Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json)
Hash identifier: /vUnXJRbOMd+NQimo4ItlXK8v7/RkEf6TisaNduTnfI=
Subject key identifier: 25:FF:5B:CA:D4:1E:15:7B:4F:5B:79:48:35:BF:75:90:E2:33:6C:04
Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Certificate serial: 0199FB7CDE929E57751633B8330265B7C309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: pokCUEMMUJbPY8EtHq8H79+TfJth49Bzx+ArVRELuLY=)
2: UtfGmlfffX0cIYFRWQAmKmCxHBQ.roa (hash: eIoevFtzl4KgjvBzeT/oQJHdGPIhlQ4d3q4XFG6eYig=)
3: pkGGNBdhq4ZpQRqIZMsggNSolf0.roa (hash: y34zQyNQE6Dt9rgo+TKZCABmiXucQM6cXI6cZVCrI5E=)
4: qMKz0iOTV-AipsqG6OSykAqBmcw.roa (hash: evn2bcSDR90liMyPkIBPgdH2fICEje6rbDEpXsqQ5bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:de:92:9e:57:75:16:33:b8:33:02:65:b7:c3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=25ff5bcad41e157b4f5b794835bf7590e2336c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:5c:e2:2f:e5:ed:5d:1e:e7:0d:ee:4d:f8:
a2:c3:20:6d:5a:a5:ef:1c:cf:22:4e:a5:b5:1a:17:
92:03:1f:0b:0d:52:57:1e:9a:fe:dc:5d:ac:6b:5f:
16:00:2a:77:90:d5:a3:04:38:bf:75:e3:df:20:bd:
86:bc:a4:62:f0:ee:7a:26:c5:ae:70:24:ac:7f:60:
4e:46:a5:60:20:61:e8:25:b2:df:07:53:b4:8d:dd:
cb:16:b7:3f:4d:3e:63:bb:a4:24:4e:2b:6d:97:b1:
02:d8:b4:2c:ba:65:12:e4:b0:2a:e8:98:3c:00:85:
70:c6:5b:c9:ef:d9:87:d2:05:cf:37:ef:3e:e4:ee:
84:13:84:f2:eb:cc:83:07:b7:c2:39:e7:8d:08:e2:
f2:61:88:79:62:29:69:22:79:f6:62:96:34:47:0a:
ae:6a:3e:f9:a5:68:17:15:7b:0a:f8:03:f2:40:52:
7f:74:dc:ab:83:9f:f1:36:6e:ad:bc:05:36:59:20:
d4:ce:84:08:dc:36:31:53:cf:92:6c:2e:0a:40:43:
21:26:10:e4:ba:47:05:db:5d:64:00:36:a8:21:6c:
5b:1a:da:a4:13:cd:79:a7:23:6d:8b:94:e7:76:81:
1b:46:23:1a:a8:94:90:cd:b6:19:80:b3:f5:0f:bf:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FF:5B:CA:D4:1E:15:7B:4F:5B:79:48:35:BF:75:90:E2:33:6C:04
X509v3 Authority Key Identifier:
keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c3:99:c5:ec:01:48:00:bd:8c:3d:10:48:16:01:75:cf:ce:
40:af:46:2c:8a:56:83:68:b4:e9:30:12:cc:81:49:11:14:58:
fb:86:60:3c:d9:aa:2a:f9:21:d6:71:e2:36:02:6a:2a:d9:03:
ad:c0:3a:66:fb:3c:36:7f:a8:77:73:a1:f8:a1:1c:24:1c:33:
e1:2d:6f:8f:1a:a4:d7:19:76:17:52:10:58:4c:58:c7:4e:c7:
cb:75:52:7d:73:e6:27:d6:22:54:f4:91:d7:b7:53:c7:0f:76:
93:5b:ee:71:19:9c:ad:f2:21:2f:51:f0:db:b5:8c:76:50:b3:
68:f0:2d:6c:1f:2f:b4:07:33:57:b1:10:d5:08:18:3c:dd:cf:
1b:db:fc:6b:99:21:f9:82:17:75:5a:62:65:25:49:14:e5:2f:
2b:1d:30:74:66:a4:f2:1b:93:60:3f:0c:93:9a:72:ae:d8:07:
bc:90:a2:f6:92:e5:bf:77:64:e3:05:3b:0f:20:c8:ee:33:60:
4c:66:8c:2d:0e:84:44:2b:a7:2f:30:de:48:ed:78:a6:20:7e:
74:11:a7:e8:f4:80:55:c0:d5:cc:f1:f6:d7:87:1e:96:ef:a0:
0a:67:4a:cf:16:28:63:cb:8a:41:ce:c5:ce:8e:11:c0:82:16:
02:ec:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:42 2025 by rpki-client