
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: 4OmZ+xFew7cGg5/QKdtBnblmRnws5R+dLPBmvm6OCHQ=
Subject key identifier: 2E:B7:45:5C:57:20:E0:F2:C7:87:DF:24:C4:A9:A1:C8:DC:B3:55:F6
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 0199FAD832D39B2527842B98524A13A2BE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 0A3A
Signing time: Sun 19 Oct 2025 05:01:36 +0000
Manifest this update: Sun 19 Oct 2025 05:01:36 +0000
Manifest next update: Mon 20 Oct 2025 05:01:36 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: gp3A4rd/gbkEiR87mQRg7CDtTBgOdrehkArlcLs9lRY=)
2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:32:d3:9b:25:27:84:2b:98:52:4a:13:a2:be:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Oct 19 05:01:36 2025 GMT
Not After : Oct 20 05:01:36 2025 GMT
Subject: CN=2eb7455c5720e0f2c787df24c4a9a1c8dcb355f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:ce:d8:32:47:e6:d2:71:c8:6a:a9:ee:a3:
18:28:c0:0f:77:57:21:2e:4a:b4:74:8d:fd:e0:db:
31:0c:ac:ce:b5:27:2f:42:f1:c3:e8:d4:ff:76:1e:
4e:d5:79:3c:31:de:f3:83:32:a3:b1:da:48:c7:33:
7b:7b:8d:c9:14:03:41:21:b7:47:1b:f2:b5:59:ec:
1a:1b:83:36:a6:c6:00:31:7b:33:8e:40:f7:76:6d:
98:4e:0a:73:71:23:7d:62:e7:40:72:6f:a0:a7:e2:
36:ea:29:54:06:11:9e:41:2f:9e:a1:81:16:63:dd:
9e:10:3d:30:b2:a3:30:06:8d:4c:c9:2f:c5:3c:41:
9b:37:0b:a9:52:c8:8e:79:a7:f0:04:1c:d4:43:d8:
c9:40:91:58:ad:42:b9:ab:8c:e0:b2:75:56:66:46:
42:fd:ca:e0:51:5e:e6:a1:d1:16:e4:24:19:e1:b6:
30:d8:b1:be:c2:99:cf:76:3e:81:50:be:5f:28:00:
5d:a2:a3:82:ac:75:d3:2d:bb:4a:ee:57:70:4f:24:
16:c7:ff:e4:5f:c3:b3:2c:8e:ad:8d:fe:64:0f:29:
de:f8:ea:9f:54:40:0c:3c:3f:b3:96:fe:5f:04:6b:
5e:fa:68:0a:1b:32:bc:6b:28:c0:23:ce:9d:4d:f5:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B7:45:5C:57:20:E0:F2:C7:87:DF:24:C4:A9:A1:C8:DC:B3:55:F6
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:f1:38:71:5a:93:d1:3d:00:36:93:75:1b:19:4f:99:b1:
97:df:ea:53:6c:74:10:88:ae:e3:54:f0:16:c6:37:4b:cd:9c:
7d:6f:f5:cb:1c:8c:f5:91:77:67:57:65:4e:1d:b7:c6:84:00:
8a:1b:d6:f4:f7:8e:2f:32:f2:08:ad:1d:fc:c0:eb:23:38:91:
70:04:ec:b0:ae:80:b8:c4:84:6c:02:44:1b:f6:2d:be:61:66:
0c:a1:9c:68:5a:40:db:ae:24:1d:4c:40:cf:8c:90:f5:12:4b:
ae:0c:f2:7e:27:05:45:88:97:86:99:ea:fb:ab:27:b5:2c:5b:
a2:74:bf:bb:21:ae:a1:3e:1a:02:ea:65:12:f0:8a:c1:62:ad:
63:17:fc:42:42:40:4b:68:8d:1f:af:a8:68:0a:82:01:04:f7:
38:92:ea:0f:eb:49:b0:d1:53:2b:0c:b2:f5:c7:45:17:47:42:
5e:3c:e0:6f:fd:d2:0e:19:79:5b:b9:ec:1d:a9:2c:a5:bb:81:
21:e2:ec:a5:08:ae:38:c7:41:29:35:dc:50:0b:27:66:ef:b5:
d5:ee:ea:6a:87:27:95:e6:40:d7:83:7d:c8:08:3d:63:68:81:
d6:36:b5:e2:5e:b4:97:78:dd:4f:cf:6d:e3:26:52:88:32:14:
42:d3:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:19 2025 by rpki-client