Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: ak3TbJR1pgImqCN6K89g6vT6DwAoUYc/WGgL7UxWSmc=
Subject key identifier: FA:8F:5F:96:3B:F0:4B:73:17:EF:8A:7E:32:6F:F6:9E:6E:DD:EE:37
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 0199FD33F11BB403B1D0A8F3163CA8F9C1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 046B
Signing time: Sun 19 Oct 2025 16:01:03 +0000
Manifest this update: Sun 19 Oct 2025 16:01:03 +0000
Manifest next update: Mon 20 Oct 2025 16:01:03 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: Vm7mtl5T/fhbv7LG3nXOhME25tAZe+nVIST3/xpod7o=)
2: BtILLkhjQwKc-cBqSY27nFkJu8g.roa (hash: j7KTEXdiX1vJGa7Y4gsoM737n4p+uU95jozk1BXznCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f1:1b:b4:03:b1:d0:a8:f3:16:3c:a8:f9:c1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: Oct 19 16:01:03 2025 GMT
Not After : Oct 20 16:01:03 2025 GMT
Subject: CN=fa8f5f963bf04b7317ef8a7e326ff69e6eddee37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:3e:b1:90:6a:4a:b9:14:10:8d:6b:ed:3d:
69:d4:39:1a:7f:cb:b7:5a:9b:f6:a4:51:82:bc:c7:
1f:c5:3a:21:e4:48:3f:54:f6:74:d9:f8:ac:ef:66:
f0:15:c3:59:71:54:6b:12:38:1c:c5:12:89:f5:b5:
17:1b:76:49:4a:08:ae:cb:b7:b0:bc:50:20:49:20:
df:bc:71:3d:36:44:f2:0b:15:e2:f0:ad:0c:07:36:
86:6c:53:bd:e5:7c:55:a4:98:c0:20:b7:f1:92:fe:
cb:76:6b:12:95:15:99:aa:43:58:6e:fb:2b:1e:e4:
06:1f:25:75:9c:a3:88:2f:49:96:47:e5:85:d4:bb:
b5:17:8f:e9:88:01:97:e5:3b:f8:c8:cb:a6:7e:7a:
2a:90:70:80:0e:f4:05:31:3a:5c:90:ca:85:51:b0:
14:e2:34:dd:ee:a5:56:70:84:7e:15:23:40:8d:01:
22:a0:9f:50:79:4d:4b:c2:81:18:b8:58:ff:fb:cc:
1e:99:ad:29:cc:79:57:a0:44:91:17:8a:46:0c:9c:
93:85:8f:0d:56:35:48:79:6c:6c:e5:52:3c:1e:51:
b3:01:73:d3:1d:1d:fb:73:b3:c5:28:4d:47:aa:83:
ae:e1:21:a9:aa:d5:e9:a4:a2:65:0f:32:9a:f2:e0:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:5F:96:3B:F0:4B:73:17:EF:8A:7E:32:6F:F6:9E:6E:DD:EE:37
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b2:ca:cb:11:90:69:9f:86:a4:4f:1b:0f:0d:20:2b:ed:18:
f4:27:31:5a:8e:ca:91:23:3b:e2:56:e6:0e:16:e4:a6:7b:d2:
94:0b:18:27:24:57:7a:15:fc:77:c1:9f:ae:16:67:0d:0c:62:
7f:fa:a5:25:da:04:88:14:46:e6:e7:30:3b:3a:3b:6f:6a:f8:
4e:0b:3e:3b:3e:38:ca:fc:e9:31:e5:02:78:89:96:6c:1c:f2:
9f:10:3f:3e:7f:3a:df:f5:27:cc:20:87:61:99:46:51:a3:cc:
98:6a:cb:18:b2:08:95:ae:3e:f3:00:0e:be:a8:66:31:ff:c4:
51:56:81:d7:70:f5:e2:34:aa:22:bf:d6:5a:98:e7:78:86:c3:
94:fe:81:ea:9f:eb:d7:75:59:f2:fc:69:88:e9:28:05:ad:69:
30:6f:37:b6:a1:00:a9:42:52:dc:cc:ef:7e:9f:69:3c:5e:4b:
41:b3:37:ee:7b:0c:b5:0e:b9:7e:f2:78:91:c9:83:95:29:fb:
0f:8d:aa:b2:27:6c:55:e7:34:8c:ba:62:7e:9b:c4:11:b3:b1:
a5:2b:7c:91:6e:c8:eb:10:51:63:4a:b9:1a:1e:45:97:9f:f1:
dc:cd:a6:2b:0f:c3:ab:54:d5:93:be:2e:c3:e5:6d:5d:5c:26:
75:24:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:44 2025 by rpki-client