Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File: 0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier: O3IoL6OUQVl2SGOF4dnHVmpUTmKs3c4Xwo5VRk8ZfHQ=
Subject key identifier: C1:7B:28:FE:20:64:88:BB:10:65:60:03:61:37:9C:D5:3C:87:DE:F0
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 0199FC21C19D3EC6A0B2987250B2E2FEEE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number: 0E30
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: GVi563EklqCWh3l2uk7I5PJEocdnNlY7xLLUNqIQDsw=)
2: 30clEHSQ2FtWcxS6WRrlfziweF0.roa (hash: kMEVQBcSv51miHKtL16mTfHOOekvOtrPK9PKsU+A9fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c1:9d:3e:c6:a0:b2:98:72:50:b2:e2:fe:ee:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=c17b28fe206488bb1065600361379cd53c87def0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:31:24:e2:60:49:f3:3d:31:17:3a:66:9a:
fd:d8:06:2f:27:ff:7e:7b:37:84:27:7c:70:b5:48:
5f:38:53:cf:47:f0:ab:a8:9f:90:29:7b:4e:8b:64:
5f:d4:d8:58:0e:83:5c:6a:47:ab:ca:db:2c:2e:a7:
c3:4b:54:d1:f0:5f:46:26:5f:11:5f:b5:b4:66:2e:
9f:7f:a1:56:1b:be:c0:ca:2a:c5:75:fa:d1:ff:88:
0e:29:d6:55:36:e3:4e:b6:93:7a:8c:80:d5:6d:7d:
26:ec:22:41:47:eb:2d:2f:d2:e9:dd:52:99:21:35:
d3:70:8b:82:46:a8:b6:f7:83:32:e8:65:e0:34:21:
9e:07:64:28:d9:42:00:aa:40:3d:3e:9e:31:3d:18:
09:38:b5:a3:65:fe:a8:0c:7a:a6:a3:66:20:15:c3:
34:6a:f3:9f:be:db:9a:d8:9f:86:9e:dd:84:6a:99:
2f:50:c1:06:ee:a8:34:ec:30:55:76:ab:6e:86:d0:
04:20:6e:b1:e4:af:6d:a6:c4:75:73:07:5a:99:7b:
c4:75:58:85:8f:12:b2:b2:d0:77:b5:14:90:53:0c:
d8:66:2d:0a:ac:e1:84:ca:d7:6f:d6:c3:a3:47:9e:
8b:2f:03:23:e0:30:bc:79:f2:fb:ed:73:3f:7a:b2:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:28:FE:20:64:88:BB:10:65:60:03:61:37:9C:D5:3C:87:DE:F0
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:25:ab:84:b1:2b:7f:0f:b5:51:0d:47:b2:c3:b4:cb:13:a8:
ef:6f:03:99:b6:a0:85:12:72:c9:1c:f5:37:b1:b8:53:91:1d:
12:07:02:3e:87:62:72:f5:5b:56:f2:d3:65:84:71:74:aa:4b:
ed:a4:56:f0:47:91:75:80:0e:09:bb:5b:70:02:d0:0d:04:f7:
cb:67:57:71:61:22:9a:f8:4c:10:a3:78:79:33:d7:d9:ce:50:
ed:8b:f5:3a:98:7b:f8:5d:7b:31:75:2d:b2:11:a7:f8:fc:c0:
98:d4:f4:25:00:f5:6c:09:72:a0:49:2c:e2:be:d3:f0:da:4d:
f5:ee:84:0b:99:a3:f9:f0:0e:47:dc:91:a1:c1:40:df:21:15:
e7:88:d1:95:c0:54:8f:cb:eb:77:a1:3e:5b:ec:a2:89:d2:9b:
0f:2a:a3:62:6c:65:b9:af:35:4d:8b:a0:bb:76:63:82:4e:03:
6b:44:26:7f:b1:61:4b:34:c6:06:e1:32:70:46:52:de:8a:e9:
57:88:1b:bd:19:23:02:ff:fd:b2:20:32:9a:4a:53:12:03:3c:
6e:5b:aa:25:03:1c:17:d4:26:7d:95:7b:76:31:18:bd:74:1d:
85:22:2a:a9:d7:f5:a5:2a:2c:44:7b:69:09:cd:8d:40:4a:96:
d3:f9:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:15 2025 by rpki-client