Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: mFmOx56eH/S/c+74SPBcvzz+LVrCY0fyhkxTz51jsjw=
Subject key identifier: 7C:AC:2C:5A:0D:DD:C9:D8:8B:51:DD:39:31:7F:3C:80:9A:FB:58:22
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 0199FD34053EE615B5891FE6EDF8D75896CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 132A
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: syNHnE1t4gKDwZTzotU5MCshlwiUh6Usccdgpb6JYZc=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:05:3e:e6:15:b5:89:1f:e6:ed:f8:d7:58:96:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=7cac2c5a0dddc9d88b51dd39317f3c809afb5822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:31:22:5a:df:b7:9d:a1:87:5b:d0:f8:9c:
3f:d0:93:5f:a2:a1:f4:ea:83:42:44:00:f5:c3:60:
4d:2d:9e:17:5b:09:43:2f:0e:cf:b5:cf:db:6c:b9:
3f:4e:4b:8b:24:6b:83:fc:c3:e6:33:da:ac:ef:cd:
c8:a3:16:ea:58:af:9f:85:1f:f6:ad:a0:f1:01:c0:
76:db:29:78:76:c7:63:86:dd:32:af:8f:9d:97:00:
eb:c0:14:3f:72:fa:1d:ab:f3:5f:77:41:dc:68:08:
a7:c0:b9:aa:b0:bc:11:10:16:8f:84:fd:96:c2:b9:
49:9e:e2:6e:32:b0:e2:37:88:40:de:59:f3:10:7c:
20:7d:03:25:f6:d3:a0:22:e0:6a:43:e4:a1:55:b0:
2d:03:7d:a0:ec:af:5a:19:23:81:72:a1:c7:de:bf:
c5:e9:18:e0:a9:79:d7:2a:c1:6f:96:36:09:f8:83:
06:e0:06:39:c0:c3:c4:79:28:7e:46:e9:c3:16:86:
07:20:da:d0:f4:ee:8a:ff:7e:b3:40:22:27:9b:b9:
e5:4e:ef:57:1e:72:d4:c7:53:67:20:3a:fd:9f:73:
b2:45:51:66:8b:9f:cb:af:1e:4c:94:04:02:ad:25:
4a:3f:b0:e0:30:ed:6a:9c:d9:4a:e4:72:f0:b2:8f:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AC:2C:5A:0D:DD:C9:D8:8B:51:DD:39:31:7F:3C:80:9A:FB:58:22
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:09:d7:4f:39:46:c6:52:6c:9a:08:a2:02:89:b1:14:ac:28:
dc:71:ee:9d:e7:aa:20:42:76:fd:37:2e:e3:fc:3f:35:a6:43:
80:f6:25:1a:de:0b:59:ff:15:3d:2b:23:da:4c:5c:22:b7:f9:
1e:c2:82:d8:b5:29:c3:0d:2a:51:82:d3:b3:b2:dd:43:87:bd:
c0:d3:40:dd:4a:82:93:2f:22:82:ab:e5:3f:e9:59:0b:ba:bd:
3c:67:4b:b8:f0:f5:c5:ba:e9:c8:df:74:e0:bf:00:e2:da:85:
5e:d4:14:36:1b:a3:c1:15:44:bb:c9:19:2f:e8:a4:fa:31:31:
90:c2:2c:1f:5f:75:cb:54:0b:3c:cd:1b:30:0a:b5:8c:9f:9e:
db:6e:29:43:9d:f2:33:b2:b9:61:46:25:71:6e:ed:b3:53:fa:
f0:23:04:c0:f9:f8:5b:e1:a1:80:0d:95:4f:4a:eb:c5:16:8f:
f8:42:ad:c7:be:b9:99:44:44:8a:c1:10:f0:86:ba:de:d9:4f:
9d:d3:86:35:90:75:6d:88:30:27:b9:d6:6a:dc:99:12:49:fd:
a2:a7:f0:8b:2f:1e:9e:09:4a:a2:58:a6:3f:0b:19:9d:a5:18:
a7:f3:bd:b1:94:db:3c:40:7a:1a:64:e8:77:6c:ec:f0:56:43:
af:4e:b2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:55 2025 by rpki-client