Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: K/XzQ1YyZD6iadjd1A8SXvMFomofx/C4bVquE70UvMg=
Subject key identifier: F9:5B:02:35:FC:7D:B8:8C:60:71:1B:CC:1D:8C:CE:05:24:74:E4:C9
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 0199FD340BA480D195F463DD4EEDB36816A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:10 +0000
Manifest this update: Sun 19 Oct 2025 16:01:10 +0000
Manifest next update: Mon 20 Oct 2025 16:01:10 +0000
Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: /oE2cI5jBalWNx2o/iOF3Csa0emWzVCunJIEgIj+KRw=)
2: HMJLEkPGlr7x44aeMyDl-iD3-H0.roa (hash: L+qMMZpme30javZoQJKYZdKfiPeTzWKpuVRpIrhWgDs=)
3: Ti73dcIrlh5auWtScVzVwqOqQSk.roa (hash: bD54N27Ykt/wu2s+Dy6sKxGGg/cuSXB3DUKzM/XaSZM=)
4: YMTxPOuM97EplT8sh2WGlcFfkOw.roa (hash: D8L0sd2jitS16w93ripM0wnGDM02PZl2ly5UPGD5e0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0b:a4:80:d1:95:f4:63:dd:4e:ed:b3:68:16:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Oct 19 16:01:10 2025 GMT
Not After : Oct 20 16:01:10 2025 GMT
Subject: CN=f95b0235fc7db88c60711bcc1d8cce052474e4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fa:03:ac:b8:eb:e0:c2:f1:d9:7a:1e:29:e3:
4d:1c:ff:7e:a3:2f:b4:8a:cf:74:f3:8e:70:af:90:
20:44:aa:2a:b0:ab:cb:d0:c8:5e:fc:b2:b2:92:1d:
19:95:16:27:ea:74:72:54:7d:e3:e9:a1:87:9c:35:
e8:7a:e1:73:b0:1e:c3:93:5d:1d:bd:10:f1:be:7b:
69:ea:e6:fa:27:6a:6a:be:38:5d:21:a1:6a:92:10:
3f:0b:d9:74:72:48:97:dc:7e:b9:70:d3:66:1d:45:
55:0b:58:59:bb:d8:fd:85:fb:de:d4:b1:7d:75:66:
b6:67:e4:63:c9:a8:16:b1:65:11:bf:88:14:40:2e:
72:df:d2:04:a1:35:44:28:e6:e2:76:db:3e:da:c4:
32:73:d5:68:83:7b:53:bd:ba:1a:ec:1d:33:8c:82:
a8:4e:61:13:94:fb:04:ed:07:dc:1e:b0:65:61:bd:
6e:cb:55:9b:f4:2e:0a:d7:e3:75:d6:d8:b4:52:ad:
be:3f:e8:ba:72:2c:a3:89:e4:32:91:fa:75:ac:20:
c1:10:25:bb:bf:6b:1c:a0:fd:fb:cc:a0:89:cb:48:
ff:42:3d:c6:69:85:92:f2:04:30:35:8f:65:a8:1a:
ec:aa:2d:5a:b2:0b:e5:ec:d7:af:fa:34:fa:d8:49:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:02:35:FC:7D:B8:8C:60:71:1B:CC:1D:8C:CE:05:24:74:E4:C9
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:ba:e1:01:ca:0b:d4:84:00:49:45:03:18:ff:14:94:6a:
6b:42:80:07:ca:4e:2a:0e:40:de:66:27:8f:43:1a:11:87:12:
51:f5:3e:2b:f9:16:e3:62:d6:5c:9c:73:b7:35:ca:7d:4f:e8:
7e:28:96:3b:06:a6:c6:b5:22:c2:e7:73:14:ca:a5:1c:48:19:
81:42:16:1e:53:cd:03:bd:9f:92:a9:a7:77:e2:92:50:8a:66:
62:48:90:0c:28:61:b0:5e:56:42:5a:60:5b:61:0d:6b:5f:06:
8c:c9:8d:cf:0b:f0:bc:b4:61:21:b9:e2:1c:5a:e4:5a:67:c7:
9f:7d:fe:0b:c2:cf:b2:c5:65:53:6f:8f:e3:b9:47:b2:88:2a:
9e:a9:66:ee:6f:5d:32:dc:64:2a:d5:03:6b:60:05:f3:28:96:
50:8f:13:5d:27:61:88:40:15:db:00:08:56:6e:7d:e4:6b:d8:
e5:6a:e5:2e:3f:ba:49:d3:41:dd:cd:cc:f9:86:82:3d:d3:7b:
4e:ef:b3:99:09:3d:6c:d1:6b:03:77:3f:29:d9:7e:37:ef:5e:
00:2f:00:a5:50:e7:1a:9e:b6:56:a0:bc:32:49:f4:44:7c:8e:
9f:16:b1:a3:32:8d:15:7a:73:32:8a:fe:48:ab:1b:36:3c:ef:
82:a3:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:36 2025 by rpki-client