Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
File: 0dI-JBGcupM36DRmSFv7EGsuJLY.mft (raw, json)
Hash identifier: uJxKEuAeWd7jEm6dqfk8dqNTSM9bKjUcdM5cSWbPmg0=
Subject key identifier: 53:CF:DB:28:65:1B:EF:21:82:67:54:0D:14:0E:F2:E6:6A:B7:77:C8
Authority key identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
Certificate issuer: /CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Certificate serial: 0199FC8F7E2E55FEAAF3BDC6CBD95F4586E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
Manifest number: 012A
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: 0dI-JBGcupM36DRmSFv7EGsuJLY.crl (hash: xLuVH7mOJQ1rn/aF/OJIYqd4+k5VjGUbzRf4XRr67lc=)
2: M-IfQdJ5pbgcbSVbmMmO8aaPrAY.roa (hash: XwGRnAxf2Tdx5V01T06WDZvLLVmv2uRnErY5moi+5Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7e:2e:55:fe:aa:f3:bd:c6:cb:d9:5f:45:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=53cfdb28651bef218267540d140ef2e66ab777c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:8a:c4:bb:d9:ae:03:84:74:99:dc:a3:28:
f3:54:06:f7:79:7a:4c:9e:ec:ff:6e:61:8a:e8:52:
28:ff:55:d2:91:40:c1:95:b4:8d:14:81:59:9c:58:
d9:03:71:0a:a3:7e:81:12:37:37:5e:08:cf:77:09:
24:fc:ec:6f:81:dd:34:ad:bf:67:7b:8f:d2:cc:b7:
35:ed:b3:61:43:ab:db:6c:8f:7a:1d:49:d9:99:05:
88:1f:3f:34:4d:2b:bc:fa:f3:ab:9c:16:70:0e:75:
94:97:f4:60:8b:1a:80:bb:b6:03:5d:05:3f:02:17:
17:3a:8e:c9:69:5b:24:d7:54:08:3a:59:29:e9:6e:
f1:30:79:1e:03:be:8b:17:fa:97:63:f1:16:2b:05:
bc:95:96:ac:e9:23:65:2f:93:36:80:03:28:16:73:
59:bd:94:56:90:ca:7f:2f:78:5e:18:b2:eb:eb:aa:
c6:a5:53:aa:89:a4:f8:2f:85:a3:6c:23:cb:f3:70:
d7:55:de:3b:ea:ae:59:e9:86:04:66:0f:65:49:c9:
ee:cb:87:67:6a:b5:4c:4e:67:ee:16:30:f2:0d:af:
cc:db:19:52:c8:93:04:61:fc:18:f2:dc:09:ba:6f:
05:ca:c9:22:d8:c9:25:98:5e:9a:a7:fb:1c:58:60:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:DB:28:65:1B:EF:21:82:67:54:0D:14:0E:F2:E6:6A:B7:77:C8
X509v3 Authority Key Identifier:
keyid:D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:40:10:5f:0b:7d:75:42:6d:8d:50:35:8f:cc:89:5e:71:a3:
07:cd:ca:3d:6b:d5:1c:9b:eb:f0:56:78:37:d8:9c:e6:cf:96:
2e:99:8e:c0:6d:6a:d2:1a:81:c4:5b:f5:0c:f9:1a:66:c2:26:
e0:27:a0:1b:bf:b4:85:c8:80:57:eb:58:cc:b8:5c:c4:3d:80:
5c:cf:84:b6:ac:5d:f8:fa:71:12:54:69:e8:fd:1c:35:c7:c6:
0c:d4:47:73:4a:40:5d:bb:c7:36:20:33:b5:a3:37:c5:c0:3e:
78:09:58:f8:21:76:87:44:bb:cc:0e:ba:ed:84:93:93:11:83:
6d:4d:55:18:a7:9c:ae:9f:3d:1f:e2:a7:5f:8e:b6:85:54:9d:
45:23:3e:1b:56:3e:89:a6:1e:2b:49:fd:c6:fa:2e:4b:f6:2f:
1f:37:dc:b2:c3:ad:aa:57:d4:e2:8d:d6:4b:97:9a:41:a4:55:
9c:76:ad:19:91:b2:96:50:5b:16:c1:32:1c:d1:ce:7c:5d:a9:
df:a9:74:6c:ed:bf:18:67:b4:d1:4f:29:26:4d:da:83:63:7e:
8c:21:f3:88:bc:96:b2:99:0a:41:e0:a5:21:25:92:8e:01:66:
93:b7:31:2e:cf:92:00:66:e4:49:22:53:59:c7:f3:54:3e:39:
aa:a4:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:18 2025 by rpki-client