Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier: rUjQK+yrh1gDqWIRHnnfXUPnpMN6Dk8xoy4bypo2UiE=
Subject key identifier: D6:52:87:83:F4:63:57:37:87:42:9A:E0:23:65:60:C1:CC:3B:35:CE
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial: 019A0035B678AEB328BE0701480FFDA3684A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number: 0515
Signing time: Mon 20 Oct 2025 06:01:51 +0000
Manifest this update: Mon 20 Oct 2025 06:01:51 +0000
Manifest next update: Tue 21 Oct 2025 06:01:51 +0000
Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: FKz2wcpENd2tPXaseIe+aTvYMWyMMWSWHgcvE+TL8J0=)
2: IjuOSUk_7icZW2FOsDmStZ5tc0Y.roa (hash: /4IVw0ESBk+fPfscovcApWNjH6K3fkBcjRs0stf1FDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:b6:78:ae:b3:28:be:07:01:48:0f:fd:a3:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Validity
Not Before: Oct 20 06:01:51 2025 GMT
Not After : Oct 21 06:01:51 2025 GMT
Subject: CN=d6528783f463573787429ae0236560c1cc3b35ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:c1:d1:71:32:03:9f:c8:39:52:25:70:11:
a9:6a:d7:6b:8d:1f:2d:44:c2:7b:b4:dd:40:73:d9:
3c:1b:3d:96:94:33:8f:ab:d5:c9:07:ba:5f:c6:15:
0f:28:ff:9a:76:e6:4d:92:b4:ce:4b:4e:05:90:1b:
1b:d6:a2:49:3f:d1:79:43:c3:2b:48:8f:f0:8a:b7:
6e:cd:19:d0:be:ec:58:23:29:cf:a6:52:24:77:4c:
2a:98:c3:fa:c6:c3:cf:d8:a6:9e:0c:b5:00:d0:03:
9a:dd:d5:7e:07:47:3a:4f:01:f2:f5:94:47:bd:00:
56:27:13:25:13:3a:57:51:6c:01:81:b9:27:11:5f:
79:a1:e3:56:49:ca:73:84:d4:e8:6f:ff:8c:47:36:
ad:f7:38:11:10:2a:eb:95:e5:e9:ca:67:49:cd:e6:
87:a6:15:58:38:52:30:83:7f:86:4d:14:a0:27:56:
d2:d0:2b:de:00:b4:30:f4:41:28:32:9d:70:00:75:
60:da:de:6e:21:d5:83:75:8c:51:23:d7:c3:b3:1b:
68:be:9d:b8:bb:0b:3e:89:59:7d:ba:78:38:b2:cf:
0e:2a:c1:46:4c:96:4b:05:46:55:61:a4:a0:69:65:
80:4c:cd:5e:91:5a:9d:cb:a1:36:c4:9f:55:57:8a:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:52:87:83:F4:63:57:37:87:42:9A:E0:23:65:60:C1:CC:3B:35:CE
X509v3 Authority Key Identifier:
keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:de:80:20:a3:2c:c9:0a:d7:77:ee:41:94:5f:03:56:d0:
a2:0e:2a:79:50:00:68:13:2d:2e:9e:3c:25:0c:71:4d:da:25:
da:d7:2f:9e:13:d4:17:b7:7d:87:d6:c2:02:ef:a1:38:f1:66:
86:ce:cc:a0:c1:d0:1d:3e:32:14:d6:87:7c:56:39:40:8a:26:
e5:83:18:a9:3a:37:10:65:d9:bb:ae:f1:2e:7b:e0:28:ef:19:
f0:29:cf:07:40:7e:d9:08:81:87:4a:75:a9:73:0e:bb:50:e7:
9c:68:03:6d:fc:74:ea:0a:76:97:18:db:19:2c:ed:8a:ee:65:
66:5b:05:80:c6:d5:9a:03:5e:69:84:0f:6a:53:cb:e2:23:38:
e2:9f:47:2e:08:b6:6e:6c:9a:f1:39:cd:ac:b6:95:3b:9a:20:
0a:1e:27:2b:93:b4:05:44:bf:15:7d:f1:fe:e2:96:55:3a:98:
cc:20:03:35:73:06:53:e9:23:30:37:80:b6:4f:d5:39:72:ad:
4f:78:94:1c:8c:ff:ac:b6:75:ba:e6:0d:a0:65:51:f7:0e:0c:
04:a6:f7:ba:68:fd:98:a5:3d:fd:39:be:9b:c3:40:1f:f4:bc:
84:92:eb:dc:1d:6b:53:05:af:d5:1e:e6:f3:f5:2c:8d:a7:7d:
70:25:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:36 2025 by rpki-client