Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier: XoN7GwfeWO8vpzbDfumSMlroseEeGuB53fBLqrxlbwI=
Subject key identifier: 85:3B:EE:EA:D8:56:F3:5D:F5:0E:6F:1A:7B:6A:8F:26:C6:A1:BC:3B
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial: 0199FCFDAF4DD679F6F40274BFDF9CAAB433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number: 04CF
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: sFNj0iph95c+POtYn+5zjRSU0hsQ7BhpZgNg8MRS0LQ=)
2: yAFTVipgzUq2JehlyXdlgvk4lGA.roa (hash: 4JLBxrRXaq9Ej5PAfStMaFMw5Cw8Ln+aMWKMUmNE/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:af:4d:d6:79:f6:f4:02:74:bf:df:9c:aa:b4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=853beeead856f35df50e6f1a7b6a8f26c6a1bc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:95:47:51:f2:b2:6f:70:5b:98:cd:29:10:
b4:43:74:e7:be:0a:0b:c6:77:21:46:6e:19:b1:2e:
4a:dd:f5:92:af:82:37:79:52:0c:29:b7:ce:93:d4:
53:16:ba:86:2b:41:c1:87:b7:6b:42:21:b8:71:08:
1d:8f:dd:cd:db:c7:21:29:ab:09:b3:97:f4:2c:c3:
be:4b:c5:47:03:dc:28:6e:d8:37:a9:58:82:d5:72:
34:9b:cd:c5:66:d9:b5:d6:d6:bb:93:b2:ae:7b:84:
a4:1d:dd:81:9d:d1:43:ac:27:2c:59:96:41:87:a3:
4e:d5:57:15:60:34:d2:35:0e:d0:c9:13:64:7d:ac:
2f:50:c7:97:5d:a8:84:f9:a7:0b:55:74:54:b3:7d:
9e:22:36:37:f3:da:92:60:42:d0:94:3a:ab:f9:ff:
95:86:2e:9c:f0:4a:bf:47:a1:ad:76:73:b7:19:f7:
ea:3a:fb:56:01:60:61:ab:53:14:31:60:9f:cf:c2:
1a:e9:4b:7d:10:c1:42:8b:d2:31:fd:79:76:49:78:
a6:f1:ac:fd:d6:c9:af:67:33:e3:e5:73:c2:ef:94:
14:d2:14:af:7f:52:79:11:8b:3a:c1:77:d9:fd:6f:
98:04:93:3e:9b:22:98:47:47:03:d6:dd:88:3d:1d:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3B:EE:EA:D8:56:F3:5D:F5:0E:6F:1A:7B:6A:8F:26:C6:A1:BC:3B
X509v3 Authority Key Identifier:
keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:73:96:dd:f0:2e:df:fa:2f:16:b7:4b:f5:07:10:5a:c5:e7:
92:fa:a2:6a:48:03:43:51:74:db:5b:1a:e7:a7:bc:3f:0c:b0:
87:99:2e:7e:fc:65:47:e7:cb:5c:b5:6e:33:4b:de:89:60:2b:
29:02:6f:3e:99:4f:a8:38:02:a6:cc:07:16:4a:f8:07:6e:c1:
fd:60:3e:e5:7b:59:1b:39:1e:fe:32:92:a7:fd:31:b3:b2:99:
28:a7:c7:da:ae:14:00:1a:31:10:83:89:77:1b:d1:00:37:c1:
b8:97:72:20:37:a6:01:88:d9:a2:22:f5:c4:1b:b5:3c:3b:4b:
79:5a:b7:27:03:2a:c5:4d:af:6b:20:40:d5:ad:38:f7:b9:04:
f6:ff:38:f1:8b:0a:ab:7e:39:d5:d3:eb:45:46:89:d1:82:44:
fb:b9:7b:0d:22:df:78:20:54:09:a3:f9:a5:51:97:ee:90:96:
27:6c:58:ab:85:17:6f:da:56:97:fd:63:b4:ef:5b:e9:f4:5a:
bd:b3:9a:68:e4:71:1f:37:0a:8a:6a:0d:54:a2:14:f4:9f:d2:
91:0a:c7:7b:dd:8c:68:6b:1a:06:e4:38:7b:ae:4f:16:1a:b5:
e3:19:7c:36:82:5d:37:13:c5:a1:2d:9d:4b:21:4e:20:95:16:
5a:f2:8a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:11 2025 by rpki-client