
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File: 0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier: bAz8NeZc+mo/OdAS+5VMzUD4qJpqYmwuaH3wv0C8q2k=
Subject key identifier: C6:70:9A:65:AC:59:87:4D:D3:A6:68:99:BE:F4:DF:86:A7:3E:C6:1E
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer: /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial: 0199FBEA8133AA53D6F0854B5159EE333AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number: 0CAC
Signing time: Sun 19 Oct 2025 10:01:13 +0000
Manifest this update: Sun 19 Oct 2025 10:01:13 +0000
Manifest next update: Mon 20 Oct 2025 10:01:13 +0000
Files and hashes: 1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: r1Y8SF6j0PWjbClOaNHUZg92mw3p6TuNn4/oFfCeDCw=)
2: 1qLqqTllve4zCxVAYOzBHvpeKI4.roa (hash: vb9EDboxZKlgHYFjRAGPCvT6HrDSb4Ej+FgPnOTiZKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:81:33:aa:53:d6:f0:85:4b:51:59:ee:33:3a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Validity
Not Before: Oct 19 10:01:13 2025 GMT
Not After : Oct 20 10:01:13 2025 GMT
Subject: CN=c6709a65ac59874dd3a66899bef4df86a73ec61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3b:9f:8c:02:6d:d0:94:3c:22:04:20:9b:31:
a4:4d:fb:02:52:8d:56:0e:41:b1:3d:7c:fa:86:2a:
06:ad:08:f2:84:3a:61:70:c1:ee:72:5f:3f:71:4f:
86:fc:ed:59:a8:9c:c1:9c:d6:af:c7:12:ae:a0:94:
56:3d:bb:b8:7e:4e:1c:db:e2:d2:7a:9f:11:86:25:
07:7d:d3:5b:24:1a:ef:b6:b5:da:9c:61:a3:9f:1e:
28:f1:2c:90:86:12:7b:a0:86:6c:60:cb:80:11:e0:
a2:b5:ba:98:a5:1a:72:04:3c:2f:8c:9d:63:6c:97:
6f:04:5a:2f:69:0b:b7:5d:43:0c:c4:1c:b1:2e:f7:
76:9e:42:e9:10:f3:8c:ac:72:f9:29:78:0a:d4:02:
8c:cc:ab:5c:78:d7:3e:5e:cf:91:ac:97:67:13:99:
93:59:55:ba:fa:f2:d4:47:de:9f:1f:22:a8:00:b6:
4d:f4:9d:46:8e:70:ba:b2:d3:55:a4:31:93:a3:c7:
ca:50:be:cd:d4:b1:f4:54:15:07:0f:4e:5b:e6:2a:
af:d6:86:70:47:7d:2a:40:1b:47:90:02:38:5f:7a:
9c:7a:f9:7e:43:03:6a:36:a3:24:6f:04:80:bf:7a:
99:a9:dc:87:ec:8c:4b:b5:b2:9f:c9:49:70:4e:a9:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:9A:65:AC:59:87:4D:D3:A6:68:99:BE:F4:DF:86:A7:3E:C6:1E
X509v3 Authority Key Identifier:
keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:75:c7:02:0d:0c:a0:d4:b0:d6:66:b9:73:f1:a4:43:5d:f4:
c1:13:ea:2a:e8:8b:44:42:11:76:9f:78:70:19:a2:74:a2:fb:
fe:71:b7:75:ce:c5:b0:c1:bb:71:e3:cc:18:3e:53:d2:6d:cb:
a0:7a:ed:3a:46:b2:c5:2e:37:1c:4b:97:cb:5f:99:84:5a:e3:
96:66:2c:7c:64:9f:51:c3:4c:ec:d0:c0:75:36:eb:dc:6e:47:
2c:74:25:06:dd:0d:be:e2:a3:ea:ad:01:02:15:20:53:71:b0:
6a:05:dc:9d:55:54:50:0c:50:ce:41:95:a2:26:31:0f:15:59:
58:c9:fa:9d:a6:da:8c:6b:a9:77:df:46:01:00:9a:67:9e:5f:
ed:e7:f9:06:0f:b3:15:54:80:fb:b7:2c:78:a5:cb:45:29:f3:
2f:14:fc:56:e5:95:5b:a7:63:3e:9d:91:74:f8:2d:a9:e1:42:
ef:28:b8:0c:83:23:2e:c1:13:5f:94:fe:a3:f4:61:fa:9c:76:
3c:72:72:aa:3d:cf:00:05:ee:d9:c4:71:0b:29:13:f1:be:70:
85:71:4d:ee:a6:7e:df:24:fa:35:df:b5:08:88:be:7b:54:29:
12:d3:7e:4e:6a:0d:f1:6f:48:3a:bc:25:44:38:fb:95:c1:e1:
7d:ed:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:08 2025 by rpki-client