Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
File: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft (raw, json)
Hash identifier: cXLEYLU5o7GsqxGYdpbyLX+j1VkXn6kWvfzk3Xb0wD8=
Subject key identifier: D9:6A:37:00:10:E7:1B:AB:D1:9D:00:8D:F4:F8:D8:1F:2A:CA:E9:F4
Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Certificate serial: 0199FBB3631E555F7BC3FFB8A0B84A97E7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 09:01:01 +0000
Manifest this update: Sun 19 Oct 2025 09:01:01 +0000
Manifest next update: Mon 20 Oct 2025 09:01:01 +0000
Files and hashes: 1: 0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl (hash: YX3p0qDXVXMCgmAAwnfG7PcsHMCnlrrSf7Yw3espPVY=)
2: 4RiMrm8aaExTJ5NxhFCCQc-LTfQ.roa (hash: xT77mBm76fvxQ/4syBVoQsoquUiDMD7RefgDewlMNII=)
3: O84I_LAanBtJYvSSTZhnAsP3iQA.roa (hash: 6ivMoGITrJjRBuEurkZGNP+0M6whX3cvNI3NRDFJ7b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:63:1e:55:5f:7b:c3:ff:b8:a0:b8:4a:97:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574
Validity
Not Before: Oct 19 09:01:01 2025 GMT
Not After : Oct 20 09:01:01 2025 GMT
Subject: CN=d96a370010e71babd19d008df4f8d81f2acae9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:e3:a7:7d:fe:08:54:ca:b5:0f:03:46:b7:
bb:67:d8:3d:6f:50:e3:bd:cb:e5:46:86:44:7d:04:
25:c8:e6:08:ef:dd:7d:f1:26:27:71:a9:ac:8c:ce:
c0:a8:35:00:a7:47:2e:ce:46:59:a4:5b:96:c1:16:
bc:7f:6b:6b:1e:86:41:13:9b:9c:4b:68:c0:51:b7:
e3:32:a4:ab:cc:8b:ea:af:3e:94:79:7d:ce:54:e0:
2a:1b:d0:24:c1:87:36:bd:20:42:1b:42:de:af:b2:
8b:52:2f:73:18:dc:61:e4:48:4b:99:fb:6f:88:d0:
aa:73:a4:83:61:b5:3e:fa:f2:5f:c0:1c:50:06:46:
d9:52:a8:10:ad:35:39:3a:98:ac:23:d8:65:9a:af:
9e:db:e2:02:5e:44:e0:97:8b:40:a6:0a:39:00:1b:
66:d4:3e:56:b7:96:1f:c9:81:11:a4:f7:58:5d:1e:
37:e0:d7:69:80:b4:10:4e:7e:c0:b6:00:85:d3:36:
6a:a5:eb:7c:b8:c7:0e:ef:b8:47:f3:f6:90:30:12:
59:fe:fc:b5:09:cc:28:46:d2:c1:df:2d:93:9d:a7:
cd:75:6e:f6:28:86:9d:32:96:1f:da:56:cf:e2:f3:
e7:ae:27:9a:db:ad:de:ef:21:81:ca:ce:fd:ce:af:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6A:37:00:10:E7:1B:AB:D1:9D:00:8D:F4:F8:D8:1F:2A:CA:E9:F4
X509v3 Authority Key Identifier:
keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0f:2d:3e:7c:e7:f9:4c:50:4d:74:59:85:eb:98:4a:e9:c5:
74:0f:fc:d8:cd:8f:d5:ab:eb:27:52:36:75:02:d3:c2:84:3d:
41:b4:55:07:06:41:e1:55:40:33:e4:23:45:68:be:8d:c4:26:
b6:e0:2d:39:c1:b7:53:4c:58:2b:29:08:14:71:b3:26:60:0b:
82:7d:03:e5:f4:12:25:61:db:e9:ee:87:99:a8:a1:7d:4c:e4:
98:1c:18:8b:b6:41:04:05:ce:bd:38:b2:65:d7:cd:47:14:aa:
5b:4b:32:5e:a7:13:fc:04:8b:21:72:ed:97:fd:73:d2:00:c2:
7c:2f:f5:b6:e8:3e:cb:46:6d:bb:09:7c:a2:ea:8e:d4:aa:81:
c2:bb:a1:c8:1a:11:19:3e:04:9e:cd:60:53:cd:24:cb:89:a1:
c8:91:b8:78:b7:9b:69:e0:67:ec:f2:1d:65:96:68:a3:de:40:
bb:48:05:30:78:57:6e:fe:39:f1:21:a7:59:0b:dc:25:44:aa:
cd:d9:8c:ad:cd:32:6b:b4:05:f2:86:2c:62:65:dc:74:f4:db:
b1:4b:54:b7:f8:2e:18:7b:5c:42:46:72:6a:b6:02:3c:54:1a:
a1:f9:79:50:7a:31:01:e0:86:39:fe:31:45:ad:1d:8e:30:b8:
78:64:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:52 2025 by rpki-client