Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
File: 0eAT7IpcVt8kGpslY9ER-OVDv5E.mft (raw, json)
Hash identifier: /gDTckKE+6PFZjn/8Yk0k+Kg68sGobjzCLBSMBG/EYY=
Subject key identifier: 52:4B:D5:A0:E8:BE:AB:24:4E:3D:7C:D6:88:DA:2A:A1:CA:DE:00:E5
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 0199FCFD1E973E560233059DC641143A5E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
Manifest number: 16FC
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: 0eAT7IpcVt8kGpslY9ER-OVDv5E.crl (hash: 6rCjSF3nEFa0Rg9WZl1Aa7tzQz0RV5QbhbK2YZYofQA=)
2: IbNwOiJ1le6Y53Nfy_nDXLnu_e8.roa (hash: WT+RMze0r66BHerB43Jku9h5V4DbQETjQUbfL1+hc8o=)
3: PE9TZdJ8-Lln6kf9d9axXJAbp-c.roa (hash: L+Px9nqboU0pthFP3MQiGwoS0A274PGNuMWfIopTQcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1e:97:3e:56:02:33:05:9d:c6:41:14:3a:5e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=524bd5a0e8beab244e3d7cd688da2aa1cade00e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:58:d5:d8:e8:ae:43:d1:02:06:f8:07:87:28:
2a:fe:ef:ad:4a:be:74:32:ba:c6:f6:6f:25:bb:00:
16:a2:aa:7a:a2:c3:8a:65:c7:c4:c7:4c:0c:3a:9a:
b6:6d:53:ed:a5:fb:57:c9:71:b6:9e:1c:27:0e:58:
11:02:7d:e4:34:48:f2:6a:27:79:c9:8e:9e:f3:8a:
83:d5:60:51:3e:ee:b7:18:8f:87:2f:d1:42:57:b1:
69:0e:48:ba:9d:65:2f:b6:3f:60:47:83:9f:75:5d:
70:d0:78:ce:ab:c6:de:03:f7:cf:72:db:fe:9e:4e:
3b:f6:70:cd:49:f9:60:28:d8:9e:64:f2:3d:65:25:
17:7a:0c:03:49:a6:83:d7:ec:63:ed:0b:af:4d:39:
3d:1f:52:c1:9c:6a:54:f0:54:5e:cb:2e:43:a5:a3:
b6:c0:3d:18:55:0e:4b:06:a8:31:78:fd:f0:83:ad:
8f:31:c5:14:c0:36:6a:46:e7:8f:66:7c:18:63:c7:
7e:a3:c2:21:a4:e0:2c:00:90:4f:0c:8d:1f:3e:71:
7b:aa:e1:f7:c9:8c:a2:da:d4:6f:f2:9a:11:4d:41:
19:fd:06:22:71:0e:96:7b:c2:cd:73:3d:69:14:a8:
5a:bf:d6:d7:22:53:97:c6:aa:79:4d:a4:6d:30:22:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:D5:A0:E8:BE:AB:24:4E:3D:7C:D6:88:DA:2A:A1:CA:DE:00:E5
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:82:b5:dd:5e:bf:c8:ce:09:c2:0d:84:51:00:b3:fc:6b:5f:
73:eb:f3:4c:c0:fb:09:89:38:c9:f7:ce:e5:42:95:30:f2:b9:
bb:04:22:18:e8:81:a1:d2:ad:7b:73:d8:29:de:49:7a:af:7d:
b7:d2:af:0d:37:d2:8d:1f:24:d9:0e:37:0f:7e:59:21:c7:a9:
60:33:ad:91:54:a2:de:df:74:46:9c:6e:12:fb:0f:b3:19:73:
06:b3:f7:9f:f3:24:33:ab:ab:08:ac:09:68:cf:93:5d:b6:87:
b2:2e:c1:f0:29:1b:71:c3:65:5a:6a:09:1e:42:29:53:fd:c3:
42:aa:60:19:ea:a5:9a:17:b6:07:ef:d3:6c:0e:52:8d:17:f9:
d9:ba:75:5a:57:bd:91:05:2a:e4:f9:9b:c3:4a:ec:81:77:a5:
a9:b1:74:4f:5a:fd:03:a2:ad:7e:f1:9c:d8:38:e7:70:5b:13:
c2:8b:52:30:a4:fb:e9:15:f3:eb:54:7d:25:a0:23:17:f6:5c:
9b:c3:8e:70:96:35:ae:dc:d4:07:06:98:56:66:ac:0d:79:fa:
e1:b2:9a:86:2a:b9:94:57:96:5d:06:5f:b8:ca:7a:f7:e9:39:
f2:68:ab:3c:2a:86:f8:c1:b7:32:e1:99:37:40:9c:3a:c4:af:
29:87:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:16 2025 by rpki-client