
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft (raw, json)
Hash identifier: 6j4IoLJwWLkO/vfaa6Qu702QzToi9fjLJxQEcL7N7QY=
Subject key identifier: 0B:65:A7:AF:7E:DB:28:36:88:82:CF:5F:AE:4A:14:33:1D:CB:CE:84
Authority key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
Certificate issuer: /CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Certificate serial: 0199FC58C72899EDF7967DC375C268199F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
Manifest number: 0B43
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl (hash: wsxcYaOaFGtxqxQNcxL20xqoZP+1Q0tRcaUCye+eOCg=)
2: my3o3dT-eplM7qhNIqgkY-xUMAU.roa (hash: FEhLISLzUVk+az2cUSg9otpj4LY6SNS67CMNyG2sJTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c7:28:99:ed:f7:96:7d:c3:75:c2:68:19:9f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=0b65a7af7edb28368882cf5fae4a14331dcbce84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:aa:11:7c:60:0f:b3:68:e1:c3:cb:ff:14:
7e:03:d3:13:c4:d3:11:f4:7f:be:09:70:e4:df:f3:
bf:a6:35:6b:9d:1b:25:49:01:d6:68:86:4f:85:8b:
ac:59:f9:b8:29:c8:b4:59:fd:d9:a8:5f:dc:d0:cd:
60:b2:b0:cb:4e:64:13:0a:e9:21:aa:cb:ad:57:b3:
e6:e8:c7:69:9a:19:e9:3e:f6:65:47:6b:64:82:7a:
e1:da:ac:d9:c9:00:91:18:64:ce:6b:d6:dd:34:0c:
31:87:84:d1:17:e2:30:85:2d:71:11:06:35:ab:c1:
06:08:12:6f:39:65:33:8a:1f:00:4d:1f:d1:ea:d8:
a9:55:70:35:55:1a:e3:80:bb:9d:d4:5c:2d:f1:be:
42:0a:68:18:d4:24:e8:c2:76:18:70:5f:d7:97:ac:
2c:08:fa:88:ec:58:21:d4:7f:d1:16:fb:61:ef:25:
54:16:70:c9:d9:53:fe:02:68:55:a2:d1:fd:cd:17:
b2:35:77:a6:1e:4e:cc:b2:b4:17:80:14:7b:5a:dc:
63:f5:06:78:62:53:0b:db:aa:44:98:94:f7:47:c4:
90:d0:d8:59:44:b7:a1:c2:e7:23:39:82:d9:04:9e:
41:c5:d4:66:77:49:7d:28:ea:22:a0:c7:86:f1:eb:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:A7:AF:7E:DB:28:36:88:82:CF:5F:AE:4A:14:33:1D:CB:CE:84
X509v3 Authority Key Identifier:
keyid:D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:bc:25:4d:fc:a3:61:81:39:d4:e0:1b:0a:96:b4:6c:76:4d:
60:2a:70:59:e7:de:97:d5:0c:ee:04:e0:4f:ad:02:6e:a3:f3:
62:52:09:20:24:35:08:a5:89:d3:8f:a0:be:d4:58:f7:ce:74:
bd:4e:89:c8:c1:d7:ee:f8:f2:f4:cf:3f:79:e8:99:8d:92:f8:
09:1b:5a:84:22:5f:15:a8:ab:cf:4e:b5:8c:da:20:7b:e0:3e:
99:da:11:60:69:6b:c1:08:97:30:4a:5e:a8:90:ef:36:66:6e:
8d:b1:81:aa:52:07:1c:d9:36:5d:9c:d2:9d:ae:34:96:fe:5d:
3c:a2:52:49:9e:9f:06:71:c1:db:bb:e3:4e:f6:36:35:fe:91:
48:b0:53:7d:99:08:0d:c8:14:3f:c7:bd:c2:40:4c:ab:72:b4:
49:c0:db:86:e4:7a:74:70:45:89:00:86:b1:27:cf:1d:3b:c0:
3a:63:49:c7:9c:58:52:91:f7:dd:f9:0b:c6:3b:f6:c5:8e:e7:
25:3b:ff:5f:84:26:dd:aa:77:f4:1d:69:e3:78:f2:9d:f6:f1:
87:c5:6c:fa:f8:0f:85:8b:bb:00:a0:8d:a3:20:72:7d:4a:d2:
42:58:6d:44:19:f1:2c:d2:4d:ec:0f:ba:c2:19:72:1a:74:e5:
48:92:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:38 2025 by rpki-client