Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: 2zvk/4J2+clqcfvlo2tsQnjrBA/xA1oHrwHjDkc1Qug=
Subject key identifier: AB:4D:A9:D7:C4:1F:7A:3A:40:F9:65:0C:D0:2B:35:DB:10:1C:F3:6D
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 0199FCFD4F4290ED98D8DBEB01817EA5E368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 04CB
Signing time: Sun 19 Oct 2025 15:01:23 +0000
Manifest this update: Sun 19 Oct 2025 15:01:23 +0000
Manifest next update: Mon 20 Oct 2025 15:01:23 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: ZP/YBPnwnSTOxxRGpg8a3vnmJMPdLHXe9tmiCik6368=)
2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4f:42:90:ed:98:d8:db:eb:01:81:7e:a5:e3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Oct 19 15:01:23 2025 GMT
Not After : Oct 20 15:01:23 2025 GMT
Subject: CN=ab4da9d7c41f7a3a40f9650cd02b35db101cf36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:31:19:e0:b9:8a:c2:86:3d:27:9b:2f:4c:
3f:1a:8f:d0:2a:77:d0:d1:34:e7:bf:82:41:9c:a3:
b5:b4:71:03:03:5c:a6:ee:06:60:a9:0d:ff:26:69:
2d:50:1f:ec:28:36:f4:d5:39:aa:fa:e0:04:92:aa:
38:48:38:1f:6b:cc:b2:9a:87:8b:ea:92:76:58:66:
f3:76:e4:1c:6b:ac:36:86:e1:9f:12:a5:98:0e:1e:
85:02:53:5b:8a:7b:32:4f:d3:1d:9b:90:0e:8a:8d:
fc:29:ec:8b:b8:5f:d0:9f:09:dd:90:c0:18:b7:b8:
db:31:38:f4:10:04:d5:81:18:a9:9c:37:3a:1d:d8:
ba:49:52:93:6d:19:0d:22:ec:24:f2:70:6b:d7:38:
52:32:c4:27:4b:aa:08:fc:3d:75:c4:1b:f8:77:e5:
34:2a:24:a9:87:e0:2b:b1:d6:4f:14:c9:63:e7:02:
ff:84:7c:78:ae:58:d5:b0:f9:19:c8:09:c3:66:e7:
54:15:f4:3b:5f:e1:55:96:21:dc:c0:0c:4b:29:4a:
24:0e:44:9c:84:d7:e9:6d:75:ae:b7:c0:5e:1a:2e:
99:6b:2c:9f:6f:a3:51:98:a4:fe:5c:81:51:24:aa:
b9:2d:17:1d:0f:50:b9:75:0b:ee:52:87:8b:63:32:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:A9:D7:C4:1F:7A:3A:40:F9:65:0C:D0:2B:35:DB:10:1C:F3:6D
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:d1:d2:58:c6:7c:68:3d:31:1f:93:3c:e2:14:3a:ae:0a:
da:d2:9e:5d:58:bb:ce:a2:8a:6c:31:b8:87:2c:9f:d1:84:59:
f4:d8:f0:ce:e2:18:c8:9e:32:46:d5:b7:a2:1b:e3:1c:9e:ec:
94:d6:1b:c9:fc:fa:b3:9e:bc:11:18:fc:ff:83:ef:2a:51:65:
6c:d6:a1:77:e5:4b:da:f9:ce:f1:ae:a7:1f:99:07:50:0f:e8:
f2:16:bd:ba:7e:7c:06:b9:4b:99:e3:8b:04:cc:8d:5e:a5:1b:
6a:cd:2b:f0:21:f4:13:58:81:d4:82:15:bb:fa:73:db:66:41:
f8:5a:35:3c:d9:b7:76:c7:86:a2:bb:dc:a5:eb:5d:23:fc:ea:
a4:32:4c:23:4c:9b:13:fe:a8:21:33:9c:32:98:b6:fe:94:fc:
29:29:fd:8a:ad:26:6f:ef:ba:8e:fd:72:59:ee:50:ec:13:74:
19:fb:13:86:8b:ff:d6:c8:e5:b9:94:f9:2b:fe:91:6e:f4:a9:
49:ce:a3:68:96:ef:bc:5e:26:cc:1a:cb:50:68:99:91:fc:10:
a9:59:20:ab:c1:78:0f:58:80:19:4d:d4:47:05:7f:67:97:df:
25:d9:49:0b:64:44:fa:7d:e0:1d:50:1d:ae:48:b0:53:22:bb:
bd:bd:20:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/U9CkO2Y2NvrAYF+peNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmU0NTM4ZjFkZGVhNzdmNTczOTZiYjkzYjkwN2YxNTJk
ZjY5N2MwHhcNMjUxMDE5MTUwMTIzWhcNMjUxMDIwMTUwMTIzWjAzMTEwLwYDVQQD
EyhhYjRkYTlkN2M0MWY3YTNhNDBmOTY1MGNkMDJiMzVkYjEwMWNmMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhExGeC5isKGPSebL0w/Go/QKnfQ
0TTnv4JBnKO1tHEDA1ym7gZgqQ3/JmktUB/sKDb01Tmq+uAEkqo4SDgfa8yymoeL
6pJ2WGbzduQca6w2huGfEqWYDh6FAlNbinsyT9Mdm5AOio38KeyLuF/QnwndkMAY
t7jbMTj0EATVgRipnDc6Hdi6SVKTbRkNIuwk8nBr1zhSMsQnS6oI/D11xBv4d+U0
KiSph+ArsdZPFMlj5wL/hHx4rljVsPkZyAnDZudUFfQ7X+FVliHcwAxLKUokDkSc
hNfpbXWut8BeGi6Zayyfb6NRmKT+XIFRJKq5LRcdD1C5dQvuUoeLYzKGgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtNqdfEH3o6QPllDNArNdsQHPNtMB8GA1UdIwQY
MBaAFNJuRTjx3ep39XOWu5O5B/FS32l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2Qt
NWRlOTlhNTJhYTM5LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2QtNWRlOTlhNTJhYTM5
LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHPR0ljG
fGg9MR+TPOIUOq4K2tKeXVi7zqKKbDG4hyyf0YRZ9NjwzuIYyJ4yRtW3ohvjHJ7s
lNYbyfz6s568ERj8/4PvKlFlbNahd+VL2vnO8a6nH5kHUA/o8ha9un58BrlLmeOL
BMyNXqUbas0r8CH0E1iB1IIVu/pz22ZB+Fo1PNm3dseGorvcpetdI/zqpDJMI0yb
E/6oITOcMpi2/pT8KSn9iq0mb++6jv1yWe5Q7BN0GfsThov/1sjluZT5K/6RbvSp
Sc6jaJbvvF4mzBrLUGiZkfwQqVkgq8F4D1iAGU3URwV/Z5ffJdlJC2RE+n3gHVAd
rkiwUyK7vb0g9Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:34 2025 by rpki-client