Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
File: b0hdoepm0fZhammw0CuaK8Gk_9M.mft (raw, json)
Hash identifier: JqGGj0JWmjjTBhL124Qw68JiCiLaW+uga+QSO7uZyrU=
Subject key identifier: AF:5D:00:0E:00:FA:63:B4:89:47:72:54:EB:DD:3D:5A:1C:41:04:D6
Authority key identifier: 6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3
Certificate issuer: /CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3
Certificate serial: 0199FEEBF7FF88B831E51E385D66CC54E722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
Manifest number: 0118
Signing time: Mon 20 Oct 2025 00:01:41 +0000
Manifest this update: Mon 20 Oct 2025 00:01:41 +0000
Manifest next update: Tue 21 Oct 2025 00:01:41 +0000
Files and hashes: 1: b0hdoepm0fZhammw0CuaK8Gk_9M.crl (hash: 8z+0dYLgLah/6VlgjjD96bRZDkptFUT+eT8bVoufL54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f7:ff:88:b8:31:e5:1e:38:5d:66:cc:54:e7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f485da1ea66d1f6616a69b0d02b9a2bc1a4ffd3
Validity
Not Before: Oct 20 00:01:41 2025 GMT
Not After : Oct 21 00:01:41 2025 GMT
Subject: CN=af5d000e00fa63b489477254ebdd3d5a1c4104d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:74:4e:18:ca:70:9b:38:52:d3:09:01:84:
63:4b:10:9b:8a:c1:02:bb:64:42:52:b0:0d:da:1b:
32:e9:6e:25:f4:e0:17:41:f7:60:3a:05:51:dd:8c:
16:fe:08:5f:cf:15:b0:ab:07:7d:d9:0e:bd:3f:b9:
a5:e6:b7:1f:4c:72:21:0d:e8:c5:b7:f3:c7:c4:f4:
f4:84:5f:b8:da:72:28:0c:b9:0e:29:ed:dd:f0:d1:
a6:0e:f5:43:dd:fa:7c:2f:dc:80:24:a4:fa:12:8c:
f0:be:24:dd:1d:56:5b:c7:b8:d8:e7:18:8e:1d:59:
cb:a2:a3:48:de:c5:80:06:e0:8b:15:9d:ca:f3:08:
7c:51:96:7b:ff:64:07:9b:1e:b5:3a:23:77:03:9a:
c6:8c:a0:7d:af:88:b0:b0:46:06:98:38:e5:4c:59:
47:ff:33:b0:5c:cf:a7:33:f7:34:be:72:08:5a:17:
a8:e2:e6:56:3e:a1:fe:f6:a3:bd:c2:22:5f:f7:96:
53:12:39:45:b9:5b:54:11:3d:ce:fa:10:b1:3d:ac:
bd:3b:2b:de:40:bd:0d:c3:55:74:0c:22:ee:32:d5:
f2:fc:5e:96:5c:a0:87:67:50:8f:d2:02:bd:a9:6f:
38:ee:a4:69:e7:52:5e:88:30:43:62:18:8e:19:b5:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5D:00:0E:00:FA:63:B4:89:47:72:54:EB:DD:3D:5A:1C:41:04:D6
X509v3 Authority Key Identifier:
keyid:6F:48:5D:A1:EA:66:D1:F6:61:6A:69:B0:D0:2B:9A:2B:C1:A4:FF:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0hdoepm0fZhammw0CuaK8Gk_9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/566ddb-db89-467d-b225-fa8601b3b0ad/1/b0hdoepm0fZhammw0CuaK8Gk_9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b9:b0:1f:3f:8b:3e:b5:ae:91:ac:ed:23:5a:3b:51:b4:9b:
67:33:c7:61:c3:3b:e7:a0:9a:f4:87:5c:1d:24:d1:87:cc:19:
6b:1e:81:8a:3f:56:ae:10:c1:52:82:7b:7f:6e:dd:18:22:00:
ea:f1:1a:b7:ab:62:c9:9c:26:92:4c:41:e2:19:e8:b3:6d:6c:
79:c2:48:8f:ab:e8:c4:7b:69:f1:37:c7:b4:9d:29:66:3d:14:
d9:30:95:1b:c0:eb:f8:de:1a:a5:79:66:ab:e9:2c:cf:f2:c6:
a4:90:b4:e3:3e:80:1a:de:df:93:b8:be:c4:48:14:06:de:80:
2d:35:9d:c9:95:b6:a9:b9:d2:49:44:10:64:8a:92:dc:a3:11:
cf:ac:2f:db:02:11:f4:ac:1d:5d:24:6c:02:c9:bf:f9:97:c3:
d8:dc:35:a8:e2:6c:73:ae:44:64:10:50:6d:e3:71:5b:57:09:
7f:62:65:40:34:ec:64:e1:fa:6b:1d:33:cd:8e:09:90:9d:54:
b8:4d:70:24:26:b9:29:f0:4c:27:6f:9c:d4:9c:6c:53:f4:62:
2a:3b:2c:97:0a:77:0a:1c:04:97:bd:a5:d8:0d:be:be:c5:0f:
bc:12:0c:78:14:9e:08:6d:0b:aa:48:88:4e:8b:1d:07:9c:a5:
67:fa:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:05 2025 by rpki-client