Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: /4q7L+6aPxXrmzhjmFmDqdVsoRC0gLNLCRVMafX7xk8=
Subject key identifier: D5:85:8A:12:EB:B4:E4:74:E1:16:4D:D6:9D:C7:94:36:F7:B2:7E:0A
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 0199FC21723B8D70E0126A799FB50E99C7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 06AE
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: Sy5jeVvAJej3UAnBto/frDYyFT7/5CNu+kVzYAtiU4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:72:3b:8d:70:e0:12:6a:79:9f:b5:0e:99:c7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=d5858a12ebb4e474e1164dd69dc79436f7b27e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:80:d7:01:9c:51:74:d6:a6:e5:5c:8f:0f:
3b:d0:db:21:17:dd:a4:b8:9e:c1:8a:ec:be:c1:1b:
6e:4f:13:50:e4:8b:17:83:cf:8e:7a:53:92:cd:5d:
0c:bc:fc:57:8e:37:ba:ac:1c:b9:3d:0b:d1:ec:c9:
25:e9:f8:9d:44:f0:ad:3d:64:18:d0:ab:78:89:4d:
ac:31:41:9e:3f:16:4f:2b:83:e9:8d:73:c4:3c:44:
2b:4f:1e:f9:1d:63:e1:d3:cc:4c:12:83:cc:2c:84:
9a:1a:b6:ff:1a:12:a6:8c:59:2d:6a:5e:c1:8f:42:
2c:be:a4:82:96:f5:7b:4f:7f:4c:15:ae:97:55:61:
73:48:35:22:37:58:6b:88:fd:69:f8:cb:eb:53:d7:
4c:9b:78:0f:ea:22:32:ec:e2:6a:0f:62:eb:53:ca:
95:26:56:58:06:3f:fb:12:3b:01:26:75:b0:28:4e:
bb:52:50:d9:b5:74:61:8d:87:d4:85:a4:c9:fa:41:
db:65:fb:7a:31:2b:0a:02:cf:73:23:41:f2:3d:78:
eb:d2:e1:00:86:69:94:da:99:62:ec:4b:0b:77:1e:
33:ac:c9:0a:19:35:9d:b2:a0:62:da:f9:fb:b2:90:
a2:39:50:df:14:28:88:b2:78:ae:bd:87:e1:65:70:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:8A:12:EB:B4:E4:74:E1:16:4D:D6:9D:C7:94:36:F7:B2:7E:0A
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2a:68:9d:3d:1d:c6:3e:e7:8f:59:8e:87:db:36:65:f2:a4:
34:80:aa:40:65:35:ce:3f:f9:7e:88:a9:1e:2b:94:f9:c0:58:
98:61:7b:f5:e7:6d:10:ed:ea:af:f5:be:dd:67:91:05:41:48:
92:98:c6:4d:df:de:20:b5:a0:06:9d:22:7c:8f:26:03:9f:ab:
ee:56:a1:9b:49:6d:ae:d3:7a:7a:03:1e:96:c6:c2:f2:5d:a6:
ed:e4:28:30:5a:ea:94:35:49:6a:36:44:5c:bb:8c:3f:e3:01:
e8:ca:c4:a0:93:15:d8:37:c4:77:45:10:ee:76:9a:78:35:6c:
54:c5:0d:88:01:7d:ed:c5:91:31:a8:5d:80:d9:46:99:07:d8:
e0:21:25:a5:4e:62:2a:7e:20:43:62:f8:b7:24:b0:86:b1:e3:
f7:d1:29:bb:f4:fa:03:35:b2:fa:06:c9:b5:fb:23:bd:f8:51:
de:9c:92:3b:73:b9:d5:15:08:7e:01:da:61:ae:e3:3e:aa:1d:
9c:76:27:7f:df:95:1a:d2:b7:fb:8e:12:0c:7f:2e:78:b7:cb:
44:5f:67:51:3c:76:75:92:98:e3:65:d7:b9:9c:8f:bb:0f:5a:
08:d9:fd:9c:a4:bf:51:80:15:ea:e9:6e:5d:42:b7:a6:4b:5f:
56:f1:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:24 2025 by rpki-client