Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: ghJM6kOlIzCVcuOkkmusSpjuKLdbXZH7czz/ELpoTNc=
Subject key identifier: 0D:D4:3E:81:89:A6:D1:F1:72:97:86:08:28:D4:0D:53:B8:9C:D8:03
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 0199FDD9886F904F0E63DCD7CD205F7BE56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 0B50
Signing time: Sun 19 Oct 2025 19:01:55 +0000
Manifest this update: Sun 19 Oct 2025 19:01:55 +0000
Manifest next update: Mon 20 Oct 2025 19:01:55 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: RCvAu17V68ylACzZYkMJWtAPPMDmKEyVq3yonZy5y3o=)
2: Z6jijp-NqGecwIu65j-qEMAm0nw.roa (hash: 19TQbomnm0YTugnf3c9Z0fKykpuT1EtKWHuZ0GsZG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:88:6f:90:4f:0e:63:dc:d7:cd:20:5f:7b:e5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: Oct 19 19:01:55 2025 GMT
Not After : Oct 20 19:01:55 2025 GMT
Subject: CN=0dd43e8189a6d1f17297860828d40d53b89cd803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:26:f2:31:ac:f0:01:95:3c:ef:3d:84:db:
43:a2:31:4d:bb:d4:83:5d:ca:65:5e:c5:2c:af:8e:
41:e7:1f:f6:b5:fb:af:5b:2e:b1:d0:00:68:31:57:
7d:7e:ab:43:3f:fa:e4:76:fa:e4:c4:6d:f2:0a:dd:
29:61:e0:5a:82:f2:9c:c7:5d:10:88:65:bd:fb:b6:
7e:a7:e0:cd:33:91:cb:7d:cf:02:73:d9:73:3a:db:
64:c2:c4:c8:5e:88:31:de:97:ca:4e:d5:7d:46:09:
0e:e6:62:91:2e:8f:ff:1f:12:19:05:96:1b:37:de:
4a:20:e4:8d:5c:12:e7:46:21:03:95:c1:43:15:68:
3d:ec:b7:bd:d7:01:c9:64:71:eb:8d:69:84:26:43:
0c:89:2c:6b:08:5c:c7:ba:c7:29:30:64:21:a7:f6:
47:f7:c7:32:40:41:ef:ef:92:87:5a:a0:73:26:5c:
69:08:3c:22:bb:aa:88:e2:d9:0f:02:1c:b4:16:4d:
92:b1:54:d6:5c:2e:15:e0:47:ce:80:d6:82:8f:6f:
81:64:d6:cc:be:9b:b9:ef:5c:6a:b7:24:55:95:d3:
f5:9e:33:ab:bf:34:5b:7c:33:2e:12:92:d9:bb:4b:
2f:23:0a:cb:fe:45:6c:3c:f0:9c:7e:78:c5:33:76:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:3E:81:89:A6:D1:F1:72:97:86:08:28:D4:0D:53:B8:9C:D8:03
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2f:e0:4b:dd:8a:af:29:15:3a:d5:0b:53:86:29:5a:72:97:
f4:dd:2d:d9:42:69:f6:9f:7d:b2:59:ef:81:ee:62:bc:cf:d7:
36:af:c9:d3:83:8f:fe:61:fe:f4:e6:55:07:83:74:c5:be:77:
13:b5:5b:28:70:dd:7f:07:58:ff:b0:84:cd:46:94:b2:d6:ac:
20:c2:f8:89:8a:67:bd:54:8a:9a:a0:68:eb:7c:0e:cc:59:07:
1a:a8:b5:bb:b9:ed:93:89:89:85:3d:b8:04:cc:df:9d:21:57:
c3:21:00:46:3e:56:cc:2e:48:4e:f1:d7:59:19:e5:e2:84:0d:
5c:d0:8f:4a:b6:08:c1:89:ef:9c:d1:f6:bc:ab:17:2d:f2:1d:
5d:06:3b:2a:73:6e:d3:18:c3:91:f8:7d:9c:e7:17:55:13:0e:
06:24:24:8f:ef:a4:0e:f3:42:1c:0f:69:e3:29:f4:11:55:f7:
a2:01:5b:ab:4b:b4:0b:b5:62:44:ff:78:52:fb:0c:12:07:aa:
03:3a:83:3b:2c:b7:1b:af:38:76:89:aa:23:03:7f:0c:8c:a3:
16:bf:31:3a:fb:76:4b:3b:72:8f:42:3d:b0:0a:26:ac:14:4b:
31:ad:5a:4d:db:4b:cf:7c:e4:5a:10:3d:e4:dd:c9:f2:81:81:
17:5b:c1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:35 2025 by rpki-client