Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: PvIuLiG8lCtky7JKV04dCrkVHQNyDKkIoH+nfxch5I4=
Subject key identifier: 78:61:A3:EB:1A:E9:D5:E4:A9:55:8F:B1:B0:E8:34:79:E4:AE:1D:3E
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 0199FC8F1B050C0EFF97423D2EB5408C1825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 03D7
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: YtKX10XmndyGK99UhHGb8xnYzqS8gVMLx1kd6SWjksQ=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1b:05:0c:0e:ff:97:42:3d:2e:b5:40:8c:18:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=7861a3eb1ae9d5e4a9558fb1b0e83479e4ae1d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:ad:ee:c3:1c:71:cc:bd:f5:c0:35:60:f0:
54:dc:d3:95:8b:1f:7b:7b:c5:af:bc:38:1a:1d:4a:
01:8a:f3:76:4c:87:bb:eb:78:07:d6:c6:37:12:9c:
94:2b:1d:39:49:88:3a:93:9c:c5:5c:88:f6:ff:78:
06:4a:21:59:40:e0:21:7e:83:eb:57:9c:51:a5:e7:
25:7f:c8:26:4a:1d:51:b2:2d:66:e4:02:62:4d:08:
b0:e0:55:2d:ed:56:74:75:31:8c:e4:1b:d0:6b:39:
a2:d4:27:19:d9:10:fd:64:79:d4:06:da:19:fd:c3:
eb:69:b7:c5:88:43:d1:b6:50:91:50:65:54:6d:18:
13:fd:7e:90:2a:c0:65:6c:3c:1a:ce:5f:b7:f0:0c:
d2:79:59:48:8f:e7:26:71:2f:4d:5e:3f:73:8a:f5:
76:3f:05:e3:38:33:0d:90:6f:40:8c:47:7a:6f:dc:
b8:f2:cb:86:94:d9:af:db:41:12:4a:dd:d8:6c:cb:
17:a2:da:7b:da:3f:38:42:07:22:ca:88:02:2f:b8:
0c:49:63:09:10:bf:43:1b:4b:53:ad:d9:6e:9d:b8:
32:da:ac:3a:ec:90:ae:4b:38:6b:89:a3:be:b2:b4:
f7:8e:27:b8:03:e2:58:a0:06:d2:07:5a:fd:b3:1a:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:61:A3:EB:1A:E9:D5:E4:A9:55:8F:B1:B0:E8:34:79:E4:AE:1D:3E
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f0:7c:b3:a4:af:d1:d2:03:41:4e:cf:e0:0a:e8:c2:ab:bc:
0f:4e:80:df:2b:ce:88:75:5c:4d:bd:aa:2a:38:43:8b:41:c8:
41:82:9a:0b:b2:2a:e2:16:e1:da:5e:e8:c6:3c:1d:2d:2a:65:
c0:30:30:9f:75:15:ac:af:5f:f1:ea:d9:60:53:a7:68:5f:73:
96:83:70:72:68:11:7a:39:cd:60:49:40:8f:18:05:a5:25:bd:
c5:b3:0e:5b:58:18:63:2a:7c:a0:e0:db:2b:d0:71:84:cd:c9:
b3:cc:ad:8b:8d:43:10:45:7a:72:09:34:75:ee:bf:a7:69:4e:
63:1e:c8:b9:f8:45:ce:39:6c:15:ca:ec:ed:9a:dc:88:98:99:
d2:22:b9:89:a5:e9:43:4b:d0:ed:b6:a8:ed:3c:2b:af:98:5d:
6b:2d:ae:75:69:91:9b:78:89:11:a8:aa:54:21:65:e8:e8:cd:
68:b0:dd:78:c3:f6:58:33:b8:a1:95:45:40:79:8b:a8:8f:52:
f4:ed:cf:f1:19:7d:8f:96:57:fe:64:f8:1a:87:5b:6c:28:04:
04:27:c1:95:5a:56:97:0c:d6:75:52:ae:5f:7b:07:b7:e7:76:
8f:64:df:ff:2f:22:bc:11:09:d0:b4:15:30:4b:9e:23:92:bd:
6e:b7:d4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:38 2025 by rpki-client