Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier: B5CocJkPszDyO8XkYsoj3zfX0RZu/HVo5zd9joxvyZM=
Subject key identifier: 1C:C8:B6:24:88:AE:B0:F2:95:F4:0D:7B:A8:BA:F2:19:A1:EB:40:5E
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer: /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial: 0199FFC770BC2478F66A0E2493C48DFB9F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number: 0CD1
Signing time: Mon 20 Oct 2025 04:01:24 +0000
Manifest this update: Mon 20 Oct 2025 04:01:24 +0000
Manifest next update: Tue 21 Oct 2025 04:01:24 +0000
Files and hashes: 1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: SIxbxQpfj7KietVxjUwhBZ5Iq8U+Xv8s5bmNHjR5Pwo=)
2: IakaUVIwolxABf_iFG6RX8yq8dc.roa (hash: 7jt2eahvNjy4JlonD7RGKwXoWtuGwCznkksLfkvVUZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:70:bc:24:78:f6:6a:0e:24:93:c4:8d:fb:9f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Validity
Not Before: Oct 20 04:01:24 2025 GMT
Not After : Oct 21 04:01:24 2025 GMT
Subject: CN=1cc8b62488aeb0f295f40d7ba8baf219a1eb405e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:2b:c0:16:71:65:41:c3:50:9c:31:b5:85:
b2:01:d0:41:71:24:22:53:e6:ab:1a:66:cb:e3:d3:
ea:0a:67:c1:09:3a:3b:c3:63:2d:30:f6:9e:14:58:
cb:ff:7d:47:f6:c9:4b:72:04:c0:74:55:fe:89:88:
52:8b:93:e7:b8:a0:d6:af:89:ef:75:08:2d:c4:53:
91:ab:64:3b:9d:ca:dd:b5:c5:74:6f:ee:5c:d0:a0:
3f:40:75:7d:a9:40:bf:3d:12:aa:5c:dc:a6:24:aa:
5f:52:95:ed:6c:e1:0d:28:ca:4b:1e:aa:67:8c:94:
4f:83:4c:6b:0f:21:4f:ac:ea:20:46:07:6d:a2:67:
fe:49:f2:81:d5:41:fd:61:eb:5a:7f:1c:4c:c1:f2:
8c:66:2a:e8:c9:ee:83:89:79:22:58:20:0a:c5:3c:
cf:89:16:f1:01:dd:56:3d:d1:fa:b8:fd:5f:6e:91:
85:52:16:2f:6a:dd:81:65:14:44:33:e7:f6:69:55:
fa:7e:3d:9e:6c:01:3c:5c:2b:25:c0:69:53:9a:50:
8c:4e:49:dd:e8:77:de:28:c1:7a:3d:3f:c4:0f:7a:
3c:e1:1a:7d:aa:73:14:d7:03:36:40:dc:f4:d9:c1:
c3:22:47:c8:ed:8e:db:ca:55:bd:f3:4d:25:63:30:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:B6:24:88:AE:B0:F2:95:F4:0D:7B:A8:BA:F2:19:A1:EB:40:5E
X509v3 Authority Key Identifier:
keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:23:2c:ec:84:88:f0:fb:7f:5c:1e:e7:e2:43:5d:06:8e:b1:
48:3f:3f:bd:31:e5:23:f2:26:d0:84:13:1e:2d:0e:53:64:4b:
ee:2e:b7:ca:b5:f9:07:fc:e4:86:e5:5f:7d:d4:26:b7:20:9a:
a3:68:94:66:51:13:d5:d3:06:ca:77:13:c4:37:37:27:5f:51:
83:c6:36:37:9f:9c:83:9c:30:f7:7a:e0:15:84:52:28:df:19:
e2:cd:88:66:bf:4f:94:30:4a:ac:1c:41:c7:23:32:92:7d:3a:
c8:ff:22:48:71:22:bf:8b:cb:a7:f8:d6:b1:15:d0:02:15:64:
29:fb:48:56:d3:db:33:a4:a6:d5:ee:82:77:61:38:d7:de:64:
83:f0:9f:40:86:36:f6:21:1b:6c:21:3a:8c:1e:0e:72:74:05:
3f:d2:76:98:50:21:9d:57:bb:ab:5d:3e:2c:3e:f4:51:b6:eb:
27:b2:d4:00:04:d7:96:fe:4e:18:1b:a7:b6:29:78:91:cb:84:
91:81:52:d3:e1:65:83:66:0b:6d:b4:11:bc:86:9d:64:ce:ab:
0a:91:80:0f:02:aa:f1:31:cc:eb:04:16:e1:ea:6a:7c:11:52:
9c:49:16:ff:41:02:51:58:3b:82:0e:be:b8:04:24:1a:f2:7a:
30:d2:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:04 2025 by rpki-client