Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
File: 0JTrDpiYeirfj5WgPnhlmRogGFU.mft (raw, json)
Hash identifier: OS84CJ1ZQb/qtl2ZLjMs7ZExGuhvSnDuM/R4vm6SxQg=
Subject key identifier: CC:5F:CF:8D:67:49:A6:C6:C9:4F:BF:62:E7:7E:BC:74:FE:38:FB:47
Authority key identifier: D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
Certificate issuer: /CN=d094eb0e98987a2adf8f95a03e7865991a201855
Certificate serial: 0199FFFE9FBBCFB2D9DA8D9A936172F356A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 05:01:41 +0000
Manifest this update: Mon 20 Oct 2025 05:01:41 +0000
Manifest next update: Tue 21 Oct 2025 05:01:41 +0000
Files and hashes: 1: 0JTrDpiYeirfj5WgPnhlmRogGFU.crl (hash: XuP9WTFBiS7wLqryfDx41lqHCYIc+vj6o7uOGnLS+08=)
2: zWlbMie9smiEiWEP03iooF2NKYI.roa (hash: i3CosfERz9PWPOxFmY5jsq43lJm4fTA/Cty1Zgq6vks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:9f:bb:cf:b2:d9:da:8d:9a:93:61:72:f3:56:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d094eb0e98987a2adf8f95a03e7865991a201855
Validity
Not Before: Oct 20 05:01:41 2025 GMT
Not After : Oct 21 05:01:41 2025 GMT
Subject: CN=cc5fcf8d6749a6c6c94fbf62e77ebc74fe38fb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:ec:6e:07:f5:63:8e:79:f5:b7:d2:d8:77:
ab:dc:ad:24:bb:7f:bd:21:2b:c7:f8:f4:66:f4:5b:
a2:c9:89:28:d4:12:3b:e7:e7:a1:87:4c:b2:12:96:
a9:d7:85:0a:b3:24:6a:8d:53:a3:0e:86:4e:f7:b1:
2a:4e:f0:99:6d:6e:22:ee:ef:74:be:43:47:66:62:
3a:98:9d:3a:a6:5d:eb:37:7b:6f:8b:5e:fd:88:f2:
4f:d6:52:ce:38:2d:97:a5:d2:dd:82:1e:d8:bb:b0:
69:77:6d:f2:c7:7d:74:71:90:b0:3e:bc:09:2d:cb:
b3:05:f2:ff:84:a7:c1:ac:16:a4:dc:8f:0e:bd:18:
21:b4:ac:e1:3c:0f:d6:30:22:64:34:2f:79:d4:45:
68:1f:72:9d:2d:d6:26:76:8b:9f:c4:73:4f:2c:f4:
c4:27:ed:7f:7a:e1:c5:1d:0d:1b:94:5d:35:02:81:
cb:56:0e:63:85:2f:8f:dc:40:6b:8b:f3:34:17:12:
f9:0b:86:7a:a5:2a:8b:a1:8d:ad:62:89:02:05:ce:
b3:58:5f:db:d6:28:f0:eb:76:14:31:2d:93:e1:5f:
9f:ad:5a:3c:50:a6:99:00:29:a5:cc:55:c2:1a:26:
5a:fa:41:40:fc:ab:23:2e:46:c6:2b:f3:88:f9:f5:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5F:CF:8D:67:49:A6:C6:C9:4F:BF:62:E7:7E:BC:74:FE:38:FB:47
X509v3 Authority Key Identifier:
keyid:D0:94:EB:0E:98:98:7A:2A:DF:8F:95:A0:3E:78:65:99:1A:20:18:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JTrDpiYeirfj5WgPnhlmRogGFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37de59-9ca4-447e-a510-e4a86b0ffd2e/1/0JTrDpiYeirfj5WgPnhlmRogGFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1f:dc:c7:77:05:ef:15:e6:fc:d4:14:15:8d:99:eb:f7:45:
8c:78:0b:aa:94:b7:41:76:8f:8a:20:1b:da:27:8a:3d:35:a5:
95:67:de:aa:72:2b:69:fd:fd:e1:c8:69:f8:94:f6:79:d4:61:
7f:5a:28:a5:3f:e1:c9:a5:ab:43:d9:ec:ba:b8:fc:74:4b:61:
6e:d2:a3:59:64:37:b9:ea:2a:f0:5d:4a:00:5a:2d:40:22:f4:
88:3c:14:75:cb:dc:a1:1b:76:23:6d:f2:48:44:84:88:39:ae:
76:5c:ab:0c:44:a9:41:29:c6:14:fe:1a:b7:94:98:3b:e8:6e:
f2:bb:40:c2:7f:c5:17:de:43:da:09:03:80:bf:07:9a:cf:a1:
1f:87:b8:9c:11:e3:66:f0:e0:7c:c1:fd:05:8e:45:56:50:85:
3c:5b:4f:23:d3:71:0c:4e:f2:74:c6:de:bc:2f:ee:50:40:13:
4b:67:43:58:ab:a6:4a:bd:d8:43:b1:08:0a:7f:b0:b6:a5:69:
2f:ba:0b:ed:27:b1:eb:33:f0:74:37:be:85:69:f3:20:d6:00:
54:d2:7f:97:5d:a8:96:d7:45:fa:54:fb:82:9a:71:ae:59:fb:
d9:02:95:02:cf:77:e5:79:cb:89:f2:40:e8:39:f3:e8:73:38:
1c:04:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:10 2025 by rpki-client