Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: 2pjRhUYT+T8MRCFE9RgpbuAz/NP2DciFmh9wt9RsTJo=
Subject key identifier: A0:61:07:B1:35:2D:B8:94:A1:DD:95:F7:01:4D:85:29:3D:86:08:38
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 0199FEB46DF4B5E3A47BF20929926F880DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 10AD
Signing time: Sun 19 Oct 2025 23:01:01 +0000
Manifest this update: Sun 19 Oct 2025 23:01:01 +0000
Manifest next update: Mon 20 Oct 2025 23:01:01 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: ToHYJ+zOXiFwaPofQXCmnERzAaBirL/ePvG513UUFMo=)
2: wvWJOusH9NjJmboQYN_96qUtjQA.roa (hash: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:6d:f4:b5:e3:a4:7b:f2:09:29:92:6f:88:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Oct 19 23:01:01 2025 GMT
Not After : Oct 20 23:01:01 2025 GMT
Subject: CN=a06107b1352db894a1dd95f7014d85293d860838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:8e:10:18:6d:19:98:84:de:e9:ab:88:ee:
5d:b1:48:59:cb:df:7f:be:34:08:3c:52:ec:f7:cb:
80:90:c0:f3:a2:a2:7f:ca:9a:f1:c5:1e:9d:b3:97:
cb:d6:9e:2f:bd:e0:5b:a6:7c:fa:5d:0f:1b:d7:c2:
12:56:d3:ef:11:b1:3b:ee:c6:41:01:74:f6:cf:59:
f9:69:95:ec:97:0d:a0:c4:c4:63:3d:f6:f3:68:bb:
87:ed:c8:e2:e1:9d:1a:04:e5:5e:9e:bf:d0:e5:f9:
d6:c3:c3:17:ba:14:54:fe:ae:4d:3f:b6:95:79:9b:
97:fe:59:24:49:5e:c6:d8:f7:59:cd:dc:7a:41:98:
df:e0:0c:0c:37:7a:fb:b9:c6:3c:f3:77:d0:ae:a7:
f1:a3:52:d6:a1:e7:8c:f4:73:07:83:b5:4b:96:0c:
63:51:90:b5:3b:e0:3e:78:a1:e5:f2:3b:ba:22:62:
66:c5:40:ba:b7:09:56:c5:4a:7f:43:13:16:6c:a8:
07:6b:f2:82:e4:40:09:87:ea:f6:1e:78:0d:9c:c4:
42:f8:5e:f2:81:f2:56:8c:9a:3f:b7:74:3f:98:af:
0b:af:60:82:b0:6a:06:d1:8d:54:89:68:39:a6:3e:
79:d2:4c:aa:23:e2:18:56:d5:7f:94:cc:3a:ea:be:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:07:B1:35:2D:B8:94:A1:DD:95:F7:01:4D:85:29:3D:86:08:38
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c5:58:8c:93:49:6e:3f:b9:28:14:52:68:bc:b8:89:4d:99:
db:04:24:cf:9d:c3:01:f5:85:6d:2c:bf:0c:7d:ed:23:6a:d8:
60:0d:07:82:cf:04:8e:f6:5b:6b:2d:b8:e2:27:fe:ca:84:1b:
40:90:75:70:3a:cb:e9:82:53:0c:71:72:f2:4a:ed:a5:0f:8b:
1c:58:ff:b3:2e:8a:ee:42:6d:ef:44:e5:2e:dc:7a:de:70:3a:
41:d0:39:2b:c8:7e:41:0a:8e:36:0d:e9:02:2d:07:a2:92:8b:
1f:b8:d3:5e:5b:b8:29:1e:c1:d7:3b:b2:f8:79:7a:39:68:fd:
4d:c2:51:2f:14:d4:be:90:c0:17:48:ca:8f:b3:b2:a5:ef:4e:
0a:e4:d4:2d:bd:25:ca:12:4a:8a:bf:fc:f8:55:d0:6c:09:7b:
2e:e7:55:0e:45:5f:40:eb:c3:59:17:b9:80:20:4f:08:72:11:
39:fe:04:63:86:be:08:c2:a7:d1:5d:21:1e:88:29:c6:a2:e5:
8c:65:5e:3d:25:a9:da:8e:03:3a:11:43:a9:6f:a9:b8:1a:53:
2c:6d:56:54:f7:43:ba:cd:90:f1:6b:2f:bc:53:8d:ba:a3:d1:
74:21:6f:34:61:d8:0a:e7:bc:8e:5f:2d:6e:46:80:ce:4a:5b:
e9:79:6a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:38 2025 by rpki-client