Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: tE8XUOHdB4917GJl2Bpu2yTuCpTMdSW0hAIIhAgFAQQ=
Subject key identifier: 22:3F:AA:78:5F:16:34:99:1A:F5:CF:D7:92:7C:73:60:8B:B5:E4:9E
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 0199FB458DE4D16D8F9D10FB0B268A95AB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 0F43
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: 6Ec3bhefw20L2eVyWjrdpXnP1k6lGdWwTAkWrxmU0cQ=)
2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8d:e4:d1:6d:8f:9d:10:fb:0b:26:8a:95:ab:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=223faa785f1634991af5cfd7927c73608bb5e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:ae:7c:79:e5:25:ae:1f:fc:02:d6:b5:a1:
88:d1:57:2b:8e:6d:1f:84:a5:4c:8c:5f:6d:4d:a6:
2f:c8:a3:7f:b0:ec:19:02:a8:93:2e:4a:5f:e9:69:
bf:66:28:fd:5f:d5:d7:6b:d1:55:5d:0e:12:e2:9d:
16:77:11:7e:75:27:32:1a:70:4b:34:4f:8e:d4:51:
4f:51:27:70:ff:78:54:e8:23:16:cb:9f:74:c0:6d:
73:d1:4c:27:b0:79:af:34:d3:3e:e2:f3:7e:67:45:
ab:66:0b:c2:7c:dc:dd:df:32:c1:a7:11:eb:6d:ee:
4c:63:6b:87:23:a7:6f:dd:76:de:ba:6a:e4:72:4c:
07:4e:21:e6:ce:90:26:eb:22:2b:e3:52:ce:44:09:
48:84:6d:0d:16:7b:08:6d:42:ea:18:3b:03:90:ad:
1a:0c:bf:67:7c:e1:c2:86:0f:33:fe:79:db:2e:f3:
7c:40:05:05:9a:2f:94:e3:7e:6f:ed:24:ae:05:c4:
f8:60:e0:2b:e1:c4:e0:9c:cf:7b:21:6a:f1:3e:68:
17:85:75:23:ed:f1:70:ac:24:e1:df:f0:c1:29:31:
4e:3a:82:f7:c1:e6:3f:ba:51:a0:2a:ac:16:25:2e:
dd:cd:90:f2:d8:4b:59:38:b7:a4:30:64:e6:c3:bf:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3F:AA:78:5F:16:34:99:1A:F5:CF:D7:92:7C:73:60:8B:B5:E4:9E
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:80:86:7f:66:91:da:8d:0b:34:da:1e:76:ab:ab:e5:0b:77:
10:66:69:b4:b8:ae:cc:cb:06:4d:66:28:3d:d4:26:6a:38:4d:
b6:5f:79:d9:16:6c:7b:76:2a:3b:32:0e:ec:e8:1d:8f:b9:a0:
3b:1e:6c:33:9a:45:08:5e:dd:84:26:6d:fa:3c:2c:ce:9e:60:
12:be:e3:75:03:80:77:a4:34:24:7d:ab:bb:7f:3b:bd:d1:3e:
b2:f6:18:13:2e:b9:c3:6b:e7:39:70:5e:ce:43:62:6c:83:5c:
fd:d1:42:8d:a1:90:c5:03:e7:b9:6a:4b:b4:8c:4f:4b:9a:27:
87:f7:41:f7:2e:76:3b:c8:ec:ec:96:29:1e:ce:b8:e1:d9:fb:
19:77:ba:e5:6a:62:9f:75:4d:0d:bb:af:73:7b:1c:8e:90:d4:
a9:b3:68:0a:e4:13:74:58:2c:ba:fa:8f:24:08:e4:58:5e:7b:
43:a4:3b:fb:f0:6b:58:ee:a2:1d:ad:51:5c:e7:ae:77:04:06:
3d:e9:bb:79:91:66:e5:34:f7:34:2a:b9:78:96:5b:46:1d:71:
b5:39:a0:fd:2a:63:db:da:18:80:5a:c7:fb:cf:b6:35:8e:c4:
6c:7b:0f:22:1c:6c:af:5b:bf:82:1e:f6:7c:2e:ae:fd:e9:b5:
ab:5a:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:14 2025 by rpki-client