Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: Rh8L2Fue0F0td+8yDbr/jZrDLHCjssbH+elFjk9hWOc=
Subject key identifier: D6:FC:64:16:DE:8C:71:E1:7D:2B:FD:54:FC:1E:72:35:F6:4A:09:15
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0199FC2192BB5730297E7B11839F51A2DE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 0A90
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: MyPtqhocTerM5wrLNVkNyMh+BLhiNI/tuzAZMBCG94o=)
2: 73fgtycAM2crZ_LHwWRiB0oEU9Y.roa (hash: flrMOVA6rk3M5Itkv7RZo+kAVGvmhl0NxmnJ1f7lgFI=)
3: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
4: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
5: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
6: JfF0v8eby0BQNtVREEaJFT1Zxcs.roa (hash: OQTTsSrZcqdOC8lDs04JBaSkoqVL61gLZ8I1J00GtDk=)
7: YcTIc32XZA-ghsWcGzLeleFcTdg.roa (hash: hArIQsrZH8U5ODHNwYYROkxmUYJ8DizJuV1l/Z6DTPE=)
8: bmLTewV0kZU9bfOTKlVtrHvIMyQ.roa (hash: 1N2udKCYu0d+0ddwjQonUl6aLmfYMfYwRiupNuK5mRs=)
9: u9So4nOjetfAA9W1OFixoyvY5tU.roa (hash: cvRW0bCt24xTGsHS9amEg/tzquXgyYz0ckBw0mMHbQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:92:bb:57:30:29:7e:7b:11:83:9f:51:a2:de:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=d6fc6416de8c71e17d2bfd54fc1e7235f64a0915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:37:0a:e3:64:0e:77:9c:69:19:29:37:83:
35:66:09:3f:ae:56:44:96:4c:6b:23:0e:35:19:50:
a1:e1:df:8c:7d:07:f2:63:a9:3c:79:cc:52:58:cd:
e3:33:b2:3b:ad:92:d0:42:32:38:ca:b8:73:98:7f:
7a:a4:ea:99:94:0c:f5:61:f1:95:8d:a4:35:97:f9:
1d:6c:fe:f1:26:0a:1d:7d:e0:e4:72:b9:74:c5:a9:
8d:c9:9e:98:78:ef:6b:bb:3a:8d:33:de:7a:ad:65:
56:ec:a4:63:5a:e0:0f:8d:77:5e:b1:59:2e:9f:98:
63:fb:3a:f2:46:be:aa:cc:ba:f0:42:ab:6d:b8:e3:
67:59:06:d1:85:67:68:a1:b3:16:1a:21:16:ce:33:
9d:c1:10:93:ea:a9:01:d3:ed:02:9a:5e:a7:6d:92:
8d:98:82:1e:da:76:47:87:f1:60:8b:a0:7b:cc:68:
ab:b0:83:c5:a8:0d:b3:f1:fb:8d:39:68:a7:fb:09:
2c:73:3f:b8:f7:d2:af:1b:79:9e:b6:44:32:87:57:
6f:43:bd:cc:07:1e:90:a7:a6:af:a5:86:e1:30:24:
15:6e:1e:ab:46:40:d5:3a:75:8f:2f:43:b2:90:06:
c3:82:01:47:44:30:82:b1:0f:6e:08:20:44:9d:56:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FC:64:16:DE:8C:71:E1:7D:2B:FD:54:FC:1E:72:35:F6:4A:09:15
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:98:f1:06:4f:d0:cb:3a:ba:ff:69:3b:ac:d7:ed:b8:b6:48:
d5:d4:8a:8f:f2:09:7c:e5:dc:d4:a7:6b:a0:8b:de:61:12:fb:
34:82:b7:5e:49:a4:02:72:dc:6b:7c:13:ea:d6:5a:5e:37:e9:
c0:3d:59:ea:81:a7:cd:46:f3:d0:93:f8:fe:76:93:f7:35:c1:
f0:4d:a8:7d:2d:c8:d6:46:b1:a9:8f:b7:79:3b:c8:56:8b:8d:
4a:a5:6a:04:74:23:05:da:6f:aa:b1:53:52:2f:2b:8d:e0:3b:
21:a1:2e:83:19:ac:d2:31:fc:4b:d6:13:6b:c1:1a:82:df:f7:
3f:4d:a9:ff:3c:e3:ba:62:97:e3:7b:3c:ca:b7:5e:15:7d:27:
4a:c9:af:8b:1a:14:0a:dc:4e:9f:c0:7d:2a:05:75:96:f8:6b:
7a:a4:29:04:a6:1c:42:fb:d9:ec:ef:c3:c0:38:79:e2:5b:9a:
5e:0a:14:c1:cd:91:f0:f3:c2:d1:56:a8:1b:03:45:41:db:ff:
d0:b4:0c:35:a2:ec:36:8e:d3:64:06:1c:28:7d:e3:3d:82:af:
cd:43:fa:15:07:4d:57:96:24:ac:5d:40:b3:34:93:ea:55:e8:
1b:e0:75:a3:70:64:d8:61:47:c3:89:70:4f:43:09:c8:b2:2c:
9e:a2:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:05 2025 by rpki-client