Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: MHBIlHupl8BgPlHt5PHr3iVmLpTX9Q4Q2BZWHq600Pc=
Subject key identifier: CA:31:CE:5C:1A:C5:D7:91:B1:ED:63:0E:7D:97:3B:48:3B:A7:E8:39
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 0199FC8F7D7BF1AC0FB72723C219FF28260F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 16DC
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: wF9P8F+3OQh8LSEfMa9atCXJ4K4tlh9m0zwWtVi+KaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7d:7b:f1:ac:0f:b7:27:23:c2:19:ff:28:26:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=ca31ce5c1ac5d791b1ed630e7d973b483ba7e839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:c7:71:e2:f2:f6:20:d8:58:03:0a:a8:2e:
63:53:42:d4:0c:d7:ec:c2:42:5f:3c:87:a0:33:55:
d5:e7:81:c5:2e:88:fe:c8:38:e8:4f:8b:45:2c:b7:
9b:01:0d:b4:b2:a7:13:ef:1d:66:3b:6f:66:1e:29:
bb:c8:5a:7f:cf:41:e9:61:3b:40:4e:fd:a1:2a:d9:
ba:eb:c9:7c:92:80:76:ce:17:f2:8c:2b:a7:56:53:
c9:be:16:55:82:57:8a:f2:bf:be:4c:2f:52:03:29:
03:69:16:b2:33:63:d8:ba:26:41:c8:81:aa:11:a4:
42:f6:ba:0f:9e:6a:7a:e3:78:b6:85:ec:af:04:6c:
3c:10:66:f8:92:eb:4a:39:88:86:5d:86:dd:0c:1d:
e1:2a:a9:3f:45:00:0e:39:f6:49:cc:38:19:53:7c:
88:b3:31:3d:75:d6:95:a4:ec:c3:62:b5:7d:e5:02:
f7:bb:91:04:83:8a:be:21:70:a1:3d:24:05:75:20:
ae:4f:05:25:c8:19:f3:77:86:2c:de:a9:82:ef:c3:
8d:9e:3d:31:11:e1:d4:5e:f3:56:ce:27:b0:1f:37:
f9:74:f1:1e:38:23:7c:3f:32:88:75:68:5f:99:0b:
6a:2c:09:44:79:ac:96:ce:4b:12:1f:98:b2:8d:54:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:CE:5C:1A:C5:D7:91:B1:ED:63:0E:7D:97:3B:48:3B:A7:E8:39
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:68:ed:65:51:0a:81:95:37:dc:ae:9b:d8:5d:07:20:ea:
3b:c5:47:ee:97:c2:f0:7c:c8:72:c9:d2:2b:08:b5:8b:b8:68:
7a:4a:46:1d:77:44:00:3a:91:13:2c:4d:ab:bf:39:95:ef:79:
84:96:a6:d8:e4:3e:76:7e:51:ab:b9:32:38:b5:3d:5f:87:4c:
28:89:88:e3:3b:2c:32:57:6e:d2:56:20:5b:7d:ce:26:90:a3:
d9:3d:a4:49:fa:29:81:be:91:61:79:46:16:c7:35:09:51:12:
71:db:01:dc:61:14:37:0b:a6:5b:70:2e:8e:83:a3:b3:d7:dc:
e1:90:6e:d9:7c:04:c1:b1:f6:47:73:41:f1:44:cb:c4:61:65:
bd:f9:82:1f:2b:53:f4:89:b3:e9:6c:33:d5:ce:ab:34:7f:1e:
63:ab:48:8a:fa:c7:68:67:6f:75:c4:b7:6a:fc:0b:60:b0:d1:
18:de:ae:7f:e3:da:ee:23:26:78:24:ed:0d:97:6c:27:fb:66:
8e:f5:63:d0:9d:9d:c6:de:28:51:dd:c8:ca:b5:3b:63:31:ee:
02:28:f4:5d:f7:d6:56:8c:48:b3:a7:57:6b:cf:0c:50:bd:9e:
52:0a:c4:82:2b:88:d2:e2:fb:65:f7:a6:e9:fb:02:d8:06:d0:
12:7a:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:21 2025 by rpki-client