Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: zq9WbjD8KTsv8GIGFRlDQHKnWpcUQy8d40PInUN69Kk=
Subject key identifier: 06:23:EA:1B:04:13:13:51:15:8B:45:B8:12:B5:C1:80:19:08:AD:A4
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 0199FBEC100C2BE727AB1E7325FEBCA5F520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 0578
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=)
2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: f0720Zsv2zePAZw7t3YJBdR54UiMspAmhFIHr3raOJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:10:0c:2b:e7:27:ab:1e:73:25:fe:bc:a5:f5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=0623ea1b04131351158b45b812b5c1801908ada4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:bc:2f:28:de:75:1d:5c:20:fd:16:80:bf:
1e:41:a1:31:10:88:c9:cd:4a:d7:7b:0d:97:74:1e:
8b:6f:7a:64:02:33:31:6e:d6:29:dd:90:1f:b9:50:
b1:d1:96:05:cf:ea:e3:72:11:99:ed:dd:a0:22:02:
0e:bc:d1:af:05:b0:d5:0a:48:9a:0f:a2:b3:20:96:
d4:72:d1:5e:82:f3:1c:92:d6:e2:04:5f:57:4c:83:
56:20:13:be:6d:dd:c8:af:56:9d:5d:77:a5:f2:ca:
de:4c:a0:8f:a4:ff:e1:e7:fb:f3:94:cd:a7:c5:76:
bf:2e:8a:08:c9:90:48:1b:ad:60:e5:46:bc:1b:b8:
31:d1:d3:a5:87:5c:a8:c0:dc:57:3c:b4:04:e4:68:
3b:c0:9e:55:ee:28:ef:e7:cf:fe:1a:f4:3d:69:cc:
1f:01:87:d0:4c:2b:7c:e1:d4:4c:15:61:51:81:0d:
14:f3:3f:ba:e8:34:ed:0b:70:af:2c:4c:8b:f6:2f:
9a:65:6a:a6:fd:09:4d:a7:90:bb:75:86:47:48:46:
c1:b8:a0:96:fd:c6:4b:83:96:4d:34:5e:ac:f4:78:
73:22:9d:a7:5b:f5:59:f8:e6:11:81:23:b6:c3:e0:
8d:94:97:ca:6d:e3:da:43:cf:cc:6f:8a:c0:be:8b:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:23:EA:1B:04:13:13:51:15:8B:45:B8:12:B5:C1:80:19:08:AD:A4
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:92:91:cf:9c:b8:25:02:b9:a2:1c:08:f1:42:7f:fe:54:68:
14:c9:c7:59:28:ff:ec:c8:ea:12:e6:2f:2b:d6:ea:ad:76:73:
14:e3:d6:4f:d2:e1:79:3a:52:e0:57:13:7a:8d:6a:bd:fe:1d:
bf:86:3d:fa:33:0c:8d:f0:92:ff:d1:18:f4:c2:3f:67:eb:69:
d1:62:5c:fa:9e:a3:52:b3:dd:1a:f5:f6:c8:a5:c4:fb:75:10:
d7:3b:78:cd:28:48:c8:06:a6:79:64:93:3b:f1:47:f9:2d:9a:
5d:df:bb:15:31:4d:66:63:7c:62:20:37:be:7b:51:d1:72:2b:
bf:99:30:d9:4c:26:a6:56:0a:28:90:6f:2c:46:cd:6a:31:65:
90:a0:44:f9:96:e3:27:56:17:f5:55:b3:c5:48:7e:76:94:34:
29:8f:f8:97:48:0f:42:6f:bc:4e:b2:fe:00:57:03:dd:be:2e:
82:e8:64:f8:98:df:23:b5:ff:22:b0:65:f4:06:bd:f9:b0:1d:
36:44:76:ac:6d:67:77:91:db:90:8a:01:0f:d2:cc:3a:bc:67:
c9:58:56:06:98:9a:3a:e8:b8:ad:89:f5:91:45:4d:a7:60:9d:
63:79:9f:83:71:01:91:90:2d:9d:df:73:ed:84:d0:5f:db:df:
55:33:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:49 2025 by rpki-client