Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json)
Hash identifier: 8HdzVyvfKNoDnAdZtD6UXRJyQMlJ2txA1acA2O5sKQQ=
Subject key identifier: A8:FE:4F:93:F8:D6:43:77:12:75:D0:37:0C:C0:26:E9:E8:CB:B4:72
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial: 0199FD6AFBCE297EF2CC90B5D95D1035CE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
Manifest number: 0D5C
Signing time: Sun 19 Oct 2025 17:01:10 +0000
Manifest this update: Sun 19 Oct 2025 17:01:10 +0000
Manifest next update: Mon 20 Oct 2025 17:01:10 +0000
Files and hashes: 1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: DRA0dsvb5jb/Ps/IeipStATEm8gJiiAwWB6ccKPhUHg=)
2: TLgddA3CgmtAKo-fV94OuzSavi4.roa (hash: tQo/EK/pm7RsFTI12Ej+RxeB7S+rUphRTa4aWGCPu7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fb:ce:29:7e:f2:cc:90:b5:d9:5d:10:35:ce:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Validity
Not Before: Oct 19 17:01:10 2025 GMT
Not After : Oct 20 17:01:10 2025 GMT
Subject: CN=a8fe4f93f8d643771275d0370cc026e9e8cbb472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:d6:07:3d:11:2d:88:eb:e1:d9:6c:c2:69:
e0:d7:58:aa:30:79:7d:e8:3b:15:dc:7e:71:f0:bc:
2f:33:34:49:91:07:83:89:84:09:61:2d:38:4f:eb:
98:f7:eb:e7:e0:df:2d:ff:41:a7:b5:98:85:c9:be:
e8:a2:ef:9d:f5:47:cb:18:95:f4:66:98:f2:64:2e:
ec:b5:5b:04:94:bd:d8:93:4c:e4:d5:f4:fc:fb:00:
4b:aa:bd:e1:87:e6:84:68:1d:3f:56:98:71:41:63:
80:f1:3b:82:d5:a2:7e:d6:82:d3:7e:6a:72:a5:7b:
bf:72:ab:ba:4b:b6:10:1c:d7:0b:d1:63:a5:93:cf:
4b:d8:b4:88:47:cb:78:c1:46:a7:71:7d:94:98:59:
c5:49:e1:10:66:7f:aa:dc:8a:a5:ba:47:0e:68:2a:
3f:f3:6d:1c:6e:14:10:85:7a:27:c4:5f:00:5a:c4:
b4:06:e4:76:6e:6e:0f:c7:31:11:13:b0:a7:5b:d1:
79:fa:e6:dc:af:a2:14:e2:7b:68:e7:5d:f3:68:a6:
1b:8c:d9:c7:d4:b4:6b:0a:13:5f:c8:ef:20:3e:77:
eb:47:ab:ff:1b:7a:c2:c8:d0:73:b3:25:8d:32:e3:
e7:d9:f9:91:12:a9:4d:c7:f8:34:20:9b:a3:97:97:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:4F:93:F8:D6:43:77:12:75:D0:37:0C:C0:26:E9:E8:CB:B4:72
X509v3 Authority Key Identifier:
keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:97:17:bd:40:4e:2d:b4:7f:52:a2:fa:3e:6b:32:9e:a9:f0:
7f:b7:f3:41:d8:d2:ff:f9:0c:df:55:7e:4e:63:ca:6e:51:39:
ef:f7:bf:6b:3f:3f:df:10:80:f6:5e:73:02:01:16:03:e5:c6:
c7:a2:99:b5:d6:3f:7b:c4:8c:58:5f:07:0c:27:b6:33:78:8b:
fb:68:32:e2:65:99:9b:cb:58:b3:e3:e8:72:e7:39:11:97:43:
a6:18:30:96:60:0b:5d:a7:58:8e:5c:cb:1a:18:e3:4d:00:43:
ca:50:a1:5f:c2:e7:ad:50:6e:e3:30:af:d6:1a:30:99:93:62:
95:df:0d:1d:5a:92:ef:56:18:5f:1a:2b:b6:fe:da:34:fa:9e:
be:a2:21:3c:d4:a3:94:8b:63:0f:04:61:97:71:cc:cc:45:ab:
f0:14:18:4a:cc:27:82:d8:93:ff:96:17:88:ea:d2:88:51:6f:
5f:49:53:d0:b7:de:f5:c3:ae:16:50:31:85:89:90:79:0d:9e:
fc:2a:b3:42:8f:48:0b:92:63:01:f7:41:10:50:de:72:67:7c:
56:69:7f:dd:49:1d:b9:75:ae:2f:de:9c:d1:f0:ba:8e:59:cd:
86:3c:2d:14:93:9e:29:76:42:17:f6:87:2f:bf:70:9b:11:40:
cd:bc:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:27:56 2025 by rpki-client