Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
File: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft (raw, json)
Hash identifier: rt3A733OqY3Wx1xAooXeS7HUYy28CUMcYVDvtQ7XF7o=
Subject key identifier: 18:F7:2F:50:58:65:46:94:55:29:65:1B:79:67:A1:E1:2D:19:75:AC
Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f
Certificate serial: 0199FE0FF83AAAA31B7040340C0F6D42DFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
Manifest number: 1024
Signing time: Sun 19 Oct 2025 20:01:23 +0000
Manifest this update: Sun 19 Oct 2025 20:01:23 +0000
Manifest next update: Mon 20 Oct 2025 20:01:23 +0000
Files and hashes: 1: 0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl (hash: nmtNZZdoM9t5b9MZZgm8Nt4TvtXcm515sE+vpHWodAo=)
2: gbK6DHiZq7AYAmJhGhegTd1JJGM.roa (hash: 3ZhInyD7W5kRDFPCm7P1BZAvCR0mhPTykPk/poLoSao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f8:3a:aa:a3:1b:70:40:34:0c:0f:6d:42:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3277a239664d245becf4214dde15923042a142f
Validity
Not Before: Oct 19 20:01:23 2025 GMT
Not After : Oct 20 20:01:23 2025 GMT
Subject: CN=18f72f50586546945529651b7967a1e12d1975ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:02:4b:54:60:1a:e9:13:60:22:02:a2:d9:
10:bf:3f:86:f2:e1:d6:fa:a1:4c:68:39:78:94:d7:
58:47:32:16:49:41:00:2c:6c:e7:a0:a7:42:a2:35:
61:81:e0:bf:1c:91:17:02:22:a2:1a:a6:9f:3f:92:
4a:60:b8:e4:e4:7a:b6:23:b8:f7:5d:94:14:86:01:
8f:67:31:92:83:03:d3:73:9c:e8:1f:e4:4f:d0:c1:
fb:8f:7f:ea:65:e5:65:c6:a0:bc:9f:75:8f:07:5f:
25:f0:b6:c2:4d:16:a4:a8:39:d8:af:ca:69:0e:62:
e1:5f:54:83:09:7f:17:f9:89:f1:59:3d:9c:48:75:
73:d7:57:1e:c7:bc:59:08:e0:a4:1c:bb:e9:fd:c1:
41:63:ea:1b:25:db:81:9c:7d:5d:28:c8:02:f6:99:
bc:54:23:a6:07:bc:e5:14:34:ab:cb:b8:f4:4b:97:
d7:61:66:96:5f:52:02:83:0e:d3:78:77:e7:a6:4b:
df:c0:0b:2d:aa:14:13:87:ab:25:0d:6f:78:73:fa:
fa:4c:88:b4:fa:bb:bf:75:ec:21:8c:cd:9e:e1:61:
25:db:31:23:7a:e2:48:e6:47:48:28:36:d4:03:9e:
a1:87:d2:f8:5e:6d:ec:f0:e8:81:0a:d5:ea:4f:cb:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F7:2F:50:58:65:46:94:55:29:65:1B:79:67:A1:E1:2D:19:75:AC
X509v3 Authority Key Identifier:
keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:81:c8:c2:f0:05:d9:8e:a5:56:c4:c3:ed:a6:3e:c0:b7:c1:
2e:25:52:42:20:c8:29:95:2d:bf:c4:3d:8f:f3:4c:35:f5:20:
e5:0b:fb:f0:97:9d:6f:72:5f:9c:53:8e:52:ad:84:c1:a7:f0:
73:27:c6:03:d0:f5:66:56:1b:86:b5:9d:23:4e:8d:21:db:6d:
3c:db:f2:b0:27:3a:f8:8f:2f:78:ad:2a:f8:dc:5e:fc:df:74:
c2:1a:3f:9d:e2:70:c2:e3:f1:d2:31:00:d8:d2:81:03:bf:4f:
24:40:f0:56:a5:43:a3:0f:5d:23:6a:1b:22:b0:fc:3c:4d:f7:
96:c7:40:8f:a9:d1:11:57:64:9e:b5:cc:e1:77:91:b5:34:b0:
17:05:7a:26:ed:89:eb:f7:96:52:e4:22:f0:5a:79:14:ec:73:
a5:dd:c5:09:45:11:87:8c:46:74:c4:ff:13:5f:6b:90:4b:d7:
f6:98:cd:e4:87:5c:44:b9:11:64:2b:d9:cd:aa:4f:b5:e9:a6:
27:d9:0e:c2:9d:09:37:fa:db:dc:4b:3c:f3:e3:e6:67:99:ec:
f4:df:75:19:48:46:fa:7b:66:9c:9e:eb:bc:f8:14:2b:57:aa:
31:fc:f5:c6:f0:0b:5a:b3:29:e8:2b:38:cb:40:ab:82:3a:c2:
b8:2e:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:06 2025 by rpki-client