Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: DDOQR24oDFIFxdvaFNkWc/yE/mMP5RZCUVowkyihZLI=
Subject key identifier: D0:BF:87:29:6A:BD:80:F4:4D:5E:2F:69:F6:39:08:0B:93:84:A6:40
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 0199FB7CB8CA31443C36A05B8EE656D73567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0D7F
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: HbISyUn3o6wSNJo4Fxvpv5cph+ZsOX7rVQc7WhZeQu0=)
2: AThGgouxKv8fc_GjPfk1KTqcYJ8.roa (hash: pBwVTlstihKQTv02WIHNb7H+18sdn98VZXnJD5bJ+rM=)
3: znDGyTFXHxgds03YiKxu855yeHM.roa (hash: PokYry9XBN7Hw+cBZPUeLE2rCoMZAI1GoWKG5QQBoBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b8:ca:31:44:3c:36:a0:5b:8e:e6:56:d7:35:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=d0bf87296abd80f44d5e2f69f639080b9384a640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:b6:68:27:6e:1f:5d:49:49:54:ed:49:5d:
9c:88:35:1b:8e:51:bd:48:f0:bc:a3:a8:b7:3f:90:
64:75:22:85:6e:ce:17:54:46:a4:82:cf:7e:da:3c:
09:f5:6f:48:6a:98:b9:55:1c:cd:80:d8:f5:70:d7:
54:93:f2:a8:15:06:05:16:21:bb:4a:6b:78:78:fc:
fb:62:0c:78:05:a3:1e:09:63:43:15:ad:bc:4f:07:
54:2a:dc:07:a0:83:80:83:c2:26:62:e5:be:38:a4:
97:a9:e9:55:8a:48:df:1d:c4:99:ae:fa:ff:dd:93:
40:67:37:2a:ad:ac:52:e6:75:04:5b:52:22:a4:c7:
bd:59:34:bb:07:03:b4:fd:02:0b:75:6b:40:93:ea:
2d:69:51:b5:35:64:92:eb:18:a1:88:80:55:34:91:
b0:de:01:25:0e:c4:8c:96:d4:c0:88:63:51:fb:96:
b2:0a:26:b9:22:07:aa:a5:97:8a:01:c0:ec:56:f5:
64:1b:36:f6:33:41:76:bd:18:ad:0a:2d:89:4e:01:
16:2c:25:4a:81:52:ad:eb:55:73:70:0d:54:ff:ce:
cb:98:47:8e:60:5f:41:2b:e7:d9:45:ac:3d:c0:91:
3e:b1:b3:da:a6:5a:70:30:04:8d:1e:55:a6:f3:5c:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:87:29:6A:BD:80:F4:4D:5E:2F:69:F6:39:08:0B:93:84:A6:40
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0a:af:8b:d8:69:ce:7b:e0:50:38:01:a8:8f:e5:f3:5f:c4:
b5:68:d2:1e:07:6e:02:14:69:0b:59:1f:02:29:31:f7:34:db:
ea:4c:db:ed:18:91:49:30:31:13:b2:d9:45:cc:e8:56:65:fc:
c0:d5:ed:ea:e0:b5:ba:51:e6:8d:9e:01:59:a2:df:5e:9b:99:
81:ac:7e:08:55:2e:0a:92:c4:0e:d5:16:32:d1:60:32:c1:7b:
0d:4f:bc:e3:e3:93:e1:00:6a:00:8e:fd:62:13:a9:ee:db:84:
3a:85:04:41:21:f6:ea:d3:2d:0c:18:10:bd:c0:ab:4d:ed:f5:
0a:bc:0a:50:7e:13:aa:63:c2:2e:23:5b:00:9b:5e:44:27:58:
bb:dc:7d:51:c6:5f:9a:61:0c:7a:9b:73:76:62:a8:55:9a:69:
a0:15:d0:e1:d9:5b:f8:a1:bd:5a:ef:a9:e3:3d:d9:8c:4a:01:
2a:fe:cc:90:41:97:f3:f9:e2:1e:58:fc:fc:85:b2:d9:ee:29:
37:ce:60:ff:e1:ab:d5:59:76:d3:87:55:a3:fc:0c:aa:39:f3:
01:83:3a:4b:7b:87:04:53:6b:0b:1c:bc:e7:18:92:a4:5f:d3:
b4:3f:c1:4d:b4:9b:b9:d0:fa:1f:eb:53:c6:f5:21:2c:49:35:
d9:7d:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:23 2025 by rpki-client