56:43:7d:7c:
2a:53:4b:e4:41:f4:f2:5b:4e:a1:e6:31:8b:3f:96:
f2:53:b5:1a:50:7f:fc:89:72:d9:f0:86:a4:cc:8a:
e4:ec:a2:8a:9f:d6:93:6b:ab:d3:ba:b3:41:f4:0e:
a5:9e:d1:49:5f:6e:b5:99:bb:ad:5b:42:16:f5:6c:
46:cc:3a:1d:aa:c6:37:a4:e3:9a:01:a8:c5:e4:e5:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:A6:CB:DA:F4:3F:19:EE:2E:AB:CA:74:D0:12:06:7A:9A:C1:65
X509v3 Authority Key Identifier:
keyid:D2:F3:8D:4A:EB:4D:02:88:DB:B8:54:D1:EA:E0:BD:8A:D3:F8:41:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vONSutNAojbuFTR6uC9itP4Qfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/48ef27-5858-424b-add1-0f6455f05276/1/0vONSutNAojbuFTR6uC9itP4Qfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:20:26:4b:a1:70:2b:af:ac:cb:b8:4b:3d:d2:51:dc:5d:5c:
cd:12:19:20:d0:35:02:50:e7:0d:12:cd:0c:8f:31:99:b4:64:
3e:0b:82:2a:ff:ac:5a:e2:00:93:9e:94:49:eb:2d:32:6c:ef:
33:1e:0d:0d:41:39:a7:ef:fb:88:46:42:3c:e6:89:db:43:a8:
a2:be:b8:ef:09:97:17:48:06:02:e7:61:6e:63:39:62:d4:7e:
dc:4c:06:b2:97:15:3f:cb:7a:f0:b4:0e:66:4a:d3:ff:ce:f9:
3d:83:3c:cb:27:fc:7e:70:27:ea:88:25:10:96:64:30:91:ab:
ff:6f:22:a2:8d:ed:d2:8b:d7:e3:1b:9b:ac:66:1b:8c:17:94:
5a:c0:08:e7:1c:01:00:1b:4b:9f:f6:b3:db:1a:bf:f8:d1:f6:
6f:14:0d:a1:88:45:6b:11:9e:2d:10:d9:66:54:87:1d:3b:1e:
6f:c6:f2:34:25:fd:67:1b:6d:c6:99:a3:af:60:66:ff:85:5d:
79:9a:10:93:0c:35:47:ca:98:b3:04:24:84:54:9f:6a:44:d2:
1c:44:77:0d:53:73:de:b3:5f:dd:2a:6c:2b:cd:41:93:80:40:
c6:bb:90:f9:af:f3:0f:d5:04:e3:b7:3b:8b:d6:1a:13:53:c9:
9f:c8:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:28 2025 by rpki-client