Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: MCGXVT0UIrCYQHrXBmrQNV92nY6NAvwP8y6cChBX75s=
Subject key identifier: 64:B3:80:E1:5B:6A:4E:61:C6:76:3C:D1:A5:30:DD:06:4C:76:85:0F
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 0199FCC675A1204D24B56B4E9E60C6CB0FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 13A0
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: DQKfxcYYRqE1hZTspqi8PQbcn3T/ksHss7cjZr1zOdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:75:a1:20:4d:24:b5:6b:4e:9e:60:c6:cb:0f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=64b380e15b6a4e61c6763cd1a530dd064c76850f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:12:1a:b3:d7:39:1d:c2:43:ed:77:69:e1:
69:db:f0:59:d2:61:34:17:4f:88:ff:af:e0:0e:3b:
f7:bc:3e:ef:ba:b5:22:3f:7e:30:c5:72:3e:38:ab:
fe:cf:75:f4:96:f8:5e:2d:87:9c:82:a0:eb:c3:0e:
12:31:a2:ff:72:ca:44:42:04:0e:4e:6c:8e:9a:49:
ac:f4:0a:10:46:ad:34:80:92:b5:1c:fa:e6:88:23:
87:a7:a0:32:d9:92:b1:6e:79:d7:07:44:0e:3e:4d:
ed:4c:03:cc:3e:a1:1f:c3:f3:11:e3:42:14:70:ab:
8c:1c:dc:c3:21:6b:01:71:4b:c1:ef:09:d4:09:3c:
ed:b6:8c:a7:6f:70:2e:59:53:8f:f4:a0:4b:a4:46:
ca:8d:aa:17:51:b8:65:82:ec:2e:f1:56:d8:d7:3d:
f4:29:c2:fc:7d:c3:aa:c5:86:e2:e8:cd:08:f7:ac:
8c:33:be:b4:40:12:29:eb:67:32:82:91:68:b2:9f:
c0:53:31:31:76:02:c2:55:e1:bf:a4:74:b4:f2:d7:
cc:ed:fc:ba:da:4a:4d:c0:ed:35:1e:a2:b7:6a:e4:
7d:e5:c7:10:51:47:56:36:43:c3:0f:4b:33:38:45:
65:ea:96:71:43:c2:fd:ad:07:d2:f7:e0:7e:64:de:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:80:E1:5B:6A:4E:61:C6:76:3C:D1:A5:30:DD:06:4C:76:85:0F
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:75:88:e9:90:68:49:27:85:7a:cb:95:1b:a7:52:06:45:6b:
aa:1b:51:b7:ed:e3:0d:fb:08:ba:da:1b:d7:63:7c:fc:3c:86:
d6:56:ab:12:fd:f0:28:3c:02:d5:f4:e3:c6:4c:fe:fa:fa:bc:
a2:d4:61:98:18:8f:60:ad:44:b6:77:d0:6b:cb:1e:1a:55:e6:
0b:9a:4e:b0:80:81:de:56:0d:48:9e:29:19:97:ec:09:96:ce:
90:95:5d:0f:6e:b8:48:dd:7b:2c:40:0a:e3:03:57:97:94:54:
ea:fb:7c:9c:1c:67:9d:df:b3:a1:e7:76:41:d0:d5:35:ae:94:
67:20:f3:f1:96:1e:01:28:99:8d:39:b0:e1:49:73:f5:1e:c1:
f5:3d:11:c3:35:91:3a:fb:e3:57:8e:6a:e6:4e:12:5e:17:2c:
d4:00:69:46:5b:10:ab:dc:49:df:ff:e7:6d:54:d6:9b:a1:32:
38:44:b8:30:6a:b8:2a:e3:e4:87:10:51:c6:30:6c:53:05:cd:
ea:a2:4c:e7:7b:3e:94:a6:e7:e2:cc:6f:7d:da:91:d3:cf:03:
e6:f6:df:b3:41:91:cd:f6:4f:37:1e:7e:06:d1:49:e0:14:05:
38:c0:b2:92:dd:59:54:8a:94:bb:3d:44:ea:b4:21:75:c7:21:
aa:6b:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:58 2025 by rpki-client