Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File: 0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier: f80BSWX2BW/F/5jk6Rv4o7hBGlnzMMUu5gpd9tUWObw=
Subject key identifier: 27:19:16:1C:86:6A:17:47:C4:84:BB:CA:04:EF:44:8A:95:D8:C6:99
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial: 0199FFC7AE457A4EE9166AAC7AF2A9C0BCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number: 0879
Signing time: Mon 20 Oct 2025 04:01:40 +0000
Manifest this update: Mon 20 Oct 2025 04:01:40 +0000
Manifest next update: Tue 21 Oct 2025 04:01:40 +0000
Files and hashes: 1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: gsL+c1EoRTLtMm/FSys0hcYfWG6iAui95O26Fzdwb/w=)
2: 5kBRIytnJyvZSwOvYDew9C5v8g8.roa (hash: vyD1EDIJkExeSnXzO8jxWYNY6MqP1zOjQuUSZZBKDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ae:45:7a:4e:e9:16:6a:ac:7a:f2:a9:c0:bc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Validity
Not Before: Oct 20 04:01:40 2025 GMT
Not After : Oct 21 04:01:40 2025 GMT
Subject: CN=2719161c866a1747c484bbca04ef448a95d8c699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:4c:69:56:85:4f:d1:19:90:9a:56:ed:bb:
b2:91:b3:16:6b:2a:a9:b9:8a:c5:df:2e:0d:be:1b:
74:f0:c2:98:4a:c9:1e:3b:5b:54:84:9a:ea:3c:68:
7c:3e:5c:09:38:42:f7:cb:0c:2d:0b:23:22:d3:b9:
48:2f:cd:70:b3:f6:73:0f:71:e7:ef:53:72:d1:49:
bf:f3:0f:ea:e0:14:ea:72:57:55:3d:a8:6a:15:5c:
ce:04:fb:96:2c:bd:f6:18:cd:8e:c4:48:bc:ab:aa:
15:22:2f:ce:48:c2:ed:19:3a:b7:c7:4f:4f:f2:1b:
80:f8:20:af:94:1f:04:b6:8e:fb:87:b2:94:d0:0c:
08:5f:4e:88:ca:15:fa:90:64:f1:e9:81:ee:7e:35:
33:e5:69:2f:1b:2b:67:1a:0a:12:2b:d5:3f:2d:46:
5b:c8:21:df:6d:6a:68:60:b0:25:8e:d1:da:d7:e4:
91:c0:9e:a7:c2:85:7b:e5:6d:9b:1c:27:88:02:fe:
36:fc:3f:ea:d1:b7:f5:2c:97:e6:8e:00:31:67:40:
b8:26:44:e2:84:89:4c:65:a6:66:07:5b:01:38:21:
36:a4:47:33:e0:aa:ff:78:fa:eb:e6:28:cf:79:7b:
b0:14:ae:d1:00:38:f6:87:b7:e5:da:8e:9a:d3:65:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:19:16:1C:86:6A:17:47:C4:84:BB:CA:04:EF:44:8A:95:D8:C6:99
X509v3 Authority Key Identifier:
keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6b:a4:6e:b1:17:00:92:e1:b6:32:6c:d7:5c:aa:60:11:7a:
4c:ae:fa:67:02:28:04:13:09:49:2b:13:52:9b:f9:bf:35:13:
ad:9d:44:d9:c4:25:32:ba:06:1d:11:bc:e7:a0:54:b9:fc:c5:
fa:09:bc:81:a7:93:4c:6e:ad:0d:1c:9c:5c:fd:c9:66:87:eb:
58:a6:ff:b6:95:b6:32:58:bb:2f:ed:56:bf:2e:a9:06:4b:bf:
8f:0f:6d:3b:f2:ba:c3:22:c8:02:ff:a9:c8:04:fa:8f:60:12:
f1:85:a6:79:4e:cc:64:d4:aa:49:51:f3:4b:31:78:23:12:15:
e9:5e:f6:00:9f:04:d8:fb:4c:74:62:f1:2b:00:70:3b:c0:58:
f5:dc:08:62:0d:83:20:ac:9d:8d:ba:51:f7:80:a7:59:d1:c5:
60:d6:2a:87:05:5f:f9:b7:a6:5b:66:17:f5:bf:f7:48:c3:a7:
68:cd:34:99:2c:49:e2:80:6d:7d:ef:44:9f:bd:27:22:a5:24:
79:d3:f7:5d:63:8f:51:13:d0:ec:cd:08:ad:27:d7:2d:8c:72:
54:97:d9:c5:40:81:1a:4d:64:c5:51:8e:3e:31:bd:6e:e8:78:
4f:0f:46:90:3a:8c:b5:44:c2:fb:73:a5:e4:df:25:bd:8c:54:
93:4c:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:25 2025 by rpki-client