Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
File: 0LxS2U5i76Pr8syhb0LS5WBziPA.mft (raw, json)
Hash identifier: 6Oy4wA6NNJDdZRTM8rSyChH7hWZpz1rAX7OFLnJeGZY=
Subject key identifier: D5:6A:8A:06:0B:B9:B5:25:46:24:AB:DF:5F:16:A3:5F:4F:FD:47:9B
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Certificate issuer: /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial: 0199FD3493460166CEA77E7FF3A86B3CDE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
Manifest number: FD
Signing time: Sun 19 Oct 2025 16:01:45 +0000
Manifest this update: Sun 19 Oct 2025 16:01:45 +0000
Manifest next update: Mon 20 Oct 2025 16:01:45 +0000
Files and hashes: 1: 0LxS2U5i76Pr8syhb0LS5WBziPA.crl (hash: poE7QvjdCyj/dx28FXO21d3QvrKXUfd18U6miT007wQ=)
2: L3NuWTe_ZTmjBo-VlxbB6Itqb5c.roa (hash: 1CPUHzNqQbUf2XOYArYRqgpqG1Ievq6YnuLxsGd4YuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:93:46:01:66:ce:a7:7e:7f:f3:a8:6b:3c:de:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Validity
Not Before: Oct 19 16:01:45 2025 GMT
Not After : Oct 20 16:01:45 2025 GMT
Subject: CN=d56a8a060bb9b5254624abdf5f16a35f4ffd479b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:5b:89:f7:39:ff:7a:d6:77:ce:c1:c0:97:
41:5d:9d:1a:f1:a7:bd:ca:21:19:c3:44:cc:7e:5f:
4c:40:4b:32:6e:a3:47:1c:4c:65:a8:08:9c:60:75:
ff:85:9d:0a:36:09:33:e0:39:34:4a:43:e1:8b:16:
bf:84:b3:f0:36:e7:20:6a:89:12:5b:c3:a5:e8:30:
60:40:ed:ac:fd:70:ee:03:40:cd:f1:4a:26:00:9b:
76:20:d4:c7:d0:f0:95:35:9e:c2:66:80:8e:eb:78:
40:e0:19:2f:4e:dc:36:3a:42:3b:ad:ea:84:9f:ab:
92:3c:fb:4b:24:e5:c0:1c:aa:22:19:35:30:95:97:
10:8b:3d:37:84:a3:50:e4:a0:bf:83:f7:9e:35:62:
53:c0:5a:14:2d:ba:c5:da:17:84:a5:9f:96:23:32:
56:27:0b:b8:2b:0b:63:f5:ae:bc:52:93:33:0f:36:
f7:55:60:25:82:7c:c6:5e:be:5e:49:f1:08:11:01:
9f:80:2f:dc:d0:49:4a:dc:8f:78:c9:ad:0f:3a:16:
1c:f1:93:b5:bc:87:3d:a4:8a:8e:89:ab:59:cf:d3:
b1:7c:f6:43:48:42:da:1a:b3:60:43:e3:c8:05:ae:
fb:bc:fa:d2:e7:57:b6:71:1f:d9:dd:c6:a0:14:68:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6A:8A:06:0B:B9:B5:25:46:24:AB:DF:5F:16:A3:5F:4F:FD:47:9B
X509v3 Authority Key Identifier:
keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:33:37:16:16:b1:0b:48:54:0c:87:84:16:4a:63:a6:da:0a:
da:47:70:f8:53:75:ea:0d:22:9c:0b:f9:94:d9:9b:66:c3:5d:
78:46:91:23:c7:e8:fa:ec:13:d6:01:f1:f3:33:a5:d2:25:fd:
a6:ec:9f:18:93:53:a9:63:62:d7:0d:e4:52:6c:1d:96:9b:89:
da:54:36:5c:45:2f:31:be:f6:a7:4b:c8:de:7d:b9:69:a2:73:
55:04:41:ef:a6:e1:72:69:12:0c:64:df:c9:8c:9e:d7:54:c0:
89:cd:9b:eb:4a:e1:b0:7b:5a:c6:6c:c5:18:d9:6e:5c:85:59:
08:cc:08:4c:3b:19:db:ca:28:73:62:28:1b:8b:00:bc:bb:65:
03:11:8e:b6:7c:73:e5:42:f0:71:f6:e8:6e:94:48:d3:48:93:
e4:4b:f3:d1:d8:3b:59:0f:d7:c7:af:70:72:c5:bc:58:68:2c:
10:62:50:36:90:90:25:5b:0b:ac:72:df:79:0d:70:cb:1b:b0:
be:f4:a8:2b:c5:10:ac:3b:c3:d6:a3:e1:e2:29:b9:64:15:7b:
8e:29:62:fd:38:95:f4:bf:ad:7a:21:f1:7d:d9:cd:23:a9:e2:
bf:25:08:b3:cb:38:e4:32:a1:53:41:bc:4c:2e:92:9e:47:47:
3d:66:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:20 2025 by rpki-client