Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File: 0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier: 6B/h5kZ8hcPzevV2xzrQc5tidpH34GSCqWYL8j1UGLQ=
Subject key identifier: 4A:FA:80:C8:21:31:5B:1D:25:06:67:2F:96:0B:92:D6:54:76:C2:3F
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial: 0199FCC6B83DB7FEB22BE5D5BAE40B3362E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number: 08CB
Signing time: Sun 19 Oct 2025 14:01:45 +0000
Manifest this update: Sun 19 Oct 2025 14:01:45 +0000
Manifest next update: Mon 20 Oct 2025 14:01:45 +0000
Files and hashes: 1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: +jhgBu65BRX1qJHORuqjQfgjlrMQnplJp9ZWv+Il3Ak=)
2: kAhsl83sRH6W4s8jtU8YJb8qwhQ.roa (hash: +uG81eC9noWL3YdfTYPyy1nu/3IN2ObXCeDG/BCSpTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b8:3d:b7:fe:b2:2b:e5:d5:ba:e4:0b:33:62:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Validity
Not Before: Oct 19 14:01:45 2025 GMT
Not After : Oct 20 14:01:45 2025 GMT
Subject: CN=4afa80c821315b1d2506672f960b92d65476c23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:01:6a:63:74:17:62:dd:37:7d:5c:5a:e6:
4f:85:69:61:1f:4e:1c:ef:20:b3:8c:1b:bb:2e:f5:
30:8a:53:09:e6:0c:cd:45:78:ee:81:cb:31:07:f5:
8a:4b:d1:2b:27:57:d7:77:60:f5:20:f5:e5:e8:e3:
87:23:d3:50:b3:88:f7:c9:76:e0:d3:51:7c:26:16:
98:70:42:f5:29:e9:fd:26:77:fa:03:aa:c1:81:90:
1d:75:5f:2a:b8:15:a4:5a:0f:7a:8e:a9:d6:2d:f4:
5a:9d:a3:c9:76:f6:d8:bb:f6:6c:1f:87:ef:4c:5c:
cd:a6:95:12:d2:d6:d8:b9:73:71:7a:47:c0:4a:87:
5c:31:40:8b:12:54:7e:2a:91:08:9b:9a:3d:34:21:
9d:30:e1:26:3c:ca:a4:de:51:72:6a:83:81:f5:dd:
1e:fb:79:a3:88:d0:7d:9f:a1:24:2d:da:00:af:03:
32:db:eb:70:97:ba:f5:c4:3f:ef:3b:21:e4:ca:96:
a2:19:ac:de:7f:66:a2:bd:ac:05:9b:53:1a:da:c3:
4c:92:e8:ea:e8:f7:96:f2:0d:03:37:42:ae:dd:27:
a0:76:2e:95:62:75:81:af:93:6d:88:3b:eb:74:ea:
0d:15:0f:99:d7:85:00:d2:73:1e:c2:c6:2b:85:81:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:80:C8:21:31:5B:1D:25:06:67:2F:96:0B:92:D6:54:76:C2:3F
X509v3 Authority Key Identifier:
keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:75:48:79:0a:2d:49:9f:e8:4f:47:f9:fa:8d:06:1b:95:d8:
11:71:e6:0c:75:3d:cc:5f:2b:d8:23:e5:9b:8e:4b:5c:c4:e3:
03:de:c4:97:34:20:f8:b7:e4:d9:9f:9f:c5:ef:5b:82:c4:e1:
83:7a:78:e9:eb:18:c4:7e:b0:2c:24:48:7a:18:d2:ec:8b:46:
90:1d:b7:1c:72:33:6a:30:9d:34:b4:a9:e3:f0:24:73:98:fb:
95:5a:19:c5:2b:77:0b:da:c4:1a:21:a7:ec:15:48:02:aa:cf:
b3:a4:49:d5:9d:bc:56:0a:63:3a:c2:48:f1:2a:4a:1c:c8:80:
99:35:29:fe:4b:00:d7:65:94:a8:cf:c2:f0:31:26:53:b8:3e:
f6:12:62:13:a3:47:7d:aa:bd:ef:df:e1:15:89:3d:92:5a:c5:
70:fd:89:bd:81:05:ea:45:20:23:d4:40:7c:bf:de:4e:28:b7:
9e:44:42:86:64:ce:3e:96:c3:25:a7:27:d2:8e:64:b8:f0:9f:
1c:20:83:a5:75:7f:f8:91:4c:41:ed:67:95:60:54:4e:86:83:
24:45:c8:e7:ae:59:88:66:6f:9d:61:70:c4:7e:14:f6:cc:68:
a2:0b:33:c9:13:62:ac:a0:76:26:b8:84:3e:42:90:39:f8:25:
2c:e1:ed:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xrg9t/6yK+XVuuQLM2LjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj
MmE2NzcwHhcNMjUxMDE5MTQwMTQ1WhcNMjUxMDIwMTQwMTQ1WjAzMTEwLwYDVQQD
Eyg0YWZhODBjODIxMzE1YjFkMjUwNjY3MmY5NjBiOTJkNjU0NzZjMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwQBamN0F2LdN31cWuZPhWlhH04c
7yCzjBu7LvUwilMJ5gzNRXjugcsxB/WKS9ErJ1fXd2D1IPXl6OOHI9NQs4j3yXbg
01F8JhaYcEL1Ken9Jnf6A6rBgZAddV8quBWkWg96jqnWLfRanaPJdvbYu/ZsH4fv
TFzNppUS0tbYuXNxekfASodcMUCLElR+KpEIm5o9NCGdMOEmPMqk3lFyaoOB9d0e
+3mjiNB9n6EkLdoArwMy2+twl7r1xD/vOyHkypaiGazef2aivawFm1Ma2sNMkujq
6PeW8g0DN0Ku3Segdi6VYnWBr5NtiDvrdOoNFQ+Z14UA0nMewsYrhYEtjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr6gMghMVsdJQZnL5YLktZUdsI/MB8GA1UdIwQY
MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt
ZDY2OGM1M2Y2NjEyLzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy
LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnVIeQot
SZ/oT0f5+o0GG5XYEXHmDHU9zF8r2CPlm45LXMTjA97ElzQg+Lfk2Z+fxe9bgsTh
g3p46esYxH6wLCRIehjS7ItGkB23HHIzajCdNLSp4/Akc5j7lVoZxSt3C9rEGiGn
7BVIAqrPs6RJ1Z28VgpjOsJI8SpKHMiAmTUp/ksA12WUqM/C8DEmU7g+9hJiE6NH
faq979/hFYk9klrFcP2JvYEF6kUgI9RAfL/eTii3nkRChmTOPpbDJacn0o5kuPCf
HCCDpXV/+JFMQe1nlWBUToaDJEXI565ZiGZvnWFwxH4U9sxoogszyRNirKB2JriE
PkKQOfglLOHtdw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:07 2025 by rpki-client