
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File: 0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier: gkW6hEp3qt1x1yopwbgrCXbJaiuaxUCHR8ecZp3V8jQ=
Subject key identifier: AF:9E:2F:F9:58:A5:F7:35:2A:24:62:02:BD:EF:76:6B:F6:70:67:B8
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer: /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial: 0199FCFD88E34B0B1E4ABB732EBD238DEFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number: 0852
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: U4tnDDmOpHvA0SZSmJhrwQxnZfOf2S0FhQR8U06zgBY=)
2: Bx50PRq6KcDkdxbj0-_pFidcJWw.roa (hash: YY2WvnOzjX98gUiJi9jeyqU66NYG8yYekvXH8i5CTIo=)
3: U5cqWkNYnX_IKXRLiqWhPWLnj30.roa (hash: rOJ0i9MLtk8hwnYB2wL88M/HGe+Y/PZ5cxU/VSesy7g=)
4: qiRRCoLxoqoPkxabLfDyCC_ddgo.roa (hash: PHrnZaBjRsNXJj/q3wfcCyeQ30fafauER7XzOTQ6umk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:88:e3:4b:0b:1e:4a:bb:73:2e:bd:23:8d:ef:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=af9e2ff958a5f7352a246202bdef766bf67067b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:7d:ed:3a:b5:41:0c:dd:64:c1:5e:d3:8c:
65:64:c8:04:bf:cb:5d:71:45:6b:57:08:8b:12:65:
f8:4d:a0:82:92:e2:8a:33:d2:64:a0:a7:3e:5e:0f:
3e:68:6b:5a:97:c4:69:cb:0b:ff:8f:b7:1b:6f:24:
9e:9a:7e:fd:1b:54:df:86:a0:4f:c7:53:a5:c2:93:
49:17:cc:96:7d:4f:b5:a6:13:b5:c1:c6:3a:48:b6:
6f:d2:99:24:9c:78:c0:5c:09:ea:e2:e2:7d:64:93:
32:7c:a2:cf:a8:51:59:b1:58:98:64:f2:f2:8e:d8:
e9:3c:5e:63:43:64:41:e4:1a:39:b7:5d:83:be:1f:
f6:7a:b9:cc:45:f9:94:0c:f7:a8:4c:42:73:6c:49:
33:5b:ab:00:bf:60:c3:2b:fb:fb:91:cf:9d:09:9c:
2e:83:c4:bd:ca:ae:16:c9:97:ad:0c:e8:77:6e:49:
2a:31:f0:d2:46:2a:b5:74:51:60:b9:59:56:0a:2c:
dc:79:28:32:bd:ee:c9:d0:b7:8f:3d:d4:d6:23:9a:
24:0e:e1:6a:07:b2:6f:90:5f:0c:a4:52:d4:d5:68:
7d:fa:4f:05:1d:4f:c4:fa:e2:69:37:45:10:38:b6:
bf:c6:2c:84:29:eb:67:08:0e:60:f3:f4:c3:99:e9:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9E:2F:F9:58:A5:F7:35:2A:24:62:02:BD:EF:76:6B:F6:70:67:B8
X509v3 Authority Key Identifier:
keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2b:94:49:91:da:e3:ae:fc:96:e1:61:f3:0a:dd:73:14:72:
5b:51:4f:32:76:3f:44:ac:5a:81:5a:9a:cc:07:01:fc:ae:cb:
98:78:91:46:56:3d:58:a8:ee:a5:88:67:90:b5:01:d0:88:e7:
0c:69:2b:0b:9a:4b:b5:e0:66:4d:3d:aa:9d:52:c1:e6:f2:9a:
32:d0:e1:97:3b:3b:ac:da:38:eb:78:f1:df:1e:c2:da:d3:bb:
ef:84:44:0c:fb:5c:ed:4a:6f:8d:35:94:dd:70:27:1f:39:67:
e2:18:dd:fc:02:f3:2b:36:42:7a:85:f3:d1:c6:32:ac:d2:a9:
ad:c1:90:1b:81:18:50:13:1a:9a:49:7a:26:fd:24:be:04:5a:
52:8e:ce:4d:c0:fc:c3:dd:c1:6f:72:97:f1:c9:88:94:d0:44:
06:9d:24:bf:95:4e:59:02:79:df:dc:5c:72:e3:0a:03:c2:58:
67:fc:4f:2c:8a:bd:dc:6b:9c:18:91:bd:ff:b3:e1:ff:1b:7e:
27:ff:8f:6d:d3:78:3a:9b:43:66:72:91:16:7a:a3:d6:1d:70:
54:0d:67:14:df:b0:17:d1:cf:29:72:b8:49:fc:ab:b7:55:8b:
05:f4:a8:f3:36:e3:93:47:83:29:54:9b:df:7f:fc:74:9f:f0:
55:78:54:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:46 2025 by rpki-client