Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
File: 0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft (raw, json)
Hash identifier: tGTqbc1v8VcR4KrBcecQMEp4gx81FVUrTl3Ffkf+y2U=
Subject key identifier: 01:9A:7D:D7:CA:ED:C7:A8:5F:D7:00:5C:70:87:8E:97:28:92:1C:95
Authority key identifier: D0:62:A2:6A:23:DB:57:F3:D0:40:90:C6:4C:DC:62:D5:4D:40:A3:24
Certificate issuer: /CN=d062a26a23db57f3d04090c64cdc62d54d40a324
Certificate serial: 0199FAD7BCD03CC21067170A58A81A28B7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
Manifest number: 68
Signing time: Sun 19 Oct 2025 05:01:06 +0000
Manifest this update: Sun 19 Oct 2025 05:01:06 +0000
Manifest next update: Mon 20 Oct 2025 05:01:06 +0000
Files and hashes: 1: 0GKiaiPbV_PQQJDGTNxi1U1AoyQ.crl (hash: a7G1VY69qegG3DQ8pfE7PralT1Ojzvfnw2U9jo6ZQY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:bc:d0:3c:c2:10:67:17:0a:58:a8:1a:28:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062a26a23db57f3d04090c64cdc62d54d40a324
Validity
Not Before: Oct 19 05:01:06 2025 GMT
Not After : Oct 20 05:01:06 2025 GMT
Subject: CN=019a7dd7caedc7a85fd7005c70878e9728921c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:16:49:ce:91:4c:46:2c:ca:9a:72:2f:a0:
37:97:e9:ba:ef:d7:49:f4:26:71:0d:bd:d0:80:25:
82:a9:90:71:58:3f:de:84:67:d6:da:36:4d:4b:03:
37:e8:10:18:c3:33:f7:ce:cb:c6:b6:73:d8:f3:d1:
cb:8f:9b:2e:27:76:94:d8:83:e7:d0:4a:58:b9:b8:
bf:11:35:fd:21:c0:d7:95:63:84:27:d8:f7:6d:fb:
55:40:bb:0c:54:13:2d:da:57:02:1d:1c:6f:ed:34:
1b:37:26:ba:25:ad:0d:af:4c:86:22:37:56:ec:55:
b6:8c:f0:6b:62:6d:25:9b:82:b0:4f:ef:b0:78:17:
35:21:dd:7f:87:76:14:b3:ae:6b:a9:e3:f5:46:29:
4e:02:d2:e1:78:c3:5d:fa:2e:7c:62:c5:f9:c6:42:
66:1b:27:08:c9:23:7b:ea:76:d2:de:0b:e5:2b:a5:
d1:43:12:b1:62:b7:98:ff:e5:3f:5a:8d:6a:53:0d:
22:24:bc:9b:0a:6b:be:da:73:95:6d:17:7d:3f:59:
d0:6b:3e:7d:40:2f:c7:9f:e2:76:4a:ed:3a:ee:dc:
b9:64:28:e6:43:f2:7f:f5:8f:48:3c:21:c7:73:32:
d4:5e:eb:db:bd:34:c1:13:e4:5e:06:fd:30:c0:c3:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9A:7D:D7:CA:ED:C7:A8:5F:D7:00:5C:70:87:8E:97:28:92:1C:95
X509v3 Authority Key Identifier:
keyid:D0:62:A2:6A:23:DB:57:F3:D0:40:90:C6:4C:DC:62:D5:4D:40:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/761e13-5579-4079-b81d-90ca0beb439e/1/0GKiaiPbV_PQQJDGTNxi1U1AoyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c9:2f:9d:ab:45:03:9b:f9:1c:fc:23:83:67:0e:78:e8:24:
ba:91:9a:15:06:6b:97:4d:5f:68:71:a3:42:19:6a:a6:e6:09:
f1:d2:92:37:64:21:95:6e:eb:d5:e6:fd:07:0b:ec:5c:a2:d8:
ef:ac:03:61:34:3c:ec:37:f6:d6:84:75:a3:a5:4e:b7:5a:bf:
98:2f:9c:01:c1:b2:fe:39:90:1a:5a:69:6a:3f:a9:59:fc:4f:
3d:12:a3:3d:77:2d:cf:f2:6d:7c:e7:ae:89:40:5c:e2:5c:30:
61:83:a0:a5:d2:99:25:56:58:16:d7:51:58:e3:89:93:62:72:
96:86:0b:99:da:a4:53:b5:aa:60:43:fe:f1:e6:00:42:72:cf:
83:70:76:56:d2:67:dd:e7:9c:72:3d:e2:0e:a9:e7:38:dd:4a:
d0:f8:ee:f7:b2:d2:1a:e5:6a:7d:0e:10:88:c7:71:32:13:11:
a6:48:29:04:c3:b4:e1:77:56:8b:5e:bc:a4:d5:7c:d1:ed:47:
0d:56:dc:fc:a2:bc:a7:fa:5d:43:6f:73:6d:f5:8a:a1:fa:66:
0c:77:7d:7a:0e:51:26:18:ea:8c:a6:6c:f7:f4:41:4a:b6:06:
ff:55:88:8e:40:d6:de:45:b8:9a:87:0a:13:8d:35:99:ec:ca:
2c:27:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:49 2025 by rpki-client