Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: KbQ2IWtKQIsCBNSMZQ50XWvaXS+pVfkt1bEFF76k+bI=
Subject key identifier: 29:63:CC:98:8E:73:95:91:88:B7:0C:AB:C1:AE:12:84:A3:A6:10:14
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 0199FE104983E28B6EDF9C4872CD2F16A1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 0B76
Signing time: Sun 19 Oct 2025 20:01:44 +0000
Manifest this update: Sun 19 Oct 2025 20:01:44 +0000
Manifest next update: Mon 20 Oct 2025 20:01:44 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: H6ZqaKswTsIRFx9pKRGgUGolVHoUZ/XqJMdz0KT4rYs=)
2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:49:83:e2:8b:6e:df:9c:48:72:cd:2f:16:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: Oct 19 20:01:44 2025 GMT
Not After : Oct 20 20:01:44 2025 GMT
Subject: CN=2963cc988e73959188b70cabc1ae1284a3a61014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:7d:0d:93:9f:6f:a3:8a:91:bf:ea:f5:03:
fb:22:36:1e:eb:f8:f6:f9:24:bc:58:58:3f:73:8b:
71:f8:3a:c0:e6:5c:40:9a:50:00:82:a2:b4:aa:71:
26:bd:d7:1c:40:a9:77:ee:c5:eb:83:b3:08:13:20:
fb:5f:c4:f5:61:54:46:c8:19:68:e3:6e:99:d2:9a:
a4:5f:5a:47:2d:fa:e6:60:5e:ab:b9:7e:5a:03:85:
02:26:23:01:d1:06:30:e5:f1:b8:8c:bb:e1:74:c5:
1d:8a:32:6e:3e:70:ec:ab:d5:61:6e:2a:86:2c:db:
fa:8e:56:5e:fd:49:54:80:14:51:e2:cb:2e:29:a8:
dd:92:52:77:a5:56:20:bf:bd:e8:62:48:2f:8c:3f:
c6:d7:cd:ea:7e:77:54:7c:3d:30:77:c3:18:d7:36:
bc:7c:c0:60:9e:dd:be:a4:b6:7e:3f:c0:82:a4:fe:
e9:8e:02:bc:3f:8d:4f:3f:19:53:7d:7e:4a:6d:be:
f3:ed:6e:ad:69:31:29:a3:1b:3f:3b:15:3a:b1:a0:
84:04:78:05:73:53:18:57:13:79:71:ce:fb:86:3a:
3d:5c:2d:2f:e2:c5:ea:14:ff:9d:81:93:8a:d6:f6:
99:1a:ac:f2:c6:9a:83:e0:66:e4:c3:30:0a:02:16:
5c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:63:CC:98:8E:73:95:91:88:B7:0C:AB:C1:AE:12:84:A3:A6:10:14
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:9b:91:45:fc:a4:71:15:4c:d5:48:8f:b7:21:f7:4f:31:3c:
3d:da:6d:74:88:91:a8:c2:be:43:f0:bc:f0:07:57:ac:d4:f3:
ad:93:38:82:0a:4b:69:88:01:5c:aa:35:22:86:4e:88:36:3f:
57:a7:e0:d1:26:7b:7c:a9:d7:81:ad:2f:aa:23:93:fd:66:39:
44:77:63:02:f5:be:bf:93:b7:db:fa:58:2b:44:19:04:d2:51:
0a:02:ac:44:6b:02:12:0d:ab:93:38:5c:02:d2:b1:7f:cb:b7:
9c:e5:cb:7a:b2:ce:4e:41:27:6e:cb:3c:64:43:a5:28:35:ae:
fc:93:4f:d9:91:4a:62:cb:a6:32:ab:0f:9c:66:2f:4c:aa:7d:
00:5e:b2:cd:f3:d1:29:bc:76:a9:ad:84:5d:b5:8d:1d:99:83:
c0:93:a4:8c:23:14:8b:d3:d7:73:37:a8:b9:57:18:55:2a:9a:
ec:92:76:2a:16:8d:31:c5:d6:ca:07:87:70:fc:74:1e:21:fe:
62:b1:4c:7e:6e:57:2f:98:97:56:2b:e7:a4:4c:cd:6d:99:e0:
aa:e1:01:a1:9e:87:a5:d8:61:5e:84:d0:c3:c4:60:ab:44:93:
d2:18:e1:cf:71:8f:63:e0:2e:42:54:8f:1d:b7:49:68:20:9f:
be:52:d3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:42 2025 by rpki-client