Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
File: 0AQf95gDebeYBJJWho3_OYGcJgQ.mft (raw, json)
Hash identifier: PDj2P1UozlbLNZruwGO+t6r+hI/FHNNB2IBWRQCu36w=
Subject key identifier: 9C:86:D4:8B:70:45:33:57:FF:F1:C1:B0:43:BA:E5:B5:29:2C:97:56
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 0199FDD8D29A17FE15FFC286E8753BA694C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
Manifest number: 12E7
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: 0AQf95gDebeYBJJWho3_OYGcJgQ.crl (hash: TS9ohsJCl9/ckChmk8cmJlS4oDzPSAzEszjuJXxnfWs=)
2: M3dHm9GHrYD8lQS4ksiSXCNoje4.roa (hash: Nu6oMe2kKfWTDbq3VinP98dNG8A/F9K2WRgisYnSNqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d2:9a:17:fe:15:ff:c2:86:e8:75:3b:a6:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=9c86d48b70453357fff1c1b043bae5b5292c9756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:1f:1b:69:c2:90:b1:67:ad:92:ab:05:61:
1c:64:7c:67:0c:f0:7f:86:4e:b8:32:82:54:d6:55:
a1:d8:5b:0c:6d:d8:d0:26:be:73:c6:cb:04:69:59:
f2:b8:0a:bb:72:45:9b:7f:f8:0c:62:fb:3e:6c:d3:
d4:9c:4f:cd:12:41:9f:ab:0f:15:58:98:03:9b:3c:
58:7e:f2:15:33:d6:af:ad:e3:96:68:cf:3e:33:30:
c3:be:a3:3d:60:7f:ad:a2:14:b5:a7:df:5f:dd:b1:
0b:1c:69:b2:97:ee:92:81:a8:30:a6:07:ca:a6:9f:
36:f6:37:a6:e9:89:67:65:fb:40:66:a3:b4:15:ba:
f2:db:5f:c5:1a:52:9f:d2:96:01:dd:94:2f:50:97:
ee:0d:f0:d8:8b:4c:d1:49:df:fd:55:6a:ca:a0:b5:
da:6c:4a:06:d0:0d:00:a3:c6:7a:8c:db:21:12:09:
ce:0b:03:3d:e1:de:21:82:3b:6f:8e:a7:da:1c:bc:
65:7e:9f:95:02:ac:aa:6e:11:e6:03:6e:1c:64:c1:
4e:6d:ec:7d:68:aa:ec:f0:17:d7:3e:d3:c2:a7:fd:
47:c1:01:c6:3f:25:12:5e:77:be:af:4b:54:9c:1d:
bf:fe:c0:e6:17:ac:72:a8:94:fe:30:b5:ca:e0:02:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:D4:8B:70:45:33:57:FF:F1:C1:B0:43:BA:E5:B5:29:2C:97:56
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4d:0e:b1:93:b2:93:95:9a:3a:d0:c8:62:74:df:d4:d2:56:
d9:2d:c0:c8:cc:29:33:e6:95:fb:44:e0:69:47:c7:83:4b:d2:
e7:93:c8:de:04:6b:94:80:3d:be:83:67:a8:6e:77:4d:9c:23:
fe:45:9e:fc:b5:ce:33:12:1b:0a:28:e8:a0:45:36:d5:14:1a:
0f:cd:03:7c:4e:ce:2b:a7:bf:06:61:cb:99:cc:64:32:7f:87:
f8:9c:04:07:5d:e5:0d:28:57:fb:4c:d9:36:15:e9:a0:94:91:
15:35:fe:5b:63:6a:56:29:6d:1b:71:a4:b9:e0:a2:77:7e:59:
cd:60:36:cb:20:ce:37:5c:db:d9:71:c5:75:af:75:07:a7:a5:
03:4f:de:48:6f:b2:0f:c3:25:94:0c:ed:7f:4e:b8:7c:3b:27:
98:e1:f7:2e:09:2f:2c:ca:df:db:da:13:f5:e2:a4:77:1c:5c:
0a:a9:d4:8f:76:66:8f:3c:74:b1:a3:b9:72:d8:dc:28:19:14:
ba:0d:70:02:7e:e8:e6:b4:82:24:6f:52:b9:66:b9:ca:bc:f3:
a7:86:2f:6b:e8:b8:e6:50:3b:03:db:05:79:e9:d5:8c:c2:15:
95:30:ae:24:b0:9f:91:46:b4:29:a3:29:17:23:9c:eb:50:d5:
ce:f2:37:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:21 2025 by rpki-client