Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
File: kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft (raw, json)
Hash identifier: wtYSc1X0R+mrLnhuSUVns0qerTP3f4McV8d22sXzj/c=
Subject key identifier: CE:57:96:97:EF:6D:EE:7F:ED:D2:3D:75:0F:FE:F7:73:B2:C6:1D:59
Authority key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
Certificate issuer: /CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Certificate serial: 0199FB0F0A00756D8EB67BDACC56B4FBC509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
Manifest number: 0E01
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: O0T2HbDDLXToVBgQvakFVm0WBM8.roa (hash: j4M5mhMKjocJHlnRMyKx/Jo55Alu9WqNqQzzA+GKZ+8=)
2: WPrYk3ZFYryhbXNF2_g_QVCy5G0.roa (hash: 1/VFn2v02knd9dSenNmn42s5XXg6Yfw+0bFY3ogbnpY=)
3: kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl (hash: sZfPmEkmdwQ8r/LBaV2ztG9yZxugoI8+nU7gomB34v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:0a:00:75:6d:8e:b6:7b:da:cc:56:b4:fb:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=ce579697ef6dee7fedd23d750ffef773b2c61d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:aa:2c:ff:de:9f:99:35:26:09:27:fe:d8:
6d:ef:0b:33:ed:c1:25:91:f1:01:f7:e1:4c:1a:ae:
c1:9f:1f:a3:6b:fa:d1:9e:1c:a6:2d:4f:c6:9b:e3:
ca:64:e4:f3:a3:35:de:cb:38:ea:a9:b9:61:56:ce:
b8:12:df:05:60:3d:a5:35:81:ab:85:63:23:cf:f7:
37:91:52:08:25:59:58:11:87:af:62:61:26:3e:0a:
d3:63:16:78:f4:41:e0:5a:d7:e3:98:43:d3:3e:4f:
2c:e4:96:2f:32:15:c7:b0:3c:fd:6a:73:6d:b9:e7:
ed:73:86:fc:e9:69:e2:18:1d:90:0f:71:d2:06:e7:
ad:23:39:e8:7c:cf:62:a7:67:7c:01:70:4b:7e:28:
8e:3e:53:97:1e:a7:c2:79:c1:e6:0d:c9:c9:7e:9d:
43:62:38:a3:c4:cb:71:ff:18:7a:f1:56:86:e7:63:
4c:e7:98:53:d1:1a:4f:21:e9:dd:2e:fc:42:bb:0f:
ba:15:a7:00:49:ae:a5:85:77:62:da:87:6e:2c:9f:
a5:0b:7d:ba:63:8c:39:bc:78:17:b9:87:83:df:f3:
7c:99:4b:9b:a2:13:22:ec:e4:58:22:25:4f:7c:df:
be:b5:d3:89:5f:4f:57:be:4b:90:c1:a0:54:6f:1a:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:57:96:97:EF:6D:EE:7F:ED:D2:3D:75:0F:FE:F7:73:B2:C6:1D:59
X509v3 Authority Key Identifier:
keyid:91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4b:c9:50:38:15:ad:05:0b:a8:17:f6:42:19:15:29:ac:b7:
c0:0e:ac:83:d7:f4:ef:65:6c:7a:0e:0a:4c:44:18:45:ad:32:
f8:44:8b:6d:51:e9:54:10:88:0d:62:a3:8c:21:0a:d4:b7:66:
18:5c:e7:43:a3:5a:c6:2d:80:d6:a6:5c:a7:4d:74:e9:95:27:
45:89:6c:df:6e:5c:63:27:32:07:30:91:27:b6:0e:f5:99:b6:
95:27:52:f6:ae:3f:78:5d:65:a0:a6:86:91:71:3d:a1:e3:5e:
45:6b:b7:87:e1:a5:97:a5:89:c6:2c:a6:18:83:44:36:55:95:
a5:4f:29:b4:2e:3a:ab:15:8c:e5:f9:c7:a8:86:58:98:91:55:
9a:5d:30:f9:3b:b6:b0:57:9a:2b:b8:27:2d:52:15:c6:6f:03:
85:c1:92:32:c9:e1:da:13:45:3c:7d:4b:8f:30:70:85:8b:5b:
a8:65:06:cf:97:0b:57:15:5d:ef:f2:92:8f:3b:5b:26:f0:8d:
3e:cd:d1:85:13:64:1b:20:27:90:20:55:16:b0:0b:aa:91:a8:
3c:78:37:f1:88:7b:12:d3:21:11:23:48:51:a6:7e:80:e9:f0:
73:7b:1a:f4:93:7c:36:6f:49:38:41:db:a0:72:2e:64:cb:ea:
58:7c:ac:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:55 2025 by rpki-client