Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
File: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft (raw, json)
Hash identifier: a/4+OYJw9dUIUFT2GFKS1GdZvFR2SNLrSiFplntllY8=
Subject key identifier: 0F:66:2A:D5:A7:39:F7:B5:A5:BE:96:3D:6D:EE:7A:35:FB:5A:08:D7
Authority key identifier: 47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
Certificate issuer: /CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Certificate serial: 0199FC8F7530D91B9CB90C0F4E1E2F6F47CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
Manifest number: 0432
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl (hash: oNQ6Iv9rwBlWI473mpoP6Xl9GEjhdYuP8rMRhq78gJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:75:30:d9:1b:9c:b9:0c:0f:4e:1e:2f:6f:47:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474fb66d7e85bb4ad08c5092f0bb806292ba0e08
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=0f662ad5a739f7b5a5be963d6dee7a35fb5a08d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:ce:a1:77:1a:b1:52:3a:37:b2:d1:be:8d:
92:ab:f8:10:0e:c5:53:3e:20:4b:7d:80:3a:3e:b2:
e6:41:e8:e5:a7:4e:a0:12:c3:35:e8:95:f4:3d:61:
ff:ec:cb:92:39:13:00:89:c6:9f:c4:5f:b7:dd:7b:
b9:ec:03:21:8b:a9:d2:66:2f:f6:52:65:56:ae:d2:
97:ea:94:c5:9d:5c:3d:aa:27:ec:36:d9:e9:1f:05:
2c:97:7e:04:80:e7:0a:c9:37:98:07:58:d2:bc:ca:
32:6b:29:76:b6:e6:79:4f:31:69:8c:c6:5c:02:8f:
e2:99:69:02:ce:e6:3f:db:7a:03:11:6d:94:c5:9f:
93:81:a1:fd:82:b8:ff:0d:81:14:d0:14:5f:44:61:
b7:7c:7c:d6:ae:c0:ca:2d:12:1a:a0:a8:1a:fe:52:
c5:ba:8b:17:4a:1c:4b:0d:10:36:11:e4:9f:c2:b9:
78:cd:51:00:02:a9:d6:74:b3:92:c5:e9:44:d8:f8:
4c:31:bc:6c:9d:55:ae:20:2e:34:c7:89:0d:4b:4b:
51:16:14:32:06:32:ac:35:32:3e:66:12:3d:22:b5:
a5:06:2b:d1:cc:d7:e6:2a:9f:fe:15:97:cc:17:c6:
7e:4e:78:46:51:e5:04:87:fb:da:70:c6:4b:51:8d:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:66:2A:D5:A7:39:F7:B5:A5:BE:96:3D:6D:EE:7A:35:FB:5A:08:D7
X509v3 Authority Key Identifier:
keyid:47:4F:B6:6D:7E:85:BB:4A:D0:8C:50:92:F0:BB:80:62:92:BA:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/128ca7-6f0a-4904-97eb-afecf22ee115/1/R0-2bX6Fu0rQjFCS8LuAYpK6Dgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d4:ff:22:15:c9:d2:67:96:4c:76:9a:36:9b:51:c6:b2:a8:
41:76:56:26:93:4e:ac:93:4c:6a:df:d7:a2:fd:1d:00:16:52:
aa:d5:17:13:91:6d:41:90:87:24:a1:2b:a9:92:7a:d7:2e:d1:
c1:ac:84:30:82:e9:99:62:b8:97:52:7d:a8:00:a6:e8:a1:b9:
c5:96:9e:bf:be:44:d1:6a:40:9d:22:5a:31:00:38:fe:fe:c5:
52:9d:8f:9a:6d:64:b3:28:a0:c6:11:22:49:ab:1d:00:35:27:
e0:75:db:e8:8c:24:dd:cf:43:80:8c:12:0d:60:a3:14:fd:da:
1b:e5:fd:59:c8:15:85:05:30:c6:0a:09:61:31:fd:17:07:0e:
68:99:0a:41:00:1a:3c:67:16:35:b4:12:31:f0:d7:80:e6:ea:
a1:c1:20:99:9a:be:43:4a:fb:65:b7:50:76:b6:4f:cd:de:d5:
6a:da:59:e3:dc:64:d2:85:4d:e0:ce:24:27:72:1b:39:3c:a9:
29:13:36:aa:c5:16:32:80:6c:bf:87:7b:9e:4a:0f:25:6f:64:
3c:d3:a4:e4:b4:90:19:45:bf:4a:2e:b2:9c:39:fa:1a:de:70:
52:0c:f3:57:d7:46:35:7b:08:8f:63:07:df:28:7f:d4:58:ac:
e3:e0:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:46 2025 by rpki-client