Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
File: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft (raw, json)
Hash identifier: AQW5nkvc7p3gZRYDvy4xdCNWr+qmLoFqFm46TDfJWjk=
Subject key identifier: 20:82:ED:18:B5:B7:79:B5:11:3F:2C:59:13:49:9C:6B:6F:6D:C5:C4
Authority key identifier: D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
Certificate issuer: /CN=d09da99a73ba7202418f73718932dc8d7c153e32
Certificate serial: 0199FAD8302A9AB6885BD2385BF3F730EB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:36 +0000
Manifest this update: Sun 19 Oct 2025 05:01:36 +0000
Manifest next update: Mon 20 Oct 2025 05:01:36 +0000
Files and hashes: 1: 0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl (hash: B85SHnxiXDwjf7zl8AiBqTtREhHEH4t2nTE6OewtH8I=)
2: nJUcoCNc07cyfYEUlMwbz1g_DaE.roa (hash: Ib/IQqjAiE9xz41/z9I1UMYPE1ywAN0ig2dufXZbgBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:30:2a:9a:b6:88:5b:d2:38:5b:f3:f7:30:eb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09da99a73ba7202418f73718932dc8d7c153e32
Validity
Not Before: Oct 19 05:01:36 2025 GMT
Not After : Oct 20 05:01:36 2025 GMT
Subject: CN=2082ed18b5b779b5113f2c5913499c6b6f6dc5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:94:81:b6:06:fe:8a:e8:2c:da:d0:fa:2c:
2b:3b:b4:38:3f:fa:f1:e4:b2:1d:ad:65:26:7b:17:
c1:19:35:63:aa:32:5d:1d:c4:e1:45:6d:da:5f:00:
93:0c:78:89:0a:c9:24:26:c5:fb:e8:ac:87:de:cc:
59:27:01:38:33:13:a6:7d:fa:b9:51:6c:29:b4:14:
2c:f2:cb:41:8d:4f:58:03:74:a9:e4:6d:77:e7:f9:
8c:b6:f0:75:98:96:29:c4:95:80:b4:3f:02:b6:be:
2f:d3:96:17:44:78:6b:1a:44:e4:30:da:14:3a:ad:
c5:2d:81:17:4c:58:e9:97:1c:e4:38:9a:1a:10:08:
a9:e8:51:66:ee:7b:26:dc:22:40:1d:8e:e9:0a:83:
35:38:13:c1:1f:e1:35:bd:6b:30:a7:8a:64:04:b0:
85:ee:eb:7f:8d:8d:fa:a6:b0:ca:22:ad:e7:07:98:
f6:b4:bf:0c:66:fd:1f:61:de:02:fa:d7:ad:9f:e5:
9a:94:a2:d8:07:d9:d7:0f:ce:3a:5a:97:d5:f8:22:
2a:e7:e8:2e:e1:69:db:87:93:fc:eb:69:48:44:92:
8f:c5:3e:0e:9c:bf:df:e7:8b:a1:2f:ba:4c:4e:37:
47:7f:8b:5d:c8:7d:4d:db:4e:0a:cf:ad:ea:0b:30:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:82:ED:18:B5:B7:79:B5:11:3F:2C:59:13:49:9C:6B:6F:6D:C5:C4
X509v3 Authority Key Identifier:
keyid:D0:9D:A9:9A:73:BA:72:02:41:8F:73:71:89:32:DC:8D:7C:15:3E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J2pmnO6cgJBj3NxiTLcjXwVPjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8a2ced-87ae-41ea-b3b0-dcebf6197e0e/1/0J2pmnO6cgJBj3NxiTLcjXwVPjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2a:67:ac:de:20:67:e5:c7:cc:84:e7:8c:88:ca:81:ff:3c:
b3:aa:bb:45:0c:5a:44:3f:2e:d6:09:0b:b3:65:f8:d2:9b:14:
a0:0f:e2:6a:d7:08:97:df:0e:33:06:12:f7:29:e5:b5:4d:7a:
35:96:3f:c2:65:88:d3:fc:08:3e:68:c1:c9:38:7c:91:85:86:
54:ef:26:0d:ba:b2:90:eb:91:3d:c4:d7:81:69:c4:a9:f6:58:
25:19:82:89:09:2b:a2:18:8a:61:ae:ed:68:27:74:bc:a3:43:
12:e9:b4:0d:97:a7:a7:3b:d5:c4:50:47:ac:5b:8b:6e:d4:3d:
bc:56:78:79:de:82:26:01:b9:89:14:a7:b2:2d:a5:2e:7b:2e:
8f:3e:cb:c4:b6:29:1c:3e:36:f6:82:87:75:d2:50:2a:88:02:
44:32:71:4e:df:06:74:db:f8:b9:d4:bb:77:cc:d5:ce:5b:34:
84:08:80:d4:84:d2:a8:e1:80:06:32:80:70:2d:c9:20:df:f6:
d4:16:75:97:66:08:62:59:c9:d9:c1:0e:d3:9e:9e:f4:82:f6:
28:22:94:70:02:49:6e:15:9d:ae:2d:17:0a:1d:de:68:d2:7f:
5b:e2:7a:ad:ba:d8:77:c9:01:73:ae:52:5c:c9:47:03:34:d6:
be:59:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:37 2025 by rpki-client