
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: cjEGxB1L5MA7bJ3gfTrpqwryhugaQMn0QCLbchynHiY=
Subject key identifier: C1:69:46:2C:37:60:32:37:74:ED:AC:A9:39:77:1D:6E:4E:64:91:18
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 0199FBEAAA766D9700F1D6A5A1A1DCB59142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0AF9
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: jkwCWjBj+urqWDW3ZRxsEN0bcTwzRu0Fab6vGapZh0E=)
2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=)
3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:aa:76:6d:97:00:f1:d6:a5:a1:a1:dc:b5:91:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=c169462c3760323774edaca939771d6e4e649118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:c1:71:5b:d5:6b:43:5e:35:60:15:27:21:
7e:0e:e2:46:c9:1b:f4:de:d4:a0:ef:96:4f:5f:c9:
52:31:00:07:b5:e9:86:b4:d3:49:40:15:d9:80:ad:
cc:45:e3:a1:f4:6b:7a:30:23:1c:93:fd:aa:6f:7f:
b1:2d:36:df:47:15:8a:1c:6d:a5:76:fa:95:bf:86:
f7:86:e9:62:5c:3d:69:8f:25:4f:28:00:2c:93:85:
b6:b5:06:ae:b7:c6:de:97:0a:4a:68:c8:24:0b:10:
bb:9b:d8:ea:53:0d:3b:a7:64:2f:bc:6b:67:99:b4:
ce:8c:a3:6f:fe:3d:42:b4:45:5d:07:82:db:b4:6a:
d9:f1:24:3e:60:e1:c1:13:bc:c8:f9:84:e7:74:47:
fb:e9:bd:ae:9d:b5:86:fd:c8:bd:90:3d:a5:99:c6:
28:a8:8d:6b:72:39:67:57:1d:6c:b5:26:77:7d:89:
28:82:d2:5f:74:1d:90:3d:35:20:a1:51:6a:e6:dd:
5b:d7:66:b7:45:a5:bd:32:4a:30:52:4c:6b:98:6d:
72:c2:b8:9f:c7:89:ef:7d:b1:bb:32:20:66:8b:b9:
1d:95:87:c6:8b:e0:91:6e:95:8c:c2:e6:ab:0b:75:
f5:a8:b3:54:c6:5b:7d:8c:de:e2:51:fa:0c:6b:ff:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:69:46:2C:37:60:32:37:74:ED:AC:A9:39:77:1D:6E:4E:64:91:18
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d1:47:65:ba:f4:9a:b0:ae:4d:10:ca:1e:21:57:2e:23:fb:
f5:67:91:88:4f:45:a1:7a:73:e2:36:7f:0c:31:9a:60:a1:3d:
31:dd:cb:aa:e0:69:2d:6f:df:05:6b:d5:f6:e7:93:dd:b4:f0:
d9:86:1b:22:ce:e6:cb:ed:bf:76:a3:bc:ac:84:6d:15:20:91:
9d:4b:1b:df:6f:65:d8:4c:a0:b2:ff:52:16:4b:35:25:cd:6d:
d6:10:2a:49:fe:e1:b6:65:2a:c7:1b:b1:25:dc:29:88:1c:ce:
fb:7f:45:72:8b:a0:6d:82:5e:94:e6:bd:9a:e7:07:3f:b2:4a:
bb:fb:bd:1b:cf:ca:37:fb:11:c0:3f:50:1e:ed:47:8f:f1:06:
de:68:87:44:56:7d:4a:2e:66:f8:ce:30:53:4f:09:32:9c:e6:
b4:67:6b:ef:03:7f:a8:4b:37:3d:b2:63:e3:13:4c:2c:06:4d:
12:15:6b:af:c5:36:37:ec:99:64:53:9d:53:78:16:e7:86:34:
46:c3:e3:8e:d7:91:95:c5:98:78:cf:b9:8c:96:90:31:31:a2:
b3:78:a9:c3:f0:14:94:1b:7b:49:b2:26:ab:cc:6c:5e:8d:46:
b1:e9:a5:c9:f6:b2:db:11:f5:97:b6:3a:44:4b:7f:30:f2:53:
f5:f0:21:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:55 2025 by rpki-client