Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
File: 0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json)
Hash identifier: fvBooHR2Lgws5QJhU9XHT4bP+Zz2eZWXaFvg5gB3wcE=
Subject key identifier: 2C:E3:53:E7:E1:93:7D:99:9C:36:BF:88:47:A3:4C:2B:08:5F:D4:3F
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 0199FE1018ECE529F7FB41F0EFF95B13AEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
Manifest number: 09B0
Signing time: Sun 19 Oct 2025 20:01:31 +0000
Manifest this update: Sun 19 Oct 2025 20:01:31 +0000
Manifest next update: Mon 20 Oct 2025 20:01:31 +0000
Files and hashes: 1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: BFj9qgMEIxoIiPjJj5lGHh/UDWZhwadulKXqqsR4sLA=)
2: 1-8dBe3weDEH5lmPUfaCTy1F_iQ0.roa (hash: Usc03D+6sIRxj8MO/R5pSlLN/4nGI6YHAGwKCty72xE=)
3: 8Jtz1k-aBFN_3eueNbWN2Oh4EPY.roa (hash: fkmGxni8pzpt7FS2NVHazJRzS5r259m4KHbWlWkAsNs=)
4: POa1_1lG2fZrcfZRxbGnmzL6mIU.roa (hash: hZbXwNqNEsVBnStQz74wqfWaYd+uX0JeS3LWv9uiIFs=)
5: XhmVOxeypIhl-8QtBoFXZmkyOfo.roa (hash: NGVstEUWv/DepTwZpuQa7X5iSrpsHNmeXxcUSdEmq9U=)
6: dOb6T3OXGQhPHEiptZe57ohMT40.roa (hash: GPGKsltxe4+qDNQ/6wiIDNbmlS41MFY6pNidlYOqIB8=)
7: hJHifVMBaH30EqpePenT1Sqap70.roa (hash: QomOS52IIn3hGg0bKejEi6GxR/26/6+mZUMxHEwlzCc=)
8: k1JgfKb3srL6aXDXnzvzd4pJb2w.roa (hash: +LhNHAlBDK0qBIHLLIuzyw+Dk5hZ7SHq+3e02Y/fFBg=)
9: p51-PJoT-E47Il5-C4i0wMvLMrQ.roa (hash: v6b35eBQ2NIYxUqWiW7LPB2L21OTBBy59B+EGu/7XOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:18:ec:e5:29:f7:fb:41:f0:ef:f9:5b:13:ae:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Oct 19 20:01:31 2025 GMT
Not After : Oct 20 20:01:31 2025 GMT
Subject: CN=2ce353e7e1937d999c36bf8847a34c2b085fd43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:64:de:f9:72:46:c1:c7:9f:4a:bf:13:8f:
cd:a3:42:73:2c:52:34:be:8e:3a:c9:11:d9:72:27:
cd:ba:e3:e7:1e:7a:8d:34:6f:47:08:95:58:62:ce:
19:16:a4:37:63:90:45:cd:f9:f4:bf:19:e8:69:db:
7d:c8:01:41:91:69:eb:ae:02:fc:5c:13:53:81:01:
68:6e:43:ab:79:02:91:8e:e7:ea:0e:63:59:93:6e:
3e:4d:6f:59:45:ca:02:11:75:31:00:39:26:c8:cb:
63:fa:6d:e4:0b:a4:cd:73:63:c3:dc:40:f6:a0:22:
ec:81:73:76:e9:1b:17:f9:65:58:61:50:98:1d:03:
06:fe:f6:57:82:c7:34:b3:c1:2a:fd:ca:81:9b:6d:
81:80:57:44:ee:58:69:bd:f0:ab:a4:46:5a:05:bd:
75:75:de:bd:e9:cf:ad:76:37:a0:68:2a:dd:d8:cf:
7c:23:c7:77:96:75:06:5a:d2:d6:b1:a5:2c:94:36:
7a:e4:ec:ec:d7:b4:bd:ae:cc:4e:7b:21:9a:99:4f:
66:2c:da:2c:52:23:c9:0e:c7:46:8f:84:50:79:43:
9a:90:d3:cd:f2:2a:bc:69:78:c9:51:15:b1:f2:a6:
17:89:c2:7a:f2:67:83:63:cc:84:5c:f9:91:1d:77:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E3:53:E7:E1:93:7D:99:9C:36:BF:88:47:A3:4C:2B:08:5F:D4:3F
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:62:79:75:93:a8:58:06:c4:c3:14:43:cf:1c:bb:82:2e:3f:
3d:c3:56:e5:1f:7f:b2:45:19:eb:83:e0:b7:19:88:e2:42:a4:
49:fc:ac:4f:e8:7c:47:a3:09:58:7d:b5:fb:94:ad:af:cf:fb:
7b:76:6b:f9:56:a2:97:f8:d6:71:db:0c:56:dc:49:be:46:15:
b0:df:60:7d:80:f7:27:54:8a:3b:1a:50:bb:1a:5a:f4:c3:df:
3d:64:e0:aa:59:17:09:bf:e6:3c:a5:64:98:73:7d:a9:10:d2:
14:73:62:27:b6:44:24:25:d1:5f:09:50:c6:2d:f8:50:7d:dc:
45:5e:06:bd:3f:41:fe:40:87:e8:7d:9e:c8:78:e2:e7:3a:9e:
b2:ab:03:38:0c:d7:8a:62:fd:45:b8:c0:b2:26:63:91:db:1a:
88:9e:b2:ef:dd:bd:2e:49:87:6c:fa:d7:5d:d9:39:5e:a6:97:
86:e6:7a:d9:a0:38:e5:f8:6c:f2:f7:b9:4f:d9:b8:bd:cd:b7:
c9:d3:62:3a:b8:a0:c5:0f:ba:4a:90:db:f3:fd:57:c9:01:01:
cd:e0:d0:de:f6:11:2e:80:46:66:18:74:5f:b5:21:f8:24:ee:
a6:6c:15:aa:e7:62:af:8e:ea:57:f3:b2:1d:32:e9:b2:99:78:
33:6c:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:18:22 2025 by rpki-client